
$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136302e302f32342d3234203d3e20323633353038.roa
File: 3139312e3234332e3136302e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier: IZUSnkMvKCyclsPyVhOE7tveXt/4ed4fOxiK87LrY+0=
Subject key identifier: 36:B3:58:F3:E5:A3:CC:55:9B:E9:EF:AB:D9:2E:E8:41:20:A0:D9:B0
Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial: 5C3EBC497FC7A6A4FAA0E7ED5A83FFAD7E06753F
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136302e302f32342d3234203d3e20323633353038.roa
Signing time: Thu 29 Jan 2026 16:18:14 +0000
ROA not before: Thu 29 Jan 2026 16:13:14 +0000
ROA not after: Thu 28 Jan 2027 16:18:14 +0000
asID: 263508
IP address blocks: 191.243.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 24 Feb 2026 03:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3e:bc:49:7f:c7:a6:a4:fa:a0:e7:ed:5a:83:ff:ad:7e:06:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Validity
Not Before: Jan 29 16:13:14 2026 GMT
Not After : Jan 28 16:18:14 2027 GMT
Subject: CN=36B358F3E5A3CC559BE9EFABD92EE84120A0D9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:c3:64:a5:38:20:70:9f:70:31:ba:e3:8c:
35:a6:2b:7f:e9:f4:e0:89:5e:9c:ae:30:c5:c8:98:
50:33:98:16:be:66:db:d8:5a:99:8d:2b:72:15:fe:
96:75:f0:31:d4:6c:dd:89:0d:b2:e8:f1:40:8e:da:
a4:fd:76:c4:f9:5a:4b:fc:d7:6a:c8:2a:42:74:14:
e5:a8:b3:08:d7:6e:ba:b0:15:ea:68:f2:16:94:89:
8e:31:c8:db:74:75:c3:1f:04:05:68:21:6a:3f:3a:
78:e5:15:57:fe:e1:53:81:30:20:c5:a6:62:75:15:
d8:6c:0c:f3:ab:47:7f:bd:06:80:a7:fd:9f:8b:af:
35:23:df:76:fc:7a:14:4f:84:f8:62:f6:44:26:be:
75:1d:c8:4a:6b:f7:32:7b:3e:57:88:f0:ba:be:5e:
f3:4f:f3:7a:df:ac:b6:bf:b7:ae:38:2c:d2:81:33:
cc:50:fe:68:f1:20:f7:62:6c:67:dc:58:c5:8b:e3:
44:13:1d:d1:85:bd:2f:8f:60:5c:44:40:89:5c:a3:
81:cc:f3:bc:b7:d5:fc:54:dd:2b:91:c8:a4:3d:39:
c8:16:cd:9e:94:0b:23:c8:68:3c:c7:0b:30:eb:52:
76:b9:ee:a0:ec:e1:f1:a0:58:41:88:72:a1:a6:ff:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:58:F3:E5:A3:CC:55:9B:E9:EF:AB:D9:2E:E8:41:20:A0:D9:B0
X509v3 Authority Key Identifier:
keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136302e302f32342d3234203d3e20323633353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b8:4b:9c:0c:83:0b:9b:41:c7:f9:08:24:62:d9:6d:8d:cd:
5b:f6:d8:a2:5b:fd:f1:26:9d:f8:ee:95:2d:6b:92:07:27:aa:
34:b7:f2:d2:16:9a:80:1c:21:41:04:a1:d7:12:c6:a2:66:7c:
1a:19:8a:b0:ff:31:96:e0:fd:ab:0c:aa:6a:4a:39:39:2e:bd:
51:01:8a:f8:c3:c5:bf:e1:63:4a:a1:75:41:92:af:b4:a8:25:
75:0c:8e:85:f2:6c:47:73:fa:fa:77:fd:6e:33:63:23:dc:cf:
9b:51:14:1a:a4:62:81:05:18:23:95:63:5e:68:9b:b1:68:6d:
95:75:c3:88:f3:07:35:58:a0:4b:a0:8d:37:d3:cd:d4:1c:42:
ff:4e:59:6a:4d:94:3c:4d:98:57:d0:c2:cf:fa:89:80:ed:ed:
36:80:f4:82:af:63:82:5c:c1:b5:5b:fd:8c:8a:6a:9f:8a:b5:
2a:35:bd:a7:00:13:b7:3d:55:d1:52:38:f6:0d:f2:be:ee:d7:
6b:22:5e:fb:8f:2b:19:1e:0b:2a:15:a0:7b:7b:33:1d:8b:6e:
95:ad:a5:d9:07:c8:7b:90:62:3d:14:c3:9f:f6:bc:af:22:15:
c5:de:2a:68:f7:16:79:2f:64:fd:f2:9b:e5:e6:3f:cb:c2:73:
3e:ce:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:53:55 2026 by rpki-client