
$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa
File: 3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa (raw, json)
Hash identifier: 3y2LSxTIclQbf1KN9T68zll5RHy3ipAJVd/PG0I/bT8=
Subject key identifier: BC:1E:E1:1B:02:85:30:2E:8D:E4:04:68:B7:83:97:47:1C:1A:8F:DC
Certificate issuer: /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial: 4557C5F3F4C23E950C6128476C5498CB75BAC898
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa
Signing time: Thu 30 Jul 2026 17:59:26 +0000
ROA not before: Thu 30 Jul 2026 17:54:26 +0000
ROA not after: Thu 29 Jul 2027 17:59:26 +0000
asID: 264025
IP address blocks: 143.137.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 21:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:57:c5:f3:f4:c2:3e:95:0c:61:28:47:6c:54:98:cb:75:ba:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Validity
Not Before: Jul 30 17:54:26 2026 GMT
Not After : Jul 29 17:59:26 2027 GMT
Subject: CN=BC1EE11B0285302E8DE40468B78397471C1A8FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:3a:96:39:5d:c7:40:07:d3:af:8e:0d:9b:
3f:fe:8b:54:ec:1e:a3:83:31:00:4c:82:4f:99:02:
cd:07:c1:30:5f:5d:12:87:e1:88:54:36:c9:65:d2:
01:3c:af:04:dc:8c:fd:6f:48:4b:d5:fa:62:da:08:
b6:01:21:36:bd:c3:a6:da:84:44:01:7a:df:10:78:
f4:99:97:f9:3d:63:de:0f:05:cc:52:fe:2c:73:ae:
a0:07:9a:b5:26:54:dd:c7:a2:98:9f:35:7e:96:09:
05:9d:b4:8a:85:0f:71:38:00:80:d9:9b:33:10:ef:
db:e0:4e:8a:c3:4a:08:3d:84:ee:a2:6e:e7:9a:f0:
bb:69:ca:d3:d5:e9:55:84:a6:db:f8:66:7f:25:3d:
d8:8c:8f:35:b6:40:57:e2:cb:a7:4d:85:6f:9c:dc:
db:4a:5c:51:70:2e:f0:90:96:d8:5a:35:c1:b1:f3:
24:f4:3d:e9:28:31:25:b2:16:e6:7f:52:b6:d4:8e:
cb:59:3d:96:5d:2c:e8:16:a5:0b:0e:b0:73:52:37:
30:68:0c:e5:f2:6a:c3:19:3b:68:c8:39:58:68:77:
fc:4a:23:02:ed:6f:ad:00:c0:f3:61:b4:f0:02:28:
99:d5:0e:8e:70:ab:e9:d8:c2:3b:e1:4b:19:30:16:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:E1:1B:02:85:30:2E:8D:E4:04:68:B7:83:97:47:1C:1A:8F:DC
X509v3 Authority Key Identifier:
keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33342e302f32332d3233203d3e20323634303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.34.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d5:db:46:38:87:6d:41:e4:bb:27:3b:49:a0:70:02:23:6b:
6d:65:e5:14:78:32:c2:0e:b2:8b:3f:ec:45:bc:45:20:d1:cd:
b3:81:c0:d3:16:95:1f:11:8c:ac:be:cb:f1:70:ad:85:74:51:
75:d0:03:f4:93:cd:30:3a:67:3d:ba:e9:5d:a3:e7:f3:93:e5:
92:68:65:5a:96:8c:6a:8d:ac:46:80:f2:13:cc:55:9f:35:50:
fe:60:45:01:a8:90:61:21:1a:03:bf:23:4a:5e:3c:14:44:fe:
ba:c8:9c:83:f4:60:9b:a6:bf:11:a2:75:4d:b6:01:2e:88:3f:
d1:5a:d9:26:36:0f:3b:46:60:06:36:71:9e:be:81:6a:88:34:
cf:2f:aa:e0:3b:f0:e6:49:be:f1:6d:28:1b:e2:f9:97:6c:34:
40:ab:ca:63:2c:21:fc:6f:b1:ea:31:f4:3f:e4:49:7d:89:bb:
26:aa:53:72:a5:f1:24:a0:d4:8b:28:92:c2:12:9a:f4:85:77:
49:d2:e8:dc:ef:e9:8f:f1:cb:11:a8:6a:9c:ce:b8:56:66:1c:
2e:84:15:53:be:73:2c:99:93:f5:cd:56:5c:46:8b:65:8d:d2:
67:3c:45:9c:38:b3:6e:71:10:5f:61:8c:88:1d:34:0d:28:3c:
20:d1:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:37:29 2026 by rpki-client