
$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e392e38382e302f32322d3234203d3e203532363839.roa
File: 3230302e392e38382e302f32322d3234203d3e203532363839.roa (raw, json)
Hash identifier: 3EFXWI8z99LFls8jbSEzmfbmJqCYOLGCDz3xMDvscu8=
Subject key identifier: 02:61:31:19:7A:D5:2B:62:B1:BD:B0:0D:2D:99:DE:32:C5:85:BF:61
Certificate issuer: /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
Certificate serial: 0B7C7018245B7D56D18119F2BFC74E50EBD76EE1
Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e392e38382e302f32322d3234203d3e203532363839.roa
Signing time: Fri 30 Jan 2026 15:48:11 +0000
ROA not before: Fri 30 Jan 2026 15:43:11 +0000
ROA not after: Fri 29 Jan 2027 15:48:11 +0000
asID: 52689
IP address blocks: 200.9.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl
rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 20:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7c:70:18:24:5b:7d:56:d1:81:19:f2:bf:c7:4e:50:eb:d7:6e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
Validity
Not Before: Jan 30 15:43:11 2026 GMT
Not After : Jan 29 15:48:11 2027 GMT
Subject: CN=026131197AD52B62B1BDB00D2D99DE32C585BF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:1f:7e:41:64:72:08:62:17:5a:28:16:dc:
9a:c2:39:23:31:0a:37:74:1c:30:4e:43:88:d8:e1:
98:07:7a:e9:75:e8:07:4c:95:4d:dc:c2:58:c8:a0:
bf:1f:5d:94:ae:38:24:fd:b0:c8:24:01:cd:04:2f:
72:26:21:ba:69:e6:7d:ff:0c:1f:75:1d:01:78:ef:
e7:9b:ba:45:c3:ba:ff:d4:7a:b3:37:4e:5b:72:0c:
fa:33:1e:44:fd:2f:22:20:74:da:84:da:66:56:23:
21:a5:8f:fc:3e:28:85:58:3d:37:c9:26:a8:11:69:
a5:e4:84:38:c6:40:4f:72:4f:f9:e0:79:90:f0:70:
22:ae:f1:6e:01:f9:e6:2c:33:51:32:f5:49:87:4b:
af:63:24:5f:a5:19:37:2a:fc:1a:02:3d:61:4b:a3:
9c:dc:30:72:bf:ba:ac:06:5e:91:1b:48:3c:d0:7a:
e6:1c:4f:fc:18:2a:82:b9:20:bf:c7:e7:de:6f:c3:
75:a4:8c:1e:7c:e2:a8:28:f1:6a:9d:c8:63:8f:be:
0f:39:3d:ff:7b:42:6c:4d:6b:9e:86:4f:dd:aa:ca:
ef:9b:3a:ff:13:f7:9a:ef:35:5f:3a:bd:3b:84:14:
39:6c:56:d6:eb:fb:73:92:44:01:b9:1a:c9:1a:19:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:31:19:7A:D5:2B:62:B1:BD:B0:0D:2D:99:DE:32:C5:85:BF:61
X509v3 Authority Key Identifier:
keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e392e38382e302f32322d3234203d3e203532363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:07:82:26:ab:d0:16:10:49:13:ea:11:c9:9c:85:86:d1:a2:
4d:5e:b8:8a:07:4e:41:96:e0:59:41:44:2c:57:55:b6:ce:db:
e0:23:90:69:f4:cf:c4:e5:6d:de:c6:2f:8b:b9:7d:7b:59:66:
36:98:10:01:76:d4:55:f2:a6:32:ab:22:2f:87:98:9e:94:60:
9c:4e:cb:77:76:2f:32:ab:d4:ab:27:8f:3a:37:c0:a2:a3:1b:
60:01:37:09:6d:c4:26:b0:63:b4:ca:d1:de:ce:f4:04:7c:5f:
85:21:ce:bb:15:a9:b6:63:cd:4d:59:2e:bb:00:51:2c:06:2d:
d6:08:99:0d:ae:c7:3d:ee:db:21:fa:80:f3:4f:26:89:f7:6c:
6c:26:8a:6b:f6:5d:67:0c:1e:ba:26:83:55:66:5b:23:87:8a:
e7:bb:7a:15:2f:fc:77:5c:10:96:52:6d:bb:2d:a0:8a:ac:96:
f4:9e:62:70:19:88:e9:c3:0e:9b:4c:d3:9c:1b:be:51:6d:18:
54:23:be:08:80:81:86:a6:55:b9:ee:b8:05:fe:7b:ee:06:bd:
44:3f:41:f1:02:0e:16:4a:fe:01:9e:fb:44:a5:f9:cf:b6:49:
8d:41:30:56:69:78:25:33:93:56:4d:9e:e5:90:fb:2b:b0:86:
f4:02:5f:05
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUC3xwGCRbfVbRgRnyv8dOUOvXbuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1OTZGMzFGNkNGRTU3MDc4QjEzMDNFNjhGRUJERUVF
QUY5NkRERTAeFw0yNjAxMzAxNTQzMTFaFw0yNzAxMjkxNTQ4MTFaMDMxMTAvBgNV
BAMTKDAyNjEzMTE5N0FENTJCNjJCMUJEQjAwRDJEOTlERTMyQzU4NUJGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6x9+QWRyCGIXWigW3JrCOSMx
Cjd0HDBOQ4jY4ZgHeul16AdMlU3cwljIoL8fXZSuOCT9sMgkAc0EL3ImIbpp5n3/
DB91HQF47+ebukXDuv/UerM3TltyDPozHkT9LyIgdNqE2mZWIyGlj/w+KIVYPTfJ
JqgRaaXkhDjGQE9yT/ngeZDwcCKu8W4B+eYsM1Ey9UmHS69jJF+lGTcq/BoCPWFL
o5zcMHK/uqwGXpEbSDzQeuYcT/wYKoK5IL/H595vw3WkjB584qgo8WqdyGOPvg85
Pf97QmxNa56GT92qyu+bOv8T95rvNV86vTuEFDlsVtbr+3OSRAG5GskaGRKrAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUAmExGXrVK2KxvbANLZneMsWFv2EwHwYDVR0j
BBgwFoAUjllvMfbP5XB4sTA+aP697ur5bd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQz
dGkvMC84RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTk2RjMxRjZDRkU1NzA3
OEIxMzAzRTY4RkVCREVFRUFGOTZEREUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk0OGlEMmg4WHZ3a2lCTkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAv
MzIzMDMwMmUzOTJlMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzNjM4
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALICVgwDQYJKoZIhvcNAQELBQADggEBAHsHgiar0BYQSRPq
EcmchYbRok1euIoHTkGW4FlBRCxXVbbO2+AjkGn0z8Tlbd7GL4u5fXtZZjaYEAF2
1FXypjKrIi+HmJ6UYJxOy3d2LzKr1Ksnjzo3wKKjG2ABNwltxCawY7TK0d7O9AR8
X4UhzrsVqbZjzU1ZLrsAUSwGLdYImQ2uxz3u2yH6gPNPJon3bGwmimv2XWcMHrom
g1VmWyOHiue7ehUv/HdcEJZSbbstoIqslvSeYnAZiOnDDptM05wbvlFtGFQjvgiA
gYamVbnuuAX+e+4GvUQ/QfECDhZK/gGe+0Sl+c+2SY1BMFZpeCUzk1ZNnuWQ+yuw
hvQCXwU=
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:59:03 2026 by rpki-client