
$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231352e302f32342d3234203d3e20323639303338.roa
File: 3137302e3234352e3231352e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier: tDxlonAgSfdx2UHgbdIHHQaCWv13EwjBDng/zfqshzQ=
Subject key identifier: 30:5D:3F:E6:97:35:E2:F7:CA:07:2F:1B:AC:17:3D:11:1F:67:D9:8D
Certificate issuer: /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial: 08F3D07FC43D7096B4B222DF46352F1F93022932
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231352e302f32342d3234203d3e20323639303338.roa
Signing time: Mon 06 Apr 2026 20:16:11 +0000
ROA not before: Mon 06 Apr 2026 20:11:11 +0000
ROA not after: Mon 05 Apr 2027 20:16:11 +0000
asID: 269038
IP address blocks: 170.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 03:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f3:d0:7f:c4:3d:70:96:b4:b2:22:df:46:35:2f:1f:93:02:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Validity
Not Before: Apr 6 20:11:11 2026 GMT
Not After : Apr 5 20:16:11 2027 GMT
Subject: CN=305D3FE69735E2F7CA072F1BAC173D111F67D98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:dc:fc:d7:44:9a:8f:36:c8:0a:88:74:59:
30:72:42:8c:11:46:f9:4c:d7:30:05:2c:a3:b6:4e:
36:b0:16:be:9e:cf:b4:4a:c7:ca:26:e3:b4:1d:c4:
7b:6f:0a:b0:a1:4c:9a:df:dc:73:fb:e7:8a:2c:a3:
ed:18:c7:60:2e:db:29:47:c8:ff:b2:91:a4:e8:58:
ed:0c:5f:f6:6a:84:b2:b5:cc:e0:34:a1:bc:72:71:
23:9b:7f:1c:ab:cc:ba:24:9a:6d:53:f1:c4:3b:2a:
68:5d:31:c2:a2:40:b6:49:c6:97:76:f6:1b:06:5c:
09:af:0d:2c:7a:9b:04:57:a6:26:87:e6:b7:9a:5c:
a0:f7:97:ef:d8:ba:f8:06:08:a2:a6:d2:b3:f7:eb:
de:f0:34:a5:85:fe:3c:fb:26:e4:51:9a:78:3a:a1:
87:30:2a:d3:77:0a:d6:93:32:83:c8:0e:df:2e:57:
2b:55:63:2a:18:89:cc:ab:94:d2:34:f7:f9:fc:4e:
34:a9:b7:3f:24:58:25:a3:76:8d:70:13:d6:b4:73:
b1:27:ad:9b:1a:8d:ca:d8:6b:c4:e4:7a:29:a3:60:
2b:4a:79:82:e6:78:49:df:a7:35:7d:97:e5:57:4b:
6a:27:44:b8:ca:df:cf:cd:ed:aa:24:62:52:45:b3:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:3F:E6:97:35:E2:F7:CA:07:2F:1B:AC:17:3D:11:1F:67:D9:8D
X509v3 Authority Key Identifier:
keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231352e302f32342d3234203d3e20323639303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:73:02:5e:58:43:c1:48:14:97:e3:31:4e:67:f3:80:15:e3:
12:0d:5c:4f:8c:36:33:05:c4:de:f0:af:d3:00:3e:97:78:53:
66:96:09:71:d2:66:c0:e0:a8:ca:53:47:96:0f:33:0c:e6:14:
0c:16:8b:91:91:14:93:0a:98:af:52:8c:e5:d9:d9:b6:63:9e:
37:3a:74:a7:95:e5:a6:7f:89:3c:a8:cb:f6:bf:cc:d2:a1:2d:
ee:3f:8e:ff:2d:95:3b:8a:8c:33:5c:cd:54:da:83:a1:39:85:
00:2e:d2:a5:13:e1:8a:64:01:b0:cf:fa:28:35:00:0e:37:08:
d6:a7:bc:06:a4:ec:95:ce:38:f4:1b:af:ad:44:b9:46:bf:01:
03:4e:d9:88:a6:c3:53:17:41:52:1a:95:72:5d:21:3e:ae:d1:
22:d8:af:ad:10:97:0e:dd:e6:b2:4a:87:86:ca:b3:58:97:19:
8e:93:15:58:85:f8:ac:39:01:f2:60:06:0b:5a:8e:3a:54:f6:
d9:cb:e8:f5:a4:ef:c0:01:90:8c:6c:e7:64:b2:ac:69:63:4e:
3f:65:43:c3:73:70:ab:89:b2:7d:58:2a:d6:b9:ac:f1:11:36:
96:81:1f:97:5d:84:4c:f8:5e:34:25:a1:f3:35:6a:09:b7:dc:
1f:4c:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:55:53 2026 by rpki-client