
$ rpki-client -vvvf rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133332e302f32342d3234203d3e20323735373235.roa
File: 3137372e32332e3133332e302f32342d3234203d3e20323735373235.roa (raw, json)
Hash identifier: shzgKip+cq+vchRk3XPbMOSARsy6CXr+NdlxG+5RuF8=
Subject key identifier: CA:E7:43:DE:BA:69:5F:79:B4:67:86:53:ED:86:7C:83:DF:75:CC:4E
Certificate issuer: /CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Certificate serial: 45657E754E7C1F6171B038FDB2E15E8512AAA1E8
Authority key identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133332e302f32342d3234203d3e20323735373235.roa
Signing time: Wed 02 Sep 2026 18:04:33 +0000
ROA not before: Wed 02 Sep 2026 17:59:33 +0000
ROA not after: Wed 01 Sep 2027 18:04:33 +0000
asID: 275725
IP address blocks: 177.23.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 14:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:65:7e:75:4e:7c:1f:61:71:b0:38:fd:b2:e1:5e:85:12:aa:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Validity
Not Before: Sep 2 17:59:33 2026 GMT
Not After : Sep 1 18:04:33 2027 GMT
Subject: CN=CAE743DEBA695F79B4678653ED867C83DF75CC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:68:61:20:c4:da:5e:81:45:19:a1:51:aa:
ae:ba:28:48:ae:af:e4:de:2e:d6:3a:71:60:fb:30:
24:39:d1:66:01:b6:c9:60:ba:01:c0:0e:d8:c0:57:
1c:80:d2:02:b0:5f:05:31:89:39:0b:69:73:53:a4:
72:99:87:2e:19:0f:e9:c1:e5:0d:f9:a5:61:fa:15:
c6:eb:01:7e:ef:5b:94:bf:99:dd:2e:85:ba:83:7c:
6c:cc:97:20:25:54:32:72:09:e8:cd:8e:02:de:05:
89:de:0d:a2:3c:8d:78:70:e2:a3:28:6c:e7:28:0c:
2d:57:d9:7b:98:70:ac:62:a0:e5:98:68:d4:95:2e:
92:eb:19:07:35:4a:15:e8:c8:7d:9d:8d:8d:28:da:
2e:8b:24:8d:7c:aa:48:ba:14:e6:2a:39:b7:71:85:
09:86:f0:5f:15:07:7b:54:5a:af:4c:9d:d5:29:2c:
94:43:f1:80:56:0d:91:f8:f6:9e:87:45:a7:ea:51:
07:3d:52:d8:74:02:47:07:44:db:e6:ac:ba:cd:79:
bb:46:21:46:b3:23:92:5b:0e:7a:5c:31:76:66:33:
46:6d:50:6c:bf:db:7b:2d:87:94:17:2e:de:00:0c:
bb:16:92:10:ed:9a:cb:cc:be:57:e6:a0:15:e7:4b:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:43:DE:BA:69:5F:79:B4:67:86:53:ED:86:7C:83:DF:75:CC:4E
X509v3 Authority Key Identifier:
keyid:0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133332e302f32342d3234203d3e20323735373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.23.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f2:ad:e1:70:51:3d:03:77:78:ae:d0:4b:5e:61:cb:cf:75:
03:d3:50:68:85:42:e5:cd:f3:09:04:ea:56:db:ac:24:1d:a7:
42:68:a0:fa:14:3a:80:2c:8b:11:64:db:2c:2f:e0:36:75:00:
6f:aa:ed:40:e1:84:91:0b:98:7a:51:48:65:7e:9e:24:7b:45:
c9:6e:77:43:42:8b:fe:15:17:fb:c1:17:61:87:ee:b8:5a:3f:
32:5a:fc:b1:8e:53:db:ac:6d:f8:e3:41:55:8a:e6:58:78:65:
1e:a8:6f:64:91:fe:7a:09:d3:6a:10:2a:fe:d4:e8:6a:03:ea:
45:bd:27:f4:30:63:84:a6:d1:c4:db:ed:44:2e:11:4b:ec:57:
b1:9c:3a:bc:f8:56:95:9a:4e:4f:02:d6:ea:fb:b4:3e:ec:69:
e5:80:d8:c2:4c:17:8c:1d:9d:7c:ce:fe:5c:65:ff:c2:d4:5f:
5b:7a:1c:2e:f0:2e:d9:28:a5:e8:5e:c8:ca:53:9a:da:ac:70:
e3:85:fa:d1:35:8a:ab:db:11:9a:36:77:c1:19:43:8e:6c:8e:
29:cc:76:c4:f3:95:2d:9d:d4:48:02:1d:a8:a5:80:90:4e:ee:
27:83:e2:6a:d2:fb:c5:42:a6:2f:04:30:d4:5d:d4:21:2e:76:
15:58:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:39:54 2026 by rpki-client