
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32332d3234203d3e203238313834.roa
File: 3138392e38392e37302e302f32332d3234203d3e203238313834.roa (raw, json)
Hash identifier: fJrNe8coEnRQc0HeP/qLFPuWU+1odgP2w4M4h1JPy0U=
Subject key identifier: EA:75:B5:DD:18:0E:90:79:45:D4:E7:34:2D:84:B6:74:82:7D:C7:F5
Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial: 40D8E06C8A3EA73B9891812FF222FFEFA82D77B3
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32332d3234203d3e203238313834.roa
Signing time: Thu 29 Jan 2026 12:09:02 +0000
ROA not before: Thu 29 Jan 2026 12:04:02 +0000
ROA not after: Thu 28 Jan 2027 12:09:02 +0000
asID: 28184
IP address blocks: 189.89.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 13:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d8:e0:6c:8a:3e:a7:3b:98:91:81:2f:f2:22:ff:ef:a8:2d:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Validity
Not Before: Jan 29 12:04:02 2026 GMT
Not After : Jan 28 12:09:02 2027 GMT
Subject: CN=EA75B5DD180E907945D4E7342D84B674827DC7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a2:22:d1:6e:89:12:75:c6:83:5b:80:23:ec:
24:a2:15:ad:50:6f:86:17:13:40:77:6e:b7:d4:03:
2c:03:bf:df:35:41:19:19:60:0c:d6:39:7f:4b:a2:
d6:f2:45:8a:f7:67:d5:78:ab:44:fd:91:35:42:79:
60:38:d4:17:1c:98:ce:c3:49:f3:21:42:c1:d1:be:
60:83:d4:ec:03:86:12:c1:eb:b0:2b:90:93:b1:34:
55:69:22:73:d8:05:89:86:39:6c:dc:c5:c3:4c:5d:
f7:39:07:c3:a3:89:33:9f:58:55:c3:19:2e:3d:b7:
0e:18:17:3e:f0:72:a1:09:14:82:a6:a5:2f:20:b0:
58:4a:26:cf:7f:e0:64:cc:8f:c4:98:2c:27:23:47:
d0:31:43:d3:36:92:f2:fb:ce:32:bc:41:c1:89:52:
df:02:0d:6b:7f:59:6f:aa:10:b1:f5:25:27:06:de:
2f:c8:4a:56:d7:e2:ac:67:4a:06:33:d1:9e:9f:9c:
ef:f7:4f:f6:53:3c:31:cb:de:ca:23:69:2c:cb:2e:
e5:2f:62:a6:5b:53:35:19:8c:b2:3b:91:85:6d:1a:
02:51:cf:27:42:e0:2a:26:4c:aa:8a:89:69:bd:16:
1a:97:13:cf:d9:a1:8a:d9:f1:db:38:f9:04:ff:26:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:B5:DD:18:0E:90:79:45:D4:E7:34:2D:84:B6:74:82:7D:C7:F5
X509v3 Authority Key Identifier:
keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37302e302f32332d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.70.0/23
Signature Algorithm: sha256WithRSAEncryption
86:48:84:2f:b1:29:0f:8a:4e:f3:1e:f9:aa:8d:f0:6b:0b:3a:
44:e9:5f:bc:69:ac:5e:bb:9b:14:b1:01:ee:c4:25:a8:d2:26:
25:8a:7a:49:4a:99:94:24:4f:ed:5f:e9:92:70:32:04:37:52:
ce:64:67:e4:03:89:d1:11:df:cf:df:09:d8:df:f4:90:9c:c9:
e0:52:e4:7d:3e:94:ca:2b:ed:d1:8b:72:b1:3b:c9:6c:d3:53:
f8:fe:1f:3e:de:c7:2f:6c:a5:52:a1:10:3f:6c:e3:8a:f8:c1:
49:33:19:15:5a:f5:e0:40:e2:73:e5:db:ad:36:a2:ef:4a:03:
39:00:5b:6c:3a:b0:0b:e6:cc:d6:f4:a5:a4:be:e2:5b:e5:08:
f5:21:d8:8b:c4:7a:73:6d:24:1e:ec:b7:ee:de:7d:9f:19:38:
4e:6f:9c:8e:26:d4:b0:3b:4b:33:6f:6c:91:dd:a2:6e:86:d8:
23:e4:9e:63:0a:59:42:cb:90:ae:94:58:53:2f:6f:d1:0c:8d:
6e:65:0a:84:28:22:2e:ab:8b:c2:fc:e6:fb:19:80:a0:55:34:
d7:6a:ef:23:fb:6b:f5:3c:f0:9f:16:47:5f:8b:f9:f9:57:e1:
10:57:f9:1a:d1:82:95:10:68:09:dc:91:60:12:ec:90:38:a0:
7e:dd:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:59 2026 by rpki-client