
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3139312e3235332e33322e302f32312d3332203d3e203238363439.roa
File: 3139312e3235332e33322e302f32312d3332203d3e203238363439.roa (raw, json)
Hash identifier: RlJqtavXnhZeJGixcLxoqwojvI2QwJ87m+x/YPD8rAc=
Subject key identifier: 69:DE:94:1A:6D:BC:30:FC:C5:98:CC:ED:FB:E0:D3:62:77:E6:5A:12
Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial: 2162CDBD0D8C96B2AD163421BDC8F0CCEE7304AE
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3139312e3235332e33322e302f32312d3332203d3e203238363439.roa
Signing time: Fri 15 Aug 2025 20:31:15 +0000
ROA not before: Fri 15 Aug 2025 20:26:15 +0000
ROA not after: Fri 14 Aug 2026 20:31:15 +0000
asID: 28649
IP address blocks: 191.253.32.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:62:cd:bd:0d:8c:96:b2:ad:16:34:21:bd:c8:f0:cc:ee:73:04:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Validity
Not Before: Aug 15 20:26:15 2025 GMT
Not After : Aug 14 20:31:15 2026 GMT
Subject: CN=69DE941A6DBC30FCC598CCEDFBE0D36277E65A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:cb:b8:a6:d5:31:a2:2f:5b:8e:31:54:09:
72:98:34:36:51:5f:c0:a8:82:41:c7:91:b4:2b:af:
b0:5f:2a:92:ad:55:ca:1a:98:d0:91:3a:50:4a:92:
13:4d:d8:cb:d9:73:26:a5:ef:fc:de:4c:2c:bd:b0:
ad:24:9a:47:51:dd:da:f5:55:8b:9d:b9:80:21:a3:
08:6b:63:b1:66:11:9d:b0:eb:50:a2:38:da:1c:57:
eb:4a:64:51:10:40:4a:e3:98:a9:89:1f:3f:f5:44:
f5:06:fc:8f:9a:ff:93:59:8b:00:2b:1b:95:a1:2d:
c0:f9:66:ec:52:40:3a:d4:58:24:28:de:a1:0f:19:
e6:b8:7d:9d:dd:01:ee:e6:88:e6:61:0e:32:ee:dc:
e7:f1:ff:31:f4:16:b3:a5:79:7c:8b:48:54:35:2c:
98:60:d0:59:9f:c3:e5:94:a3:c5:87:fe:6a:2d:f2:
5c:f6:4e:4c:e8:41:db:54:98:12:e8:8f:10:a6:b2:
3c:57:0c:d9:82:aa:91:7a:ed:00:c0:7d:39:72:10:
44:ce:96:da:27:da:a0:57:6b:6a:0b:97:76:1f:ac:
ec:10:a5:24:31:f5:61:cb:3c:9c:b9:12:af:6c:7c:
50:60:a4:e2:74:2d:9a:48:d2:dc:29:64:b5:d8:a7:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:94:1A:6D:BC:30:FC:C5:98:CC:ED:FB:E0:D3:62:77:E6:5A:12
X509v3 Authority Key Identifier:
keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3139312e3235332e33322e302f32312d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.253.32.0/21
Signature Algorithm: sha256WithRSAEncryption
06:7d:73:d0:f9:0c:90:a9:55:69:65:50:a7:85:c9:d7:c8:3e:
0d:fc:42:99:5a:76:0f:57:aa:fe:db:70:51:aa:3f:ca:53:f9:
64:81:66:b3:b5:69:ea:af:6f:55:73:e6:f1:6d:b9:91:c6:66:
29:15:3e:78:3f:b7:9e:e8:8a:ac:54:4d:53:e7:a8:e3:39:8c:
47:09:a6:3b:e2:2b:04:e5:b3:dd:6c:9a:b0:5f:71:42:9d:ba:
97:3e:5d:43:32:16:e6:e0:26:cf:e2:53:0a:ec:bd:88:95:9d:
1a:a4:b4:d5:76:d8:8b:85:3e:e9:db:18:06:c5:85:66:c4:f0:
ea:da:77:2f:9d:c0:43:93:62:9a:50:da:df:56:df:16:1a:3c:
bd:d3:bb:cf:e8:1a:18:8a:bb:69:3f:ac:71:ba:d3:c0:ed:24:
8c:5e:f4:80:1e:a4:93:b2:34:fd:ee:8a:1e:1a:e4:cc:d5:3d:
cc:2e:af:cb:ed:58:9c:71:3d:cd:24:aa:1e:81:68:2e:7b:12:
51:1f:4c:4f:c0:90:01:c8:bc:e1:78:2b:ef:e6:d4:c3:38:f7:
de:05:31:4f:fe:45:bf:ed:af:1f:fc:7a:5c:e4:81:c6:fe:a3:
79:6a:7e:43:74:90:f8:8d:47:6d:e4:aa:11:e8:5e:62:d6:0f:
23:25:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:41:41 2025 by rpki-client