
$ rpki-client -vvf rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/3133312e3139362e3231362e302f32322d3234203d3e20323635393237.roa
File: 3133312e3139362e3231362e302f32322d3234203d3e20323635393237.roa (raw, json)
Hash identifier: MRBEdV7YZN6iXohdjPkhhTRIO66qu93gR6pk8Psl/uk=
Subject key identifier: 42:A0:65:82:4D:5B:52:A8:BA:2D:7F:4A:66:46:B8:F4:78:E0:1A:F7
Certificate issuer: /CN=0AEBE8CBA48D67339ED71D0C0A58C25E318009A1
Certificate serial: 4B529074DBA558BBD5BB58DBCF81BFAC3962FABF
Authority key identifier: 0A:EB:E8:CB:A4:8D:67:33:9E:D7:1D:0C:0A:58:C2:5E:31:80:09:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/3133312e3139362e3231362e302f32322d3234203d3e20323635393237.roa
Signing time: Thu 30 Oct 2025 17:13:21 +0000
ROA not before: Thu 30 Oct 2025 17:08:21 +0000
ROA not after: Thu 29 Oct 2026 17:13:21 +0000
asID: 265927
IP address blocks: 131.196.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl
rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 08:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:52:90:74:db:a5:58:bb:d5:bb:58:db:cf:81:bf:ac:39:62:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AEBE8CBA48D67339ED71D0C0A58C25E318009A1
Validity
Not Before: Oct 30 17:08:21 2025 GMT
Not After : Oct 29 17:13:21 2026 GMT
Subject: CN=42A065824D5B52A8BA2D7F4A6646B8F478E01AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:36:48:0e:39:35:10:d3:d4:38:a6:ef:bf:
b7:50:22:fd:b5:2e:2b:5b:fa:2e:a1:3f:1c:52:e9:
48:30:28:dd:9a:5e:40:1a:3f:fe:7c:0d:af:3a:20:
60:6c:55:6d:a8:c6:15:f6:75:ce:fa:f2:ff:c3:e1:
fa:65:4d:57:a2:4d:51:c6:a3:5a:23:74:07:c9:4c:
bf:6d:c3:8c:73:d6:a9:d4:b4:f2:3e:f9:04:b3:2f:
5a:05:cb:14:c0:29:ba:e9:82:eb:a8:46:3a:2f:3a:
80:48:75:fb:b7:13:07:a2:f0:40:29:9c:99:5b:cd:
25:cb:29:92:f0:62:75:61:a1:cd:0e:38:e0:0b:c3:
8d:0e:7b:9f:ac:6b:84:fc:7d:44:f6:a3:01:5f:90:
54:5c:c4:01:a6:bb:f7:e1:4e:1c:9d:e5:8b:24:f1:
5b:6b:82:80:3e:56:16:41:a8:83:68:fe:72:bf:ed:
76:00:03:88:34:0c:82:4c:bd:ef:9b:fc:4b:c9:28:
45:c3:f3:28:39:af:d9:64:8f:b2:da:10:34:4c:ec:
2a:7a:a8:01:6d:f8:e5:f3:d7:99:fb:42:b7:47:8b:
8a:b2:a5:ee:bf:f0:98:20:9e:77:53:73:20:0f:2e:
8a:48:01:8e:ab:a9:b2:35:d3:2f:6d:9a:85:d9:f1:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:65:82:4D:5B:52:A8:BA:2D:7F:4A:66:46:B8:F4:78:E0:1A:F7
X509v3 Authority Key Identifier:
keyid:0A:EB:E8:CB:A4:8D:67:33:9E:D7:1D:0C:0A:58:C2:5E:31:80:09:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/3133312e3139362e3231362e302f32322d3234203d3e20323635393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:e8:c1:42:af:fc:8c:3a:c0:73:06:e9:e6:89:29:84:1c:cf:
9b:2f:85:f5:ee:ce:67:8f:4c:37:1b:b1:d3:ee:2c:45:4d:0a:
2c:b2:14:a5:1f:3f:f0:34:8f:48:7c:be:58:73:b7:82:12:62:
b2:7a:22:13:c4:a2:d7:f9:32:e8:74:43:aa:e4:81:60:f5:b4:
26:b4:0d:6a:7c:dd:69:26:77:f3:8f:34:97:ae:d3:f3:c2:ed:
d7:d9:91:9b:3a:24:af:21:e6:57:93:f9:c3:92:94:a6:3d:92:
a4:bd:09:0d:21:dc:06:6a:29:0b:d0:34:3c:2f:38:0e:b6:b7:
1a:1f:0e:69:c6:37:62:36:4a:ed:58:e8:50:1b:e2:e7:06:2a:
24:6b:88:f7:3e:e0:c5:ac:db:43:c0:d2:df:40:d8:80:a4:a1:
71:08:10:11:c8:23:95:f9:13:f8:fb:c9:92:9b:87:a4:67:5d:
12:b6:a5:0c:ef:9e:7b:23:67:b6:1c:b0:bc:20:32:0d:70:6b:
72:e7:75:1b:86:bf:da:d4:b1:a1:0b:3c:6c:78:c3:00:48:46:
f3:45:72:8c:31:62:4f:36:85:38:cd:66:3c:04:46:03:5d:6c:
27:cf:ef:00:3a:ba:c9:bf:09:b3:58:65:46:0b:b2:b6:0a:70:
76:35:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:21:53 2025 by rpki-client