
$ rpki-client -vvvf rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa
File: 3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa (raw, json)
Hash identifier: Rn6k5C7YL96v5ukc/xd6P3g6I5d1sBKgTEDDLluSzWA=
Subject key identifier: 49:59:55:E6:31:CB:AC:70:73:9E:44:F6:21:44:7F:2A:97:8C:6B:33
Certificate issuer: /CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43
Certificate serial: 53A82AEAADB824228074CE8C7376DA83B5F49E9C
Authority key identifier: 1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa
Signing time: Fri 28 Aug 2026 15:58:43 +0000
ROA not before: Fri 28 Aug 2026 15:53:43 +0000
ROA not after: Fri 27 Aug 2027 15:58:43 +0000
asID: 265131
IP address blocks: 143.208.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl
rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 02:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a8:2a:ea:ad:b8:24:22:80:74:ce:8c:73:76:da:83:b5:f4:9e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43
Validity
Not Before: Aug 28 15:53:43 2026 GMT
Not After : Aug 27 15:58:43 2027 GMT
Subject: CN=495955E631CBAC70739E44F621447F2A978C6B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:7f:83:98:d0:ab:d0:aa:f0:31:bc:63:c4:
ee:b5:dd:c2:9b:6e:99:be:4a:ea:96:8b:60:0b:3c:
06:52:b7:65:c4:19:99:2f:ce:ec:72:80:13:a1:d9:
ca:f6:d8:d7:7e:72:ad:09:4d:92:f2:83:e0:3a:67:
7f:ed:17:2c:fa:03:a7:9a:85:a9:9d:89:c6:64:ab:
89:3e:2f:18:15:30:25:81:56:20:ff:e9:45:71:d3:
a8:d4:04:76:aa:e7:3f:15:02:f2:a1:5b:18:e1:5f:
4e:f8:35:35:b6:b5:07:1f:b0:ad:0c:36:c3:1a:c9:
ae:fd:f0:5e:7f:0d:f4:ef:be:91:74:46:e0:2b:56:
89:ee:43:cb:dd:8b:fd:4d:1c:42:64:b5:a8:59:1e:
05:fb:35:e8:a2:58:4a:66:b6:1d:53:8b:f8:90:73:
21:13:96:fa:71:6d:3b:e8:c6:be:54:b4:95:ed:8b:
c3:13:d0:d7:3a:cb:ba:92:01:97:bb:ac:af:29:61:
50:1d:e8:05:b3:9f:52:fd:7d:aa:3c:99:4c:ae:55:
e2:e8:67:d2:a7:d5:38:c6:92:1a:eb:4e:08:a8:6e:
87:de:c4:e2:1b:20:bf:c4:46:1e:3a:fb:22:bf:2e:
bc:64:4f:5f:ce:c4:a2:24:0a:a7:12:4d:9d:c6:4a:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:55:E6:31:CB:AC:70:73:9E:44:F6:21:44:7F:2A:97:8C:6B:33
X509v3 Authority Key Identifier:
keyid:1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:85:1e:bc:93:53:1f:9a:fc:cc:b3:28:5d:23:45:30:ab:d0:
29:82:c1:95:8e:26:c7:2f:60:21:3a:9f:ac:3c:02:77:e9:43:
f9:c5:7c:e8:3b:b9:ce:fa:75:96:28:b1:f5:28:05:f4:af:c9:
80:ac:f6:1a:31:70:a1:a8:84:fd:52:18:0b:66:58:85:e1:e8:
ae:7f:d6:b2:90:93:01:f6:3f:be:8d:d4:52:a5:d3:d4:b4:86:
22:2c:55:44:e3:ca:68:04:bb:da:f1:55:12:dd:e3:2c:59:d7:
df:e1:86:44:16:22:28:04:20:dd:04:98:98:6e:9f:82:f8:25:
a4:79:ff:6d:c4:c2:2b:74:89:63:29:1d:65:e9:e1:f4:8f:4a:
9d:e4:35:6f:ef:5c:a0:87:ef:72:be:81:88:fa:89:ec:ac:bb:
0c:d2:63:60:75:56:cb:73:34:97:46:47:93:ca:05:25:ce:38:
97:93:40:27:a4:b1:d1:69:8a:2f:af:e6:37:e3:41:27:0b:c1:
c4:bd:26:29:61:a1:46:6d:da:bf:f1:6c:18:1a:41:5c:ac:d4:
5e:4c:cc:07:96:78:ec:d0:27:3b:0d:c2:69:36:6d:02:82:0d:
ca:a4:04:4f:e6:e3:df:97:fa:5a:68:06:07:3a:b0:46:74:0d:
96:c7:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:31 2026 by rpki-client