
$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
File: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier: Q4gatQHmvouqKXKWkc4KYIDIi6b8S+UXYDlHbMIK07E=
Subject key identifier: 2B:EF:15:81:C6:0E:1A:3F:D9:4D:86:D0:E1:7D:36:A2:EB:F3:4A:F9
Certificate issuer: /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial: 4DF254914028961356FF855FDFAB735DAACD9522
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
Signing time: Wed 01 Oct 2025 18:07:18 +0000
ROA not before: Wed 01 Oct 2025 18:02:18 +0000
ROA not after: Wed 30 Sep 2026 18:07:18 +0000
asID: 271607
IP address blocks: 190.9.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 14:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f2:54:91:40:28:96:13:56:ff:85:5f:df:ab:73:5d:aa:cd:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Validity
Not Before: Oct 1 18:02:18 2025 GMT
Not After : Sep 30 18:07:18 2026 GMT
Subject: CN=2BEF1581C60E1A3FD94D86D0E17D36A2EBF34AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:38:f1:55:43:4c:82:9f:27:9c:c4:c9:94:
4c:67:b4:91:c8:73:c8:b1:72:dc:5d:3a:91:8a:74:
62:77:55:81:f4:2d:21:36:ec:1a:a4:f0:f9:3e:ee:
36:53:c0:b8:02:0f:9d:2f:f9:41:07:65:fd:ee:3e:
f3:c9:9b:12:b8:3f:98:4f:74:bf:b2:31:04:16:ab:
b9:f7:a1:0c:46:25:46:3e:e3:10:11:ae:34:57:e9:
af:45:da:34:34:b6:e8:2f:ba:1e:bf:bf:75:c0:d7:
a1:ff:81:db:06:55:76:1b:42:4a:0f:73:f6:16:61:
a4:ae:29:d0:ac:2c:b4:89:de:e9:f1:06:1f:2a:d9:
06:b7:9f:17:f6:d3:dd:98:8c:4d:28:c4:0c:27:f5:
2c:5f:3a:4c:54:0d:b8:50:8d:e5:d6:ab:d1:9d:be:
f9:f5:18:cc:fa:dd:25:20:aa:e5:56:0e:27:5a:51:
a1:c8:84:72:b2:66:53:e4:1c:19:67:6e:b3:70:a3:
2b:8c:54:2c:b3:b9:ee:46:c4:16:6d:8c:6f:f5:1f:
d1:94:d5:da:cc:0c:30:2c:40:e1:ae:47:3a:4f:eb:
5d:84:68:a3:17:78:28:e2:7a:3a:90:37:57:ae:56:
ae:5e:d6:21:ce:99:bc:04:70:94:d8:b8:69:aa:c0:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:15:81:C6:0E:1A:3F:D9:4D:86:D0:E1:7D:36:A2:EB:F3:4A:F9
X509v3 Authority Key Identifier:
keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.104.0/23
Signature Algorithm: sha256WithRSAEncryption
83:a6:38:2f:72:df:29:94:c2:a1:34:d5:10:ff:bd:94:12:02:
f8:c2:45:f1:4b:1b:03:94:c4:00:cc:f5:3b:d2:0f:4b:c3:5f:
f1:ef:6c:23:92:77:36:93:58:89:1c:99:9a:23:d5:51:cd:bd:
29:43:a8:ca:05:ad:9a:81:da:29:a2:e5:4f:4c:f2:8c:4a:96:
54:01:55:d6:e8:be:ac:bb:be:c4:d8:00:07:ef:fa:c6:f0:98:
fd:4f:9e:cd:56:6d:d6:bc:48:53:3a:a2:e1:ef:31:69:e7:82:
20:1f:6c:d8:cf:45:d1:18:68:e5:1a:e2:da:de:2d:25:9f:ec:
84:63:c0:82:91:2e:41:25:23:07:cc:40:0f:56:74:4c:32:dc:
f7:57:87:ab:f2:7b:67:6f:0d:b0:d8:a6:f8:83:03:02:ae:5f:
f0:85:1e:ae:1b:b1:2a:8a:51:bf:08:bc:42:22:9a:d1:bd:34:
24:d0:32:48:bc:a5:f9:72:25:bb:75:69:81:43:d4:27:ab:c3:
8d:ff:4c:83:93:bf:b2:4e:b7:a8:58:e0:b9:4a:86:74:fa:45:
5a:aa:12:2a:f0:af:65:9b:b2:27:14:3b:7a:dc:48:a3:df:04:
e5:b9:08:26:27:cc:11:d3:75:74:60:a8:52:25:14:ac:a3:68:
90:85:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:11:20 2025 by rpki-client