
$ rpki-client -vvvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
File: 3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier: 5y2YBw47A6+6tP6gZiLjIjWF/tM6Ks9y2jvanY0piG0=
Subject key identifier: BB:94:1B:1B:AE:3C:70:04:5E:52:EB:B8:C8:65:9F:D0:E7:40:5F:0F
Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial: 20F1D0EEE4BABE77DC7BD595D7A3D5645CC99A28
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
Signing time: Tue 04 Aug 2026 21:08:01 +0000
ROA not before: Tue 04 Aug 2026 21:03:01 +0000
ROA not after: Tue 03 Aug 2027 21:08:01 +0000
asID: 262729
IP address blocks: 143.208.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f1:d0:ee:e4:ba:be:77:dc:7b:d5:95:d7:a3:d5:64:5c:c9:9a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Validity
Not Before: Aug 4 21:03:01 2026 GMT
Not After : Aug 3 21:08:01 2027 GMT
Subject: CN=BB941B1BAE3C70045E52EBB8C8659FD0E7405F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:dc:20:fc:b0:5e:5a:be:72:72:06:df:4b:
64:79:e9:46:74:a8:61:db:1c:c1:75:9e:a3:66:7c:
9d:55:eb:31:de:c3:9b:09:ac:0e:77:f5:b6:25:eb:
74:16:a0:7d:e2:19:9c:c3:43:ec:e3:42:93:2b:b5:
31:eb:3d:13:0a:22:80:8d:9a:6b:14:96:e2:60:34:
21:af:7e:5c:67:06:00:3b:d4:88:1d:59:49:48:6f:
fe:e4:ef:be:1b:d6:ab:e8:c7:91:86:0c:c8:bb:17:
06:7c:f2:48:9f:04:f6:c4:f3:8e:ce:ee:47:4f:51:
0c:51:7f:a4:6a:53:8a:97:d8:13:f6:a6:b2:54:ea:
6c:61:8b:1e:3e:44:6c:9b:f4:4c:97:0e:34:6b:61:
d2:7e:32:d6:43:54:6c:d6:2b:55:1f:f2:12:2f:f5:
07:8b:09:89:87:6b:e6:b2:4b:7c:fe:a6:43:91:02:
24:db:67:7a:81:df:f3:71:66:41:5e:dd:85:df:4d:
11:ab:bb:35:70:e7:48:c5:9c:41:55:0b:84:8f:ae:
77:0b:60:7e:ff:48:55:41:32:53:a0:61:3b:e3:cf:
8d:01:f9:49:e4:38:de:21:ff:b2:3d:7a:82:e0:cf:
71:df:42:b6:4f:e7:69:19:b0:49:16:2b:a4:1d:19:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:1B:1B:AE:3C:70:04:5E:52:EB:B8:C8:65:9F:D0:E7:40:5F:0F
X509v3 Authority Key Identifier:
keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.195.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f2:57:28:cc:d2:aa:ef:d7:04:07:4d:2c:f9:51:b6:82:81:
e9:51:28:98:32:e4:f1:5a:b0:27:1d:2b:ee:5a:31:53:0f:68:
d4:e8:30:37:50:a7:e1:01:c0:8f:44:a1:a6:c9:ef:7c:5e:a5:
95:57:c4:bb:50:71:40:16:7c:ef:b7:b5:9f:05:5d:62:25:1c:
82:fa:2c:f5:84:c5:00:6e:be:2d:2b:c6:c6:d1:13:f3:49:d5:
09:43:f4:75:b5:2e:3a:1e:9e:a4:1c:15:b3:f4:bc:f3:d3:41:
a5:fb:23:c0:55:09:94:a6:af:dd:fe:aa:5b:4c:08:1d:56:c0:
32:8a:d7:83:d6:2d:7e:68:35:f9:2a:c4:68:96:c3:64:f0:1b:
9d:0b:5e:b8:bb:56:f2:2b:1f:30:01:d1:0c:93:0e:5d:f8:2d:
00:2e:f5:ea:6e:b1:87:b8:86:69:42:16:cb:c6:ef:4b:46:15:
2f:39:29:db:a9:7b:c6:db:e8:dc:b3:f8:78:aa:7d:73:bd:18:
6d:c5:34:37:1a:85:75:a7:a7:7e:5d:3c:64:44:57:e2:76:00:
58:a6:97:e5:8e:7a:a3:02:07:5c:2f:39:a6:fe:c6:7b:0a:98:
c8:7c:2c:e0:7b:3f:52:93:0b:73:b3:ec:21:7d:f3:f2:6d:93:
c3:12:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:55:58 2026 by rpki-client