
$ rpki-client -vvvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa
File: 3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier: rfKTkUuJao0hJlGPBOQ9nUY6ppwn84hZY0u/22Ek4hw=
Subject key identifier: 53:B2:5F:64:0A:63:09:A8:F2:7F:03:F0:C5:20:31:56:8C:24:B2:62
Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial: 2592DAFAF97DD2735815320FCDFF9BE17525EEB9
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa
Signing time: Tue 04 Aug 2026 21:08:01 +0000
ROA not before: Tue 04 Aug 2026 21:03:01 +0000
ROA not after: Tue 03 Aug 2027 21:08:01 +0000
asID: 262729
IP address blocks: 168.197.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 10:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:92:da:fa:f9:7d:d2:73:58:15:32:0f:cd:ff:9b:e1:75:25:ee:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Validity
Not Before: Aug 4 21:03:01 2026 GMT
Not After : Aug 3 21:08:01 2027 GMT
Subject: CN=53B25F640A6309A8F27F03F0C52031568C24B262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:06:94:20:7b:cf:f9:95:1a:68:10:d8:21:
10:ba:ba:64:a7:01:f2:f8:d8:25:05:ef:df:9a:93:
b9:93:a8:f9:fc:41:62:6a:44:63:ec:5a:3a:9e:49:
a0:4a:07:a8:e2:b6:a5:e6:2f:9f:89:37:14:7c:06:
22:61:6a:4e:14:6b:54:e5:7b:e3:2e:85:17:4d:71:
05:be:b6:ec:f3:c8:03:76:55:3a:e9:16:58:01:46:
8a:f4:de:5f:94:59:c6:f0:e3:24:f0:8f:d8:d2:d5:
84:29:ab:a8:5d:66:40:43:67:d5:e1:84:f9:7d:f5:
d9:d2:47:27:ae:5e:37:ac:37:7e:c6:34:4f:15:00:
4c:f9:83:6c:10:f7:6d:e6:73:3c:f6:a5:71:d8:09:
15:ec:e9:f1:7c:6d:a2:dd:93:af:1b:cf:59:3e:13:
f8:17:5c:3e:ff:c2:c0:5f:8a:4d:46:9c:c2:86:eb:
f8:e1:3c:36:c8:64:67:6b:79:ee:dd:16:27:f4:f7:
48:cf:ff:5f:38:70:0a:d3:72:a3:dc:ef:8c:0c:f0:
6e:f2:fb:ad:62:b9:b0:f8:30:57:eb:65:a6:7b:56:
12:eb:42:4a:65:c4:49:26:87:20:3f:b2:1c:a0:54:
8e:12:40:d8:0c:e6:e9:97:5d:ba:90:44:a4:5c:4a:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:5F:64:0A:63:09:A8:F2:7F:03:F0:C5:20:31:56:8C:24:B2:62
X509v3 Authority Key Identifier:
keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.225.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:18:15:7a:ac:8f:59:80:42:2b:b6:01:0d:47:fc:82:c9:
e6:5f:7a:16:2f:53:d7:7a:3a:f3:ed:34:86:b3:18:4b:f2:86:
f7:98:9e:a4:70:9e:43:fb:bb:0f:c6:d6:00:45:f8:a1:e5:48:
30:6f:b4:b8:8d:a3:77:50:1f:0e:f8:54:62:c8:40:f0:1a:6e:
c1:71:77:8d:a3:08:db:0a:62:5f:02:29:cf:6f:2f:e1:79:d1:
80:38:d1:00:5c:15:33:d1:8b:01:aa:d6:b9:98:4a:95:65:ca:
4d:24:c9:46:73:75:c2:7b:00:21:0f:19:e8:19:47:f8:33:ae:
40:a2:d4:ae:b8:3a:1a:b3:63:73:05:63:da:c1:c9:65:ab:64:
ce:bb:fb:4d:12:3e:49:77:f0:a7:a3:3a:56:11:f0:58:7a:9f:
10:6e:d2:62:63:bf:84:27:e0:c1:ed:43:5f:20:d8:52:64:b7:
e3:b7:44:43:1c:ba:25:4b:05:3d:85:5f:2a:b2:62:fe:52:94:
57:88:ce:6a:b2:40:e6:d6:b1:39:38:9b:55:c7:b0:89:01:4a:
d6:e9:7c:64:c2:ff:fe:e5:da:ae:f7:68:4d:f1:41:1e:10:32:
af:59:27:5d:0a:e0:3e:29:77:e6:bf:d3:b7:c1:67:a3:89:08:
48:0f:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:31:12 2026 by rpki-client