
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
File: 3138372e39352e33322e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier: aEeRPTU9MMsoNjZ4MHFDDVhGJjPL8/DLn6hTIH4DDsY=
Subject key identifier: 82:D6:B0:5F:B2:64:F5:A7:25:D7:3E:6E:5F:F8:D1:7D:F0:40:2A:C0
Certificate issuer: /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial: 25A7A5C3FDC24256F5A1EB0272009820AC5179A6
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
Signing time: Wed 10 Sep 2025 18:49:01 +0000
ROA not before: Wed 10 Sep 2025 18:44:01 +0000
ROA not after: Wed 09 Sep 2026 18:49:01 +0000
asID: 28260
IP address blocks: 187.95.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a7:a5:c3:fd:c2:42:56:f5:a1:eb:02:72:00:98:20:ac:51:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Validity
Not Before: Sep 10 18:44:01 2025 GMT
Not After : Sep 9 18:49:01 2026 GMT
Subject: CN=82D6B05FB264F5A725D73E6E5FF8D17DF0402AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:06:a3:a3:b6:77:47:8e:d0:0e:63:7f:82:
87:89:88:ed:19:76:37:48:b9:63:b0:d0:85:f9:8e:
50:5c:a1:2b:b7:ce:2b:75:fc:3b:a5:ca:89:14:ef:
9e:70:8b:25:d1:c1:a3:28:9e:42:48:2d:b2:5f:13:
10:5b:d2:96:e3:22:18:07:30:b5:6e:cd:5c:45:60:
19:0a:f0:3e:e0:bd:f8:c0:3a:01:65:5b:51:83:81:
3e:62:e1:89:d7:d4:4e:84:3f:c4:66:31:d2:52:3b:
20:dc:fd:5e:db:8a:9d:54:f4:a8:4d:de:9c:b8:c9:
98:c2:0b:14:cc:44:08:d6:89:56:a1:d1:ab:f3:b5:
42:b0:fa:f3:8d:98:50:30:33:10:13:f4:2b:c3:e4:
9a:5c:9c:e0:ba:35:74:3e:99:4d:f2:9d:2d:f1:77:
c0:85:1e:0d:6b:78:a2:2b:4c:8f:03:e0:a1:13:2e:
3f:31:76:86:b6:20:c4:96:e7:a8:74:78:39:b4:f8:
1c:ed:3a:e4:8d:cc:16:66:09:47:85:23:cd:13:4d:
fd:28:05:de:b5:a0:23:f5:89:09:1e:dd:89:9d:b3:
12:21:6b:7c:dc:f8:10:04:53:80:50:77:e9:38:c9:
e5:bc:95:80:dd:5f:cc:91:07:9a:de:8b:32:6d:6c:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:B0:5F:B2:64:F5:A7:25:D7:3E:6E:5F:F8:D1:7D:F0:40:2A:C0
X509v3 Authority Key Identifier:
keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:05:e2:3c:5b:f7:e1:d1:90:10:86:0d:77:0a:a0:7c:54:b3:
5a:87:15:1a:f9:2f:63:d9:d6:e4:03:a4:1d:49:fd:25:71:cc:
f7:67:c4:a1:9a:91:d0:42:c2:0d:72:8f:3f:87:2d:ed:f2:fd:
92:ad:4d:35:17:1d:d5:4b:08:16:76:e6:bc:80:80:d2:56:85:
16:c3:5b:73:7f:05:9f:d5:fc:aa:fb:ef:9b:94:f7:2d:72:0a:
a8:3a:64:3f:c6:0b:e9:56:61:60:01:3d:94:7d:d4:89:62:ab:
98:bd:25:e7:83:1c:88:7e:68:27:4a:4f:f7:fc:67:72:a9:20:
0d:f0:99:91:30:79:b0:f4:f9:54:96:a8:a9:09:d2:6a:b7:4c:
f2:29:cf:dd:8a:5e:17:e9:77:d5:9f:09:ff:3f:df:84:eb:c1:
4c:d9:57:cb:2c:64:ce:4b:f4:d1:95:d2:5b:1b:49:07:40:05:
e1:fb:58:22:09:3c:80:9a:6c:ae:6d:1d:30:72:d9:e1:86:dc:
75:a9:79:51:29:06:96:aa:ff:94:29:c9:76:a3:f7:ee:5b:d3:
f0:2a:c0:2d:b9:5a:63:35:81:cd:bf:5a:b3:49:8f:f1:32:11:
d9:a8:a6:06:98:9b:c1:26:06:bb:38:b3:68:c4:83:0b:b4:f9:
aa:54:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:26 2025 by rpki-client