
$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231322e302f32342d3234203d3e20323733343433.roa
File: 3137372e32312e3231322e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier: Sbe+DuQDlsto94Wlv2SMCv4ufnVNDOZn5IcUdsPAs+g=
Subject key identifier: 68:B0:21:D4:AD:99:38:63:90:C3:90:DE:B8:3D:5E:10:1C:A8:FC:53
Certificate issuer: /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial: 31D4A37B13D88AA0383B5D5E3F27A47BCBAC8D80
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231322e302f32342d3234203d3e20323733343433.roa
Signing time: Tue 29 Sep 2026 11:11:57 +0000
ROA not before: Tue 29 Sep 2026 11:06:57 +0000
ROA not after: Tue 28 Sep 2027 11:11:57 +0000
asID: 273443
IP address blocks: 177.21.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 02:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d4:a3:7b:13:d8:8a:a0:38:3b:5d:5e:3f:27:a4:7b:cb:ac:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Validity
Not Before: Sep 29 11:06:57 2026 GMT
Not After : Sep 28 11:11:57 2027 GMT
Subject: CN=68B021D4AD99386390C390DEB83D5E101CA8FC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:b3:ac:f5:2f:94:1a:1a:6e:42:c1:ad:ac:
6d:53:19:93:db:46:52:6f:49:e0:6c:69:bb:38:e5:
9f:e4:62:5c:60:17:3c:e4:33:66:a8:7f:8e:44:db:
ee:02:4c:84:bf:33:b7:ab:13:fd:52:8b:4b:a2:96:
28:b9:36:b5:d8:4f:6a:67:77:b9:d9:4a:2a:1c:d9:
1b:60:4d:66:eb:34:e2:6e:4c:92:5b:04:a6:cc:cd:
b8:72:7a:a3:d4:56:9d:10:a1:16:1c:e6:3a:5f:e3:
76:2e:81:58:31:37:6e:0b:92:34:c4:da:69:98:ff:
0f:b9:98:8d:50:4d:f9:18:1b:bd:98:70:ce:60:be:
e9:bb:1c:05:07:d6:2b:9a:3b:7d:18:b4:ae:90:6a:
47:68:61:05:21:e5:11:ce:04:c3:0e:9f:a5:76:49:
b1:78:94:1a:34:06:4d:28:14:fc:cf:6e:0a:8e:41:
ff:68:2f:46:03:40:51:ff:d5:0d:71:40:c4:1d:fc:
d6:64:ba:67:bd:fd:67:be:9f:bc:bb:ae:37:70:55:
e5:cf:72:86:1c:6c:e6:d4:7a:e2:60:5f:58:39:af:
32:07:f6:94:a7:30:82:b7:de:de:ae:37:cc:6b:6e:
9e:45:e4:67:45:a7:64:11:e5:08:ca:f8:79:4c:2d:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:21:D4:AD:99:38:63:90:C3:90:DE:B8:3D:5E:10:1C:A8:FC:53
X509v3 Authority Key Identifier:
keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3231322e302f32342d3234203d3e20323733343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6a:59:7a:b2:b5:00:4f:c9:4a:af:0a:eb:e6:18:6c:8e:5e:
74:94:94:2d:2e:60:b6:4c:35:83:96:b0:6c:01:60:b4:90:2c:
0e:a6:ff:06:87:98:bb:0e:ef:d0:d8:de:7e:dc:db:c4:20:b9:
12:1d:a8:5b:78:db:45:7f:29:54:e2:f2:90:9a:17:a0:19:aa:
78:6f:c6:cc:ff:5b:cc:1a:d9:8f:04:bd:46:ad:8d:e1:52:fa:
27:bc:a8:f0:3a:cb:15:78:13:6b:22:fb:fb:cb:f0:1c:67:29:
5c:36:ea:a7:3d:29:24:0e:41:99:bd:98:54:59:fc:0c:87:e4:
52:04:04:55:a1:3c:d0:de:dc:cb:3e:03:9a:c5:e1:7f:50:b9:
f4:ee:2a:5d:df:4c:97:90:f3:fe:1b:76:f2:d6:d0:0c:77:45:
54:1a:20:a7:7f:eb:e8:27:5b:d7:e1:94:58:4f:31:9d:e0:3b:
c8:27:81:41:c9:5d:60:bb:e3:80:5d:8e:83:d5:52:d4:98:c3:
44:04:0c:c3:b3:89:58:f8:05:f5:65:e6:0d:94:37:73:5a:64:
52:2d:bf:fb:17:ff:a2:70:43:9b:49:f9:fd:db:6b:54:9e:dc:
03:30:4e:08:c2:7a:7c:f3:3b:4e:cf:bc:44:11:e1:a7:24:2b:
c7:d8:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:42:21 2026 by rpki-client