
$ rpki-client -vvf rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131342e302f32332d3233203d3e20323733363339.roa
File: 3139302e392e3131342e302f32332d3233203d3e20323733363339.roa (raw, json)
Hash identifier: DnmQJ9O0F8bbtO3b05M/USiBRzBFbweyiWzexHmh2sw=
Subject key identifier: 32:A2:6B:1B:D0:15:3B:45:75:23:3C:16:86:97:3C:05:E1:2F:30:3A
Certificate issuer: /CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
Certificate serial: 534BFE23C802055D0E5F07483D74BFC0F288018E
Authority key identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131342e302f32332d3233203d3e20323733363339.roa
Signing time: Thu 24 Jul 2025 17:02:09 +0000
ROA not before: Thu 24 Jul 2025 16:57:09 +0000
ROA not after: Thu 23 Jul 2026 17:02:09 +0000
asID: 273639
IP address blocks: 190.9.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl
rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 11:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4b:fe:23:c8:02:05:5d:0e:5f:07:48:3d:74:bf:c0:f2:88:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413
Validity
Not Before: Jul 24 16:57:09 2025 GMT
Not After : Jul 23 17:02:09 2026 GMT
Subject: CN=32A26B1BD0153B4575233C1686973C05E12F303A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:b3:3f:c6:00:f9:73:21:dd:7a:a2:6a:46:
04:37:4e:1f:3f:82:93:10:86:58:7c:8e:57:5d:7d:
22:e7:c0:fb:44:21:5a:05:ad:20:aa:a8:87:04:d7:
f3:25:b7:b4:08:1b:76:eb:9e:e9:8d:93:67:74:8f:
a1:be:41:e4:2e:d6:0a:5e:43:82:df:40:f7:b7:b9:
50:65:75:50:69:b1:41:d8:ec:5e:6f:bb:85:fc:e3:
df:41:5d:a0:59:31:2c:29:76:47:47:cc:0a:92:5e:
ba:7a:cf:48:62:6c:3d:77:90:51:80:63:a3:19:08:
e6:32:7a:2c:ea:67:8b:8b:61:3a:a0:d3:c2:fe:f7:
b8:16:6b:a0:8f:89:73:12:b7:97:38:88:0c:2d:8b:
ae:ec:75:88:4a:3a:d3:4f:a4:53:34:54:93:8e:5c:
2d:f8:32:77:fc:bc:c7:e1:b5:2b:d1:4c:ef:24:07:
e8:c4:ec:d4:e8:6f:3e:d9:61:a9:33:a4:85:5c:c4:
f0:ac:f0:0d:93:43:ca:1b:73:51:ae:3c:89:60:60:
64:3b:11:10:59:09:44:4a:66:b9:11:68:01:e2:bf:
a7:72:5c:44:fb:13:2d:a9:fe:21:15:82:39:b8:0a:
d6:29:9b:a4:e0:32:25:45:30:58:f5:0c:11:17:2b:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:6B:1B:D0:15:3B:45:75:23:3C:16:86:97:3C:05:E1:2F:30:3A
X509v3 Authority Key Identifier:
keyid:85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/3139302e392e3131342e302f32332d3233203d3e20323733363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.114.0/23
Signature Algorithm: sha256WithRSAEncryption
74:7a:9e:61:ad:5c:15:1a:91:69:38:b8:6a:6f:70:a0:6e:5d:
65:fe:5f:bd:0e:3f:c7:95:6e:b0:8a:6a:96:38:37:ac:38:57:
b4:b7:0a:1a:be:1f:21:39:f1:b4:f5:b0:ee:78:9d:8b:0d:f8:
f5:51:22:94:27:a3:28:ab:9f:ec:b8:c2:2f:e0:3b:ae:0a:7f:
08:a4:0c:1b:00:bb:44:14:84:5c:e9:55:2d:dc:e9:82:5c:7a:
a8:d5:37:8e:28:9c:bd:9d:e4:8d:f4:2e:28:17:49:7a:f5:0f:
37:26:2f:ac:74:02:45:c0:86:a6:11:94:70:a6:47:89:c5:d0:
0a:51:b6:b5:a8:13:6b:ba:07:11:fa:63:31:7c:5a:32:7d:43:
ad:b5:56:59:e8:6b:3c:ed:f1:2b:b4:39:23:b1:9d:81:1d:75:
34:db:30:b0:7f:76:76:45:e5:59:db:c4:8f:8c:a6:05:91:47:
53:86:d5:70:b2:41:4c:7e:bd:6f:b2:bd:37:79:33:07:dc:77:
e4:8c:2d:3d:cc:0b:e1:30:fd:ac:f7:1b:f7:12:05:70:ac:5d:
fe:24:c1:a5:7b:0b:e4:03:a7:bd:a8:ce:05:e3:7e:3a:6f:86:
6b:7f:0b:fc:13:7b:31:d2:c3:ad:45:6e:7a:e7:18:d4:75:d1:
3c:ce:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:54 2025 by rpki-client