
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier: koJs57Nrs1LlrydC3lWkgXscoCjx65J74iJ7Va5NOXY=
Subject key identifier: 60:6C:49:4F:DC:EE:2D:5F:89:A7:B8:11:78:96:99:B7:36:9E:85:F6
Certificate issuer: /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial: 2A97666B9BF54B2D34BA2A68329890E4C67867B8
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
Signing time: Wed 01 Oct 2025 17:59:34 +0000
ROA not before: Wed 01 Oct 2025 17:54:34 +0000
ROA not after: Wed 30 Sep 2026 17:59:34 +0000
asID: 263940
IP address blocks: 138.185.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 13:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:97:66:6b:9b:f5:4b:2d:34:ba:2a:68:32:98:90:e4:c6:78:67:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Validity
Not Before: Oct 1 17:54:34 2025 GMT
Not After : Sep 30 17:59:34 2026 GMT
Subject: CN=606C494FDCEE2D5F89A7B811789699B7369E85F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:5c:d6:1c:aa:d3:e4:7e:19:2c:70:4b:9b:
3b:6f:02:7d:38:f7:94:fd:bf:88:ab:1e:d4:08:38:
7a:24:3e:01:81:af:d1:4b:8f:19:2a:f1:35:52:f4:
80:62:12:41:cd:53:a0:11:ea:a8:24:73:6f:bf:00:
c5:46:69:2c:6b:c0:13:20:d5:34:c0:2e:53:59:a1:
44:3b:2b:e8:f4:4e:78:b3:52:7e:b2:ae:43:8b:35:
9d:66:4d:81:62:f0:8e:94:41:96:15:ae:3a:25:3b:
19:5a:86:78:0f:f7:02:68:65:2b:51:97:54:ab:31:
17:93:98:2c:a2:f7:bf:63:08:48:16:7e:34:55:64:
a3:61:48:f7:88:b5:a0:f8:38:3e:10:95:87:3e:c6:
bf:69:4d:57:70:11:2c:f8:8d:60:be:17:2b:84:bd:
22:fe:a4:a6:49:85:cc:d7:ed:a8:6b:09:5d:08:a6:
a2:cf:75:19:87:09:ee:04:05:d9:ec:7b:8b:96:43:
f1:31:71:38:49:33:b3:e0:a1:d9:1e:cf:d6:84:88:
51:76:64:f3:ef:cd:fe:4a:32:3b:6a:a0:ea:e3:48:
14:b1:87:c3:2b:d8:20:5b:cb:1d:7d:d3:92:f5:dd:
3f:12:cf:1d:e6:94:d0:f0:ae:ba:7c:a8:6f:13:63:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6C:49:4F:DC:EE:2D:5F:89:A7:B8:11:78:96:99:B7:36:9E:85:F6
X509v3 Authority Key Identifier:
keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:89:a7:99:49:e6:1b:69:cd:ed:bc:84:9f:12:5c:8f:9d:8e:
60:e0:d3:7c:6f:de:05:10:5e:85:e6:13:64:75:b5:4d:8e:d9:
20:5e:1f:d0:21:97:7f:48:6c:48:c5:8c:32:8e:73:eb:2c:63:
3c:a2:39:ff:18:77:26:34:fc:c9:54:03:52:b8:6b:33:dc:25:
bd:25:00:a5:0e:c0:c1:a7:84:1d:78:78:d2:8b:f1:e6:a6:46:
c6:ca:b6:da:50:75:76:a3:fa:eb:f1:b1:95:9e:98:b9:c2:84:
5c:38:e4:9c:2e:59:ec:79:1d:de:52:8d:ea:63:01:91:8b:43:
5c:60:f1:5d:c8:27:ef:ab:65:9d:fd:d8:f5:26:83:3c:5a:84:
30:79:92:2b:9f:1d:96:41:d7:e8:ff:c3:3e:ce:ad:48:3b:31:
07:4b:ee:9b:49:25:97:a9:89:51:ae:4a:7e:2a:3e:9f:1a:8d:
b4:de:a9:92:91:ab:96:37:a6:8c:58:94:42:cc:8e:a0:cf:0e:
27:14:52:54:e9:06:aa:7a:9f:38:c0:f2:f5:95:40:69:45:a0:
80:e3:4c:3a:17:ec:61:48:10:c9:85:fe:d7:c7:0d:25:1a:6f:
59:dd:e8:fd:ea:02:77:fe:64:89:a8:85:80:22:07:c1:4d:be:
dd:c3:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:43 2025 by rpki-client