
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier: 37xqmKemNyM2fGHIh3xqLT0b1+ySSpNTUfXRO7ouX74=
Subject key identifier: 4C:C4:E8:A1:84:45:0E:D1:A6:0D:16:39:66:F5:F5:6B:FC:F8:92:64
Certificate issuer: /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial: 08E80167068F8A56182AB7D88C8F6AA8C7FA52EF
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
Signing time: Wed 01 Oct 2025 17:59:34 +0000
ROA not before: Wed 01 Oct 2025 17:54:34 +0000
ROA not after: Wed 30 Sep 2026 17:59:34 +0000
asID: 263940
IP address blocks: 138.185.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 13:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e8:01:67:06:8f:8a:56:18:2a:b7:d8:8c:8f:6a:a8:c7:fa:52:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Validity
Not Before: Oct 1 17:54:34 2025 GMT
Not After : Sep 30 17:59:34 2026 GMT
Subject: CN=4CC4E8A184450ED1A60D163966F5F56BFCF89264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:82:60:38:c0:66:92:96:1b:93:a0:56:ba:
ff:0f:d5:2a:df:eb:e1:f5:8c:fa:c2:8f:b0:07:45:
09:7c:3e:48:87:09:6f:97:2d:f5:93:a7:88:12:69:
d3:3c:34:70:37:bc:25:30:b2:98:14:78:34:53:3f:
9a:7b:5d:e5:fa:d7:9f:4e:a9:be:27:a9:ba:f1:14:
3d:ff:b8:b0:84:6e:56:03:7a:40:53:a5:53:19:61:
fb:18:67:89:38:27:64:2c:eb:49:7f:39:88:ba:b1:
8d:f0:15:63:04:90:29:d6:42:6e:01:b0:7c:d3:f8:
47:94:2b:4d:1f:ab:ba:76:00:62:74:9d:a9:8f:5f:
56:6e:a0:30:d9:d7:ca:b5:75:ed:af:7d:1e:a2:52:
7d:4a:5d:3e:8c:ec:aa:c3:e7:84:3b:be:f8:1b:dc:
85:2d:b4:07:f4:a6:fb:69:f2:06:1b:71:52:9c:d5:
7c:21:06:d9:26:3f:b8:98:bf:2c:bd:4e:61:95:5e:
a5:32:12:54:2c:83:0f:65:13:78:eb:27:7a:d1:14:
47:75:9c:61:5d:90:30:96:68:01:62:4f:dc:29:46:
28:fb:93:2e:39:c3:db:80:ff:68:ae:5f:91:5d:d7:
f8:32:b2:38:cd:4c:cc:61:fd:7b:a4:c1:db:1f:cb:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:E8:A1:84:45:0E:D1:A6:0D:16:39:66:F5:F5:6B:FC:F8:92:64
X509v3 Authority Key Identifier:
keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5a:ef:de:98:ee:c2:28:c6:95:7d:e7:b4:fb:a5:72:a1:19:
5c:e8:dc:4f:3a:11:f5:c6:3b:03:b1:2f:0b:19:2f:9c:61:43:
5e:0a:25:48:2e:ea:a1:d7:ce:65:55:06:d8:3b:16:fc:ea:ac:
7b:c4:10:e8:13:40:dc:cb:be:5c:a4:81:f2:76:e9:95:7b:92:
b6:4d:e4:1d:3e:e6:06:54:cb:65:51:a7:76:81:2f:e9:f3:8e:
af:5e:32:b8:f0:67:7c:5a:48:7a:31:8a:91:f6:ec:13:5d:73:
75:27:b3:f5:fc:d1:e4:28:3c:2b:d7:11:e6:2e:41:1c:fa:c9:
31:96:44:8e:52:41:65:67:7c:48:a5:84:e2:16:2b:59:41:60:
e2:60:6f:76:f9:6a:a9:dd:8d:3a:8b:f3:00:be:cc:53:9f:39:
af:72:00:1a:09:1b:f3:8c:45:74:35:71:82:42:fe:c5:3d:d6:
81:e8:d7:4b:c7:93:a6:32:2c:80:83:cf:a2:99:82:95:7f:ed:
c6:7a:a2:33:9d:b1:4f:ae:e6:06:a6:d2:76:9f:06:9b:96:25:
eb:d8:e0:2b:66:d3:6b:a4:d6:8a:9b:06:8b:df:dc:26:b2:84:
8d:b5:10:59:12:88:45:1f:03:ce:40:12:f3:d5:71:20:33:82:
6f:a9:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:21 2025 by rpki-client