
$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa
File: 3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier: ufAz5B1pLdeux0qmUg3PanXpmYfC8Y2IOgZ4oxa1kVs=
Subject key identifier: 47:B3:D5:ED:7D:38:85:22:79:68:56:7F:31:B4:EA:A7:1E:37:E7:0F
Certificate issuer: /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial: 2BA8102320C0B4E68562068DC33C1CD514C2C23E
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa
Signing time: Fri 14 Aug 2026 17:56:05 +0000
ROA not before: Fri 14 Aug 2026 17:51:05 +0000
ROA not after: Fri 13 Aug 2027 17:56:05 +0000
asID: 264886
IP address blocks: 201.49.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 14:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a8:10:23:20:c0:b4:e6:85:62:06:8d:c3:3c:1c:d5:14:c2:c2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Validity
Not Before: Aug 14 17:51:05 2026 GMT
Not After : Aug 13 17:56:05 2027 GMT
Subject: CN=47B3D5ED7D3885227968567F31B4EAA71E37E70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:27:f8:65:48:b4:08:0d:b3:89:2b:89:40:
30:4b:d0:82:aa:1b:15:0b:27:19:36:0a:b3:09:7d:
e9:9a:78:8f:02:a1:86:b7:fb:a8:37:a9:49:b7:2c:
a7:3e:5f:ad:9a:d2:a4:c4:f9:9c:d1:ee:a2:75:cb:
03:42:67:5f:1a:af:44:80:41:7e:6c:39:92:cb:b1:
c9:80:a7:4c:d5:01:ef:db:f1:1c:60:93:5a:16:fd:
61:16:e8:82:08:ca:ab:d1:be:70:6a:e5:85:6e:c3:
e6:7f:56:04:cd:27:48:7e:ae:89:59:12:a4:aa:49:
f1:d2:3b:9b:5a:37:c5:d6:52:25:36:ce:a1:3a:eb:
b1:27:5c:39:0b:7a:dd:53:e5:c8:d5:6f:17:11:be:
6d:0c:4a:de:06:d1:7b:29:f8:ee:64:dd:40:09:96:
3a:59:20:77:35:1f:22:59:a5:00:98:e4:05:fa:2b:
b2:83:1b:e0:a7:e1:67:aa:b7:fb:a6:b2:ea:1d:6c:
a4:7c:eb:5e:de:b2:44:38:f1:68:5c:c2:55:6d:36:
0f:ad:72:fa:59:72:f0:b0:99:52:1c:dc:01:4f:e0:
ce:de:db:14:52:b8:41:80:f4:88:0d:82:87:37:01:
0e:e9:10:d4:46:7c:46:76:f7:73:2c:6c:f4:0d:b5:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:D5:ED:7D:38:85:22:79:68:56:7F:31:B4:EA:A7:1E:37:E7:0F
X509v3 Authority Key Identifier:
keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e6:46:45:33:be:d3:52:1e:90:96:bc:7e:f5:46:34:f9:db:
7d:19:32:d0:9b:79:28:ab:9e:8b:a8:da:5a:04:c2:a0:70:34:
1c:60:2c:8e:fc:0d:64:e0:af:fa:e0:32:9e:b7:89:f4:e9:b8:
43:07:5a:cc:08:ef:75:93:eb:75:97:63:33:71:3c:df:58:0c:
b2:d3:37:32:1f:ad:52:07:c1:62:20:6a:8a:b4:da:07:0f:bc:
43:b8:f8:8d:3e:68:7a:9b:4d:ae:47:4d:c7:28:8f:f5:21:e0:
51:04:09:72:63:ed:d6:d5:cb:05:94:b4:6a:e3:c6:c1:59:1d:
57:6d:ab:c1:0b:dc:b8:b9:ee:95:fb:40:dd:e2:91:9c:c2:b3:
1c:9b:85:9f:f7:c6:83:64:c2:1b:5b:37:f1:1c:f5:c7:43:9c:
1c:db:b3:53:7c:35:41:42:3e:38:df:3b:a0:16:52:70:cd:cc:
18:60:ce:d8:48:fd:e5:2b:fc:08:08:8a:4a:bf:a5:08:bf:a5:
e9:ce:a8:c3:05:c2:f7:6e:4e:39:cc:8f:de:81:70:39:d9:8a:
5b:dc:ea:f5:9b:c3:fc:ba:62:39:50:75:ea:d7:f4:12:c7:d9:
f4:d8:1a:96:5e:c4:d7:7b:ce:e7:2a:0d:d3:33:f7:7d:f0:8d:
13:8f:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 22:12:08 2026 by rpki-client