
$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
File: 3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa (raw, json)
Hash identifier: KU+rsv06FvQQFxx6Ca+TNJXUxMBS8lx2dBV8WvcxJws=
Subject key identifier: FA:0E:AB:E0:08:94:5E:E1:2E:16:64:EC:74:D5:67:0F:90:95:12:01
Certificate issuer: /CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Certificate serial: 20DB0F91AB793BCC9F0E00818773B988D690E384
Authority key identifier: 8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
Signing time: Sat 18 Apr 2026 22:52:48 +0000
ROA not before: Sat 18 Apr 2026 22:47:48 +0000
ROA not after: Sat 17 Apr 2027 22:52:48 +0000
asID: 271245
IP address blocks: 170.247.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 00:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:db:0f:91:ab:79:3b:cc:9f:0e:00:81:87:73:b9:88:d6:90:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Validity
Not Before: Apr 18 22:47:48 2026 GMT
Not After : Apr 17 22:52:48 2027 GMT
Subject: CN=FA0EABE008945EE12E1664EC74D5670F90951201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:bc:2b:0c:58:f4:d1:b2:36:43:3f:71:a4:
85:34:e8:14:f3:d4:f4:07:c3:e9:7a:e4:3e:34:a9:
2b:27:17:a9:ec:ff:a7:a4:c2:f8:99:4b:71:52:4c:
ba:40:be:5d:a0:e6:82:89:67:47:06:94:bd:50:06:
18:4f:64:e8:cb:fa:b9:d4:af:aa:15:de:5a:c2:61:
92:cf:a8:15:0b:5f:5e:49:49:2d:31:c4:b5:a5:68:
75:34:14:f9:d5:00:1a:3c:26:98:df:53:c0:14:75:
20:c5:6f:cd:8d:7f:d4:ef:bf:8d:ea:78:74:fa:6a:
99:43:c5:05:4c:81:4b:82:db:47:77:9e:0a:ec:67:
e9:2f:3b:23:f4:7d:92:f0:18:cf:d8:d2:ce:15:e5:
6d:09:53:dc:44:9a:79:e3:4d:0f:cb:97:7f:38:59:
39:53:6c:87:91:58:e1:92:96:bd:6c:34:a8:c0:7e:
5a:4a:e7:ec:00:19:3e:e8:b3:c1:86:27:7c:05:17:
e8:54:fa:d2:d0:76:80:bf:d8:b1:80:a7:3a:52:c4:
96:2c:5a:2d:76:aa:f1:d4:3f:d7:49:fa:a8:3d:b2:
64:3e:88:5b:1d:ac:48:92:75:33:f7:e4:80:e3:b6:
8d:78:d8:87:6d:c8:89:8e:2f:93:a9:eb:f0:23:9d:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:AB:E0:08:94:5E:E1:2E:16:64:EC:74:D5:67:0F:90:95:12:01
X509v3 Authority Key Identifier:
keyid:8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.186.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:56:a5:9c:ab:90:a8:e0:66:73:14:d2:58:94:0d:83:3a:11:
91:1e:f3:ba:98:e2:b3:1b:2d:6e:1e:48:25:cd:e0:7c:11:a7:
66:aa:fb:f2:79:a0:10:df:f8:ed:91:76:db:54:e9:b9:62:8e:
38:06:0d:2c:a1:6a:9f:fd:b9:fe:55:00:fa:4a:63:6b:49:95:
43:14:e4:97:b9:37:16:b6:1b:4a:45:1f:2f:f3:1d:6b:a8:e7:
c7:70:84:5f:e9:d5:b9:cd:a9:1f:9a:88:9d:54:cf:36:5a:57:
e6:66:4d:2c:a6:3a:0b:a1:a9:80:53:72:dc:cc:09:d1:1b:fa:
4a:93:b1:7b:d4:7a:49:37:dc:ef:af:20:6b:07:b7:84:35:48:
16:ba:29:bb:64:33:1b:b8:05:96:87:58:b9:62:37:11:63:65:
c1:52:28:30:d5:1d:5b:9c:9a:e6:d6:0c:2d:8c:b3:e9:b5:f0:
99:b0:1c:27:51:82:37:b7:4a:a4:bd:1f:ed:66:58:fa:70:ec:
be:2a:7e:54:fa:9b:f9:68:d7:71:10:66:f7:45:14:76:e4:d6:
74:fe:89:e5:1e:da:42:4d:87:df:83:2b:1a:5f:f4:b8:f7:37:
24:d3:40:00:e2:55:f5:d9:75:a8:27:b3:c1:dc:3a:c9:ec:37:
68:b8:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:48 2026 by rpki-client