
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
File: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier: Y7wWmCKJQWPPPvEuNiGWiJC32jLM3Rj077YoMp/O8rQ=
Subject key identifier: 4E:92:70:C8:88:32:A7:49:F3:51:B3:18:0A:69:F7:C1:DB:F8:1F:BA
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 534FD1B1390561302A4CD9541A5B2CEDFC5C4208
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
Signing time: Sat 21 Mar 2026 21:20:13 +0000
ROA not before: Sat 21 Mar 2026 21:15:13 +0000
ROA not after: Sat 20 Mar 2027 21:20:13 +0000
asID: 266178
IP address blocks: 192.144.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 00:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4f:d1:b1:39:05:61:30:2a:4c:d9:54:1a:5b:2c:ed:fc:5c:42:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Mar 21 21:15:13 2026 GMT
Not After : Mar 20 21:20:13 2027 GMT
Subject: CN=4E9270C88832A749F351B3180A69F7C1DBF81FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:f9:f5:fb:29:97:5d:ef:61:8c:ee:40:6b:
f0:cc:49:08:69:f9:0a:57:11:f7:d8:2f:bd:9e:12:
d1:ee:9b:e1:d0:9d:e6:09:13:e5:f9:07:f8:54:4e:
59:44:57:be:51:c8:c2:e4:42:9b:85:02:22:06:25:
9e:f4:d2:9b:7d:fe:a5:ca:dd:15:ec:03:90:a9:64:
38:e3:09:d7:d1:7e:fb:6d:71:96:87:7b:43:9c:13:
64:53:5b:0f:5a:d0:6d:0c:5a:81:f9:87:f3:34:3c:
cc:16:f3:d4:22:dd:e8:a4:5f:71:8d:07:32:d6:a2:
fd:0a:95:5f:bf:a1:44:ec:39:a6:7c:59:ab:86:9c:
48:b0:ed:21:17:74:3c:8a:93:a4:20:45:65:a4:10:
3c:1d:fd:5c:83:bd:87:a3:b8:84:5b:f3:12:71:4f:
81:73:7a:ad:d2:5c:d6:f7:62:b3:a5:b2:8e:7e:f3:
8b:07:87:03:fb:ed:92:1b:56:fd:85:64:c2:6b:4f:
90:62:89:bc:3c:b3:3a:2a:5c:b7:da:7b:ca:ba:85:
0f:13:23:e5:fe:eb:4b:f7:b4:e2:a3:8f:bc:79:b0:
ad:dc:70:5d:73:3e:34:02:0d:50:67:84:fc:1f:37:
bf:96:8d:a6:dc:52:ee:c1:68:25:b4:6f:44:7d:34:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:70:C8:88:32:A7:49:F3:51:B3:18:0A:69:F7:C1:DB:F8:1F:BA
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.64.0/24
Signature Algorithm: sha256WithRSAEncryption
30:34:df:91:eb:df:04:a2:95:d6:7f:16:bd:95:ac:b2:73:a8:
7a:87:27:41:76:fe:b1:52:39:8d:c2:16:ef:93:24:60:7b:39:
2d:29:a6:73:c3:e0:5c:eb:56:1f:5b:35:ca:a0:04:62:a8:4b:
ed:68:00:45:3f:23:5d:02:4e:63:bc:9c:02:77:21:f0:85:4b:
2d:16:47:27:39:45:c1:b7:c4:1e:1b:f7:98:c1:3e:2f:ff:b4:
24:96:c1:8f:40:10:02:a5:46:86:a6:12:c0:ab:2d:0c:f3:d6:
59:dd:7e:e4:c9:e5:c1:82:5f:59:e4:63:55:50:67:46:aa:43:
38:e4:35:fc:dc:e8:66:4a:b3:61:f4:53:e0:7e:b8:74:50:30:
d5:c2:07:a1:ae:d7:c4:22:0a:0e:e6:ba:1b:8a:6d:87:5e:6e:
ec:21:76:87:e8:b3:d7:4b:99:a7:b6:10:71:24:0e:ea:fa:ea:
15:b6:ae:17:ea:cf:60:52:11:99:b6:f7:68:e8:d4:e2:17:d2:
8d:78:63:a7:48:d0:41:f7:83:36:c3:d3:dc:ab:5b:1e:c8:65:
52:9c:90:05:b6:10:12:1f:d5:8a:15:b9:78:cc:69:63:59:d5:
72:95:37:88:50:29:28:b0:92:48:a4:87:9f:c5:a6:c1:1a:9c:
1a:4e:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:31 2026 by rpki-client