
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
File: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier: Q0IfG4q0aaE6deEnWBfPSgqMy370Uc0PPGVTB7I0T4Y=
Subject key identifier: FB:D6:D2:0A:43:00:17:5E:BF:35:32:73:1A:14:C5:AB:D9:A0:7F:FA
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 1EE592145D6B17573B30578B7A0B233619828F12
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
Signing time: Sat 21 Mar 2026 21:20:12 +0000
ROA not before: Sat 21 Mar 2026 21:15:12 +0000
ROA not after: Sat 20 Mar 2027 21:20:12 +0000
asID: 266178
IP address blocks: 192.144.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 07:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e5:92:14:5d:6b:17:57:3b:30:57:8b:7a:0b:23:36:19:82:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Mar 21 21:15:12 2026 GMT
Not After : Mar 20 21:20:12 2027 GMT
Subject: CN=FBD6D20A4300175EBF3532731A14C5ABD9A07FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:15:7d:02:d4:f1:36:a8:15:28:d8:3f:d0:
91:04:0f:38:f4:83:bc:87:6b:42:ef:e0:b6:b4:c2:
3f:c2:c3:5a:7c:95:c7:e0:c6:20:16:19:52:32:e4:
12:21:68:fc:cd:8e:3b:07:c2:0d:56:7d:85:df:97:
59:b2:02:2b:46:bc:12:19:95:36:be:b1:b7:66:f7:
72:db:0e:26:b7:d5:12:e1:3d:35:c4:aa:b4:b1:2f:
d1:e1:54:1a:33:94:67:05:56:2d:95:02:82:1a:7f:
ab:05:96:85:32:cf:f0:f0:b7:c5:c9:1a:c8:06:f3:
7f:71:03:87:ef:aa:dc:51:90:2f:fc:6d:08:0a:1e:
77:53:94:4e:8c:1e:74:be:cd:4b:7f:89:bd:9c:43:
bb:66:7e:ef:93:b0:4c:e7:bf:97:c4:bb:d4:ed:f9:
d1:e0:11:84:9f:4a:f1:2d:f7:31:87:d3:04:14:50:
f5:36:eb:a6:76:c0:42:3c:b3:f6:68:1d:c8:31:e5:
f3:75:7d:50:dc:5e:b6:ab:18:2b:3a:d1:56:2d:33:
75:00:8f:3b:f8:e0:6c:34:3f:60:fc:43:f2:a5:6b:
80:d5:34:49:53:2a:c7:ae:fe:44:81:2b:db:a2:c6:
92:66:42:af:34:fd:c8:eb:5d:22:9b:55:68:7c:b2:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D6:D2:0A:43:00:17:5E:BF:35:32:73:1A:14:C5:AB:D9:A0:7F:FA
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.65.0/24
Signature Algorithm: sha256WithRSAEncryption
24:36:f7:cc:bd:11:31:78:9c:40:a2:5e:6e:8c:9c:05:e6:db:
1d:08:85:01:91:fc:cb:fe:c9:20:91:8d:5c:90:de:91:5d:38:
d2:47:0a:98:24:c8:ff:dc:1a:a5:97:82:cc:96:44:65:b6:22:
73:38:75:64:7b:8b:89:ab:98:2b:25:4e:f3:b6:38:c3:1d:db:
98:b8:bc:0e:24:51:23:bb:6e:a8:54:c8:c4:30:de:8e:ab:f2:
9c:ad:89:cf:8d:fa:0f:8e:ba:ce:0f:36:15:96:9d:e7:a3:c4:
51:68:79:f3:2e:88:95:f5:62:e8:13:18:5d:c8:4b:63:45:22:
30:d3:cf:ea:1e:be:8f:6c:14:57:a5:4b:7e:8e:c2:62:7b:8d:
38:83:97:dd:71:26:da:9f:2d:bd:2f:ee:38:da:c7:c7:da:df:
3b:4f:8d:a0:52:4a:1b:9d:48:7e:17:c4:24:e1:97:32:13:f7:
6f:fb:c0:57:86:6b:8b:ce:68:89:28:ab:96:a5:be:ae:d5:e2:
e7:c9:6a:85:eb:c8:af:98:e6:53:b3:92:84:1f:dc:11:c2:e4:
73:dc:49:69:32:b0:58:a4:86:24:27:db:a4:86:41:6e:d3:e6:
ce:03:e9:25:4c:b0:30:b5:37:d7:6c:73:ca:43:30:2c:1b:f3:
e5:77:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:28:53 2026 by rpki-client