
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
File: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (raw, json)
Hash identifier: D4627DR8A/Yx8sOp5ZyW7rLwAu5i+B/sIX2FXoXySBU=
Subject key identifier: D5:E0:DE:24:03:A3:E9:53:11:69:66:C8:14:16:37:A8:4D:15:0E:E1
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 64B605C3B0414A3A89D7FA7FCF5FE886702DF07A
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
Signing time: Sat 21 Mar 2026 21:20:12 +0000
ROA not before: Sat 21 Mar 2026 21:15:12 +0000
ROA not after: Sat 20 Mar 2027 21:20:12 +0000
asID: 266178
IP address blocks: 192.144.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 07:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b6:05:c3:b0:41:4a:3a:89:d7:fa:7f:cf:5f:e8:86:70:2d:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Mar 21 21:15:12 2026 GMT
Not After : Mar 20 21:20:12 2027 GMT
Subject: CN=D5E0DE2403A3E953116966C8141637A84D150EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:fa:c0:ec:1a:71:46:ed:ff:26:c4:6b:50:
dd:15:9e:16:8a:8c:70:7f:b8:2b:26:8c:33:64:98:
6e:0f:22:11:4c:7c:68:a7:81:1f:96:ce:64:d8:9e:
50:b5:7e:bf:78:e3:54:e7:34:29:b7:e7:ae:47:09:
30:a2:e8:ab:c1:bd:02:21:0d:37:5f:26:1e:19:75:
47:00:8b:f1:36:eb:a7:75:cd:93:4d:d4:06:72:3c:
6a:5b:53:bb:c0:f9:ea:6f:bc:b3:85:eb:ca:66:ea:
01:c9:de:6d:40:45:f0:9a:4c:e6:9a:a1:79:8a:2f:
ba:3c:53:46:6b:64:10:b3:bb:ec:c2:b1:b0:c3:6a:
ce:78:e5:60:fa:6f:6f:1e:d8:a9:77:5e:57:f5:5b:
e3:a7:9d:39:1f:3a:f6:fd:83:d3:dc:50:bb:10:1b:
de:7f:6c:b2:3f:70:71:e7:c0:62:44:45:e4:59:2c:
2b:aa:80:7a:3c:13:67:87:dd:d7:10:be:dc:cb:d9:
b7:5c:3c:6a:93:0d:a7:96:8e:65:27:1e:c9:e5:a5:
5a:ce:26:3b:cc:d8:19:b3:b7:d3:16:76:c2:96:50:
3b:87:21:38:56:30:63:ab:ed:10:ab:32:bf:09:14:
c2:97:7c:62:aa:b7:05:fb:5a:71:ad:b8:a2:af:cb:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:DE:24:03:A3:E9:53:11:69:66:C8:14:16:37:A8:4D:15:0E:E1
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:f0:0d:99:fb:64:c3:a9:ff:5c:31:6e:59:d6:34:9f:ff:10:
ac:af:e0:01:3e:83:14:20:d8:1d:69:42:73:1e:d3:cc:f6:7f:
52:fe:c6:96:94:f0:13:cc:d2:2b:3e:1c:c7:2f:e4:d1:6e:09:
9f:45:dd:08:b4:ab:bf:4d:49:d7:bd:e3:66:64:39:99:5d:86:
ef:48:52:71:f9:65:74:2e:f0:82:77:06:af:48:fd:54:4e:86:
5b:bc:f9:b2:39:e2:8a:7a:de:48:66:d4:40:28:25:31:a5:b3:
d2:20:35:17:ea:60:80:2a:86:9e:e6:c3:42:80:17:25:c9:bc:
45:3b:b4:cd:37:67:7a:78:4b:65:04:82:a6:81:21:fe:70:ca:
8f:41:06:bf:ea:21:80:63:df:0d:a6:88:5d:01:32:1f:65:a3:
e1:68:aa:d9:a6:9d:69:49:b6:92:2a:bc:aa:80:8e:71:15:ea:
aa:30:a1:96:ed:bd:08:b8:8d:2a:fa:89:2c:0e:91:11:3c:27:
b9:4f:99:5d:14:81:a6:b4:cf:76:7f:ee:5a:1b:60:ab:5c:f6:
64:21:6a:df:15:d8:41:7e:63:e0:67:b8:c9:84:35:90:3a:73:
ef:59:71:a6:52:75:68:3a:60:a9:0c:dd:d8:29:08:1f:4a:1f:
c1:aa:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:59 2026 by rpki-client