
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
File: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier: zucAfQu0ifHpmqC5xLZPVAPRi4zTTLUEUK9iVex/Cks=
Subject key identifier: FF:B9:59:E6:04:E0:24:3F:F9:50:6E:8F:47:6B:57:DD:CB:C4:14:60
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 4C840E93A6DAD31406A51342224499FF11A3F6F2
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
Signing time: Sat 21 Mar 2026 21:20:13 +0000
ROA not before: Sat 21 Mar 2026 21:15:13 +0000
ROA not after: Sat 20 Mar 2027 21:20:13 +0000
asID: 266178
IP address blocks: 192.144.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 00:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:84:0e:93:a6:da:d3:14:06:a5:13:42:22:44:99:ff:11:a3:f6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Mar 21 21:15:13 2026 GMT
Not After : Mar 20 21:20:13 2027 GMT
Subject: CN=FFB959E604E0243FF9506E8F476B57DDCBC41460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:5f:11:65:56:70:a5:03:59:3f:bb:38:85:
1d:6b:7a:17:43:f5:d2:b0:db:3b:f7:ff:07:92:f9:
a8:30:91:1c:95:69:90:eb:f9:a1:d6:49:bb:c9:0e:
19:cf:ea:bc:0e:e0:85:88:4a:d3:25:36:97:d6:f0:
60:2d:d2:c7:a9:00:94:c0:02:d3:ff:f9:38:c7:c4:
8c:6b:9a:49:16:0e:46:5d:28:5e:93:65:e1:a4:83:
7f:88:90:3c:66:3b:d8:d3:33:e5:d7:09:f0:56:83:
27:11:fb:a7:06:dd:2c:4f:80:04:c0:71:79:6b:95:
23:c4:e4:8e:e0:41:15:72:7e:87:43:d9:40:17:72:
32:4f:44:7c:de:a9:64:9e:18:3d:ab:f4:10:86:e4:
e1:29:48:e4:73:f9:5b:54:41:ac:44:4e:f6:f8:85:
f4:05:df:8f:36:97:54:79:ab:54:a9:03:ed:71:a3:
02:9a:6f:80:d1:51:5e:2b:e1:1a:e0:c0:63:7c:78:
af:f3:7c:72:85:95:74:27:07:46:e0:4b:19:94:d1:
0d:63:c2:10:bc:47:07:36:dd:aa:d3:ea:9b:04:71:
b5:31:d3:0a:45:c4:e3:fa:fc:c1:b4:2c:93:69:5c:
42:1f:5e:8c:e4:30:0c:42:92:c9:44:a8:1d:87:28:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:59:E6:04:E0:24:3F:F9:50:6E:8F:47:6B:57:DD:CB:C4:14:60
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1f:3f:4c:70:1d:c6:e9:68:a4:f9:a6:f2:b3:98:a1:57:37:
39:ad:e6:d7:f6:30:c3:59:f8:05:b0:42:a3:0b:0d:1d:f8:c5:
3d:0c:36:ea:81:7a:1b:f6:c9:f0:7c:29:53:7d:e4:57:32:e1:
6c:68:65:2d:54:e2:f5:57:35:7f:54:d2:e2:9a:4c:40:b0:97:
06:ca:82:98:dc:7e:b2:63:22:18:2a:9e:32:eb:09:86:9c:5d:
a7:15:76:f3:b5:47:c3:3f:6e:c4:b1:67:e6:8c:d3:3e:81:c8:
33:d4:77:7b:9f:eb:a3:1d:43:61:6c:81:02:81:48:06:98:13:
94:1f:ed:66:72:b1:31:7f:ec:e5:5b:c6:69:26:a1:a4:6a:5e:
79:e8:6d:1f:71:1c:dd:56:17:39:dd:75:0a:f1:16:77:ce:85:
5d:52:fa:82:6c:f1:75:45:a7:01:d7:aa:ba:b3:9d:a3:e0:ad:
1e:5a:cf:aa:8b:bc:8a:0a:41:2d:6d:72:98:9c:43:b8:3f:ad:
90:9a:a2:bc:20:67:9c:87:43:34:98:45:4d:4d:af:36:49:f9:
fe:3d:bf:d1:87:68:0d:5f:8b:ed:b4:70:92:43:5c:7a:3f:bd:
4a:be:0c:4d:a7:81:03:fd:d2:fa:bf:b8:c2:8e:17:0c:11:b8:
60:00:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:08 2026 by rpki-client