
$ rpki-client -vvvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
File: 3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier: DnHa4iUslHoZBZcVBddNDmxkmnACDdP0mvlvkdO1TDA=
Subject key identifier: 75:71:86:00:E4:14:59:2F:67:46:64:9D:92:96:FC:4B:AE:BE:6F:C6
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 670F30E863183959A98ED7CBD11E1C5FA053109E
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
Signing time: Wed 11 Nov 2026 03:25:19 +0000
ROA not before: Wed 11 Nov 2026 03:20:19 +0000
ROA not after: Wed 10 Nov 2027 03:25:19 +0000
asID: 266020
IP address blocks: 170.245.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 15 Nov 2026 15:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0f:30:e8:63:18:39:59:a9:8e:d7:cb:d1:1e:1c:5f:a0:53:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Nov 11 03:20:19 2026 GMT
Not After : Nov 10 03:25:19 2027 GMT
Subject: CN=75718600E414592F6746649D9296FC4BAEBE6FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:de:e4:a0:69:e4:f1:fc:9f:2f:8b:e1:42:
33:54:c4:a2:c6:1b:1c:54:51:d3:59:f0:24:1b:d9:
92:0f:c1:cf:f1:5e:2f:30:73:32:b6:75:14:17:07:
be:3d:f4:d9:b3:5b:1c:85:ca:4b:90:5d:d0:3a:4d:
a6:82:33:59:35:6e:d4:c9:21:d3:4f:81:2a:a0:fd:
e5:16:b8:d2:8d:7e:0c:cc:7c:df:fe:cc:57:e9:4a:
f2:d5:6a:01:c5:35:3f:51:5e:8b:1b:98:3d:5e:a1:
bb:fc:86:7f:fa:da:c5:94:6b:f6:05:38:f6:2b:07:
1a:bd:33:43:8b:5c:8c:89:06:5c:84:d5:f8:5e:cc:
97:f6:2b:75:b4:8c:28:10:ca:6d:be:27:f5:1a:f5:
97:cd:cd:2c:6a:70:e2:c1:d6:ed:03:fc:51:87:c7:
db:54:82:ce:4c:27:9a:a4:8d:65:e4:42:61:00:f2:
b3:55:91:04:6e:eb:4b:d2:2a:a0:f0:41:66:eb:db:
1b:26:bc:a0:3d:e7:73:01:65:e9:96:d4:51:7b:6e:
9a:bc:bd:7a:d5:0e:d8:66:dd:40:d7:79:aa:78:35:
12:14:19:85:bc:b4:93:21:34:22:ce:79:31:8b:5b:
00:e9:58:f4:fb:37:1c:b8:4f:3d:a0:4b:e6:83:8d:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:86:00:E4:14:59:2F:67:46:64:9D:92:96:FC:4B:AE:BE:6F:C6
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.236.0/24
Signature Algorithm: sha256WithRSAEncryption
98:70:95:6f:1e:f9:a9:78:ac:b6:10:84:fe:79:45:25:84:20:
5f:a2:26:a0:f6:00:a2:e2:db:3f:cd:7c:04:0b:bd:8c:04:67:
86:e1:f2:a6:50:c7:fd:b2:74:82:db:2c:d9:ad:67:9b:3e:c7:
58:4f:5f:22:fd:52:af:1c:07:18:12:69:4f:d1:d0:03:df:e9:
28:34:94:34:d6:62:38:fc:cc:9f:77:9a:64:ac:b9:84:8e:7b:
8f:0d:fb:05:67:63:87:2d:66:4c:32:9c:0a:96:cf:0e:6c:15:
dc:b6:cf:3b:cf:85:b7:34:fd:8f:58:f1:95:c3:1e:db:cf:7e:
2e:97:50:27:34:ae:03:b8:56:59:67:66:8c:9b:b1:70:b4:08:
3d:77:40:7c:03:15:6f:5b:78:dc:e5:2a:1c:46:0a:2b:10:ef:
2a:81:10:23:25:96:e4:32:97:e0:2c:d8:f5:42:d9:5d:e6:a0:
84:00:a0:21:2b:7c:1c:41:01:66:27:f7:c8:fc:8f:f8:c6:80:
9f:1b:2e:53:e5:38:75:9f:6b:89:8d:ac:9a:ee:14:0c:62:e2:
21:f4:d6:8a:7b:cb:71:3f:dc:b8:b9:d2:2e:93:bf:86:d3:5c:
95:07:bd:8f:a5:6d:5c:90:82:d8:b1:7f:77:e7:a2:2f:b8:81:
25:c4:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:55:54 2026 by rpki-client