
$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa
File: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (raw, json)
Hash identifier: Vf7L0nEoqVM3zkzAfnwGKll3BsqlwtQox5GJQ4i6pB8=
Subject key identifier: 49:70:C4:76:56:4C:C0:24:31:AA:09:4E:3A:86:66:0A:EF:3B:A9:99
Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial: 5F328777257C3E7D471D7200747A90959B46447A
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa
Signing time: Mon 13 Jul 2026 19:10:05 +0000
ROA not before: Mon 13 Jul 2026 19:05:05 +0000
ROA not after: Mon 12 Jul 2027 19:10:05 +0000
asID: 266303
IP address blocks: 170.79.172.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 10:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:32:87:77:25:7c:3e:7d:47:1d:72:00:74:7a:90:95:9b:46:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Validity
Not Before: Jul 13 19:05:05 2026 GMT
Not After : Jul 12 19:10:05 2027 GMT
Subject: CN=4970C476564CC02431AA094E3A86660AEF3BA999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:cf:ab:4a:00:18:61:39:0b:30:c9:40:12:
f3:5d:b6:72:0c:ec:b5:72:dd:06:fa:ca:53:11:e6:
58:cc:cb:61:82:5b:78:b3:a6:a1:f6:8f:5b:21:41:
86:7e:40:b6:79:9d:97:fe:0b:c3:af:97:6a:05:3e:
3f:01:be:ef:2f:cd:53:a7:9d:37:0a:75:31:f8:de:
f5:25:1b:2e:80:83:2a:1a:04:f4:54:02:64:dd:e1:
7b:54:c3:e1:17:4b:6e:77:6e:53:f2:64:46:f5:47:
ca:7a:17:f3:b8:3a:e9:6f:4b:b3:69:36:3f:3f:bc:
02:4d:7b:d8:bf:3c:2a:95:60:40:80:ac:0a:59:44:
78:f0:45:f7:a1:9c:19:98:ba:99:bd:34:85:e3:70:
7c:8f:67:2d:c9:24:14:18:b6:84:02:56:02:ce:40:
b4:3b:03:98:70:2a:35:3b:2e:38:29:9e:73:2b:df:
d2:1b:d4:5f:56:97:89:ae:25:77:9f:b2:c5:27:80:
cd:0f:a9:d3:a4:40:0a:37:77:28:1b:c4:46:15:9b:
f9:09:fb:18:bd:81:99:2f:4e:21:cd:be:31:7f:8b:
b5:37:5e:9e:74:06:60:4a:db:69:f6:16:0d:8b:78:
cf:6d:c2:41:f3:1d:7f:0a:45:eb:9e:cf:3f:18:61:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:C4:76:56:4C:C0:24:31:AA:09:4E:3A:86:66:0A:EF:3B:A9:99
X509v3 Authority Key Identifier:
keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:76:89:d6:21:01:af:0e:e0:1c:a2:20:35:a5:3c:b4:e7:b2:
a3:a0:ae:9b:50:f1:3a:5a:74:d4:c6:76:05:16:f8:4a:29:59:
b5:2f:2a:44:47:cb:9b:09:41:fd:c1:0d:f9:f7:e7:ea:62:da:
bf:1f:20:7b:dd:c6:1a:91:75:1e:ed:5e:a5:a0:94:4d:f6:92:
67:cf:1a:b2:40:43:9b:84:58:7e:a3:b9:9e:bf:7a:f6:38:6c:
be:70:40:fc:eb:2a:96:e2:0d:58:ca:41:5d:19:61:d2:35:99:
a8:73:bb:0f:6b:00:b1:c9:ed:c2:3c:ac:78:de:08:13:1d:84:
e4:f7:ed:96:32:d2:f7:f0:81:8a:10:57:80:cf:c3:21:a8:34:
c7:91:41:2c:c6:9c:b5:43:fd:a3:63:cf:89:3d:fa:12:c3:44:
dc:11:1f:f3:be:f5:40:d8:f6:6d:01:ae:1b:39:a0:78:dc:d2:
17:9e:fa:24:c9:a6:91:dd:aa:87:11:cb:7e:1a:61:01:88:35:
ea:79:44:85:3d:cb:4f:44:bd:b8:03:60:07:c8:8e:94:ba:bf:
bd:17:09:09:0f:b7:ef:66:6e:0b:8d:61:7b:71:39:f4:fb:9a:
4d:c3:aa:59:c3:73:54:79:ef:6c:1d:a5:9f:1a:a6:57:61:d2:
9a:62:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:25:38 2026 by rpki-client