
$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3332203d3e20323632373931.roa
File: 3136382e302e3130382e302f32322d3332203d3e20323632373931.roa (raw, json)
Hash identifier: +0TGYMIcDhl5aLBECUrknisOaOtR3GqNryOkyFS71fE=
Subject key identifier: 33:61:23:D3:75:D8:3D:C4:D7:5F:8D:BE:89:3B:EB:06:C6:FD:DD:66
Certificate issuer: /CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45
Certificate serial: 759B7122FB4050E2F6DD125481D62325BB8E72AC
Authority key identifier: B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3332203d3e20323632373931.roa
Signing time: Mon 23 Mar 2026 18:06:42 +0000
ROA not before: Mon 23 Mar 2026 18:01:42 +0000
ROA not after: Mon 22 Mar 2027 18:06:42 +0000
asID: 262791
IP address blocks: 168.0.108.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.crl
rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 04:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9b:71:22:fb:40:50:e2:f6:dd:12:54:81:d6:23:25:bb:8e:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45
Validity
Not Before: Mar 23 18:01:42 2026 GMT
Not After : Mar 22 18:06:42 2027 GMT
Subject: CN=336123D375D83DC4D75F8DBE893BEB06C6FDDD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:9a:24:96:55:ab:28:0a:e2:39:e6:c1:d4:
82:b7:5d:e3:fb:db:b6:65:5a:58:5c:30:55:f2:be:
f1:a9:04:00:f5:22:3a:ad:e1:05:c9:0b:f3:49:68:
62:83:3c:27:ca:ed:23:0d:91:20:9f:a7:01:2f:8b:
89:a2:0d:d4:02:e3:ba:72:3f:4e:75:94:08:86:1f:
a2:ea:01:f7:07:4c:8b:3f:a4:93:a5:f2:04:1e:29:
52:ed:7e:1e:ad:a2:30:05:68:1f:64:16:f7:68:56:
da:ea:6e:da:36:4e:82:ad:65:57:19:05:dd:ae:62:
50:07:5e:b6:9f:9d:73:19:c5:64:b0:77:ce:67:b6:
ee:0e:c9:7f:ad:fa:22:d5:2d:05:e6:2f:0e:e6:8b:
d5:7f:6d:f2:54:46:f1:d0:7d:ea:63:0d:60:65:a8:
c7:12:a2:4e:32:5f:55:5e:78:51:01:63:7a:f5:45:
3e:95:61:9b:86:74:25:7f:13:58:03:07:e6:c5:66:
86:4b:cb:c4:0c:d0:31:99:14:e7:1e:84:17:cd:b5:
62:d4:9a:94:57:d3:2d:aa:90:0e:86:44:18:91:29:
25:7e:b4:c5:6a:d3:6a:e4:66:8a:33:e3:93:15:ec:
ff:8c:f2:d4:f1:3f:f4:74:9a:89:32:ff:ce:fa:17:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:23:D3:75:D8:3D:C4:D7:5F:8D:BE:89:3B:EB:06:C6:FD:DD:66
X509v3 Authority Key Identifier:
keyid:B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3332203d3e20323632373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.108.0/22
Signature Algorithm: sha256WithRSAEncryption
20:57:3b:92:d5:b1:72:3a:b3:7b:39:3b:04:4f:34:6c:97:ba:
dd:cb:2c:e2:92:20:3d:31:c2:54:3b:63:b9:8c:a7:96:2e:8d:
bc:38:cc:1e:21:9a:76:61:96:fd:7e:77:c4:54:34:c6:0f:40:
c9:aa:cf:d6:6b:52:a1:85:42:14:f1:ef:0f:17:b0:94:d3:fd:
05:fa:a0:d6:d3:8e:4b:90:06:83:25:ff:ba:de:c2:a8:19:67:
25:55:1b:cd:80:82:9e:36:18:3a:8b:ad:53:6c:d3:8c:d1:3b:
0d:b3:d6:31:e4:e8:27:e8:ae:13:99:6c:4c:26:61:5a:1f:8f:
e8:13:5d:b5:e1:02:68:03:1b:df:4b:e9:82:35:b0:09:03:ac:
25:97:19:27:ba:13:38:7f:68:18:9e:fd:a4:29:f1:34:2b:c5:
70:c8:52:83:4d:b1:76:4b:87:50:aa:61:4b:9c:be:fd:fd:71:
f7:ef:85:b5:a3:79:fe:28:18:e6:4c:f2:04:83:4f:72:89:f7:
b3:ca:4d:3a:4a:9b:31:2a:1e:9d:cd:03:fc:97:b8:25:ef:58:
64:37:32:1e:3e:d5:62:4c:4a:22:a2:86:3a:26:41:4e:2e:cb:
2f:19:87:59:96:5f:44:4c:18:02:19:28:ce:1b:7f:37:35:70:
a4:a5:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:24 2026 by rpki-client