
$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
File: 3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier: YJdsM2UhEgVs2CXh4+H5FQbgLEobFf5sgGyvq5iaEFM=
Subject key identifier: D9:A0:A7:C3:6F:45:06:DE:F1:21:27:14:9D:1D:C2:3C:E7:97:C8:32
Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial: 61FCEC945E946ED5EDF2860C60A4DF8480A5C773
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
Signing time: Wed 11 Mar 2026 19:13:12 +0000
ROA not before: Wed 11 Mar 2026 19:08:12 +0000
ROA not after: Wed 10 Mar 2027 19:13:12 +0000
asID: 28252
IP address blocks: 179.189.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 03:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:fc:ec:94:5e:94:6e:d5:ed:f2:86:0c:60:a4:df:84:80:a5:c7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Validity
Not Before: Mar 11 19:08:12 2026 GMT
Not After : Mar 10 19:13:12 2027 GMT
Subject: CN=D9A0A7C36F4506DEF12127149D1DC23CE797C832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:74:84:ec:08:ff:cd:dd:5e:fa:c6:66:9f:
07:e9:f2:33:53:5f:d2:f9:cb:c8:30:02:95:ff:8f:
60:4d:ad:00:59:1b:44:87:4f:1b:51:d2:4c:43:70:
bc:cd:95:8f:bb:96:83:0a:0e:4d:a1:0d:2d:a3:42:
de:f2:99:bd:44:74:1b:7c:08:c6:a4:ce:d4:31:60:
31:86:87:a0:c3:1c:61:b2:c9:02:f8:61:f7:9c:fd:
e0:f1:14:04:9b:8a:54:29:85:89:a3:d7:3f:a7:13:
a3:c9:66:ab:74:eb:8b:40:d5:ce:5d:79:0a:37:ad:
d4:af:9d:d6:7d:84:09:ef:09:19:cd:35:b2:c8:b7:
8e:1d:3b:f2:57:ab:ef:49:8c:53:86:91:e1:45:98:
4e:82:bc:2f:21:a0:39:6e:ca:14:ea:d0:69:80:8c:
16:8c:c9:23:52:9a:9c:8f:3d:00:b6:5d:97:94:79:
66:e7:e8:b3:c4:3c:64:00:b0:61:d9:55:a8:a0:f3:
e8:91:c6:3c:a7:cb:28:6c:ab:15:92:dc:98:71:e5:
9c:75:34:96:fe:d4:c6:5d:05:b3:87:74:b1:b9:7d:
c9:05:ec:26:89:81:80:bb:ad:f8:76:21:2c:5b:80:
75:bc:df:52:fc:be:1d:19:bb:f3:f1:63:c3:82:f9:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:A7:C3:6F:45:06:DE:F1:21:27:14:9D:1D:C2:3C:E7:97:C8:32
X509v3 Authority Key Identifier:
keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.189.244.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d6:d7:32:2d:14:79:a0:12:61:8f:17:e0:02:7f:d7:02:d5:
b5:c6:f5:08:be:de:69:b0:f5:6a:1f:66:35:08:91:9b:29:7b:
57:28:39:97:8e:b0:75:79:61:64:b8:d1:02:d6:1b:f7:9a:47:
3f:67:7a:15:6d:91:bd:76:ba:46:aa:4d:03:ba:29:80:5b:a0:
ab:15:e9:85:b9:9d:eb:0e:e8:d4:09:b3:f9:c7:ec:e6:3f:3d:
2a:68:ae:33:b7:f5:96:b4:c3:75:6d:cc:f6:e0:c1:77:9a:59:
e4:0a:09:7a:f9:6b:2b:f6:74:50:87:cb:0c:d2:e5:9c:1c:65:
a7:a3:63:4e:fa:8b:c9:f0:8f:0f:bb:4e:22:3b:18:a6:5e:6c:
d9:2f:11:c9:ed:ae:cd:70:26:4c:75:05:b3:61:b0:83:35:1a:
69:2f:cb:c0:9b:dc:8a:83:cf:13:35:d1:c7:db:18:94:64:17:
65:8f:93:a6:bc:b9:94:76:01:4d:7c:4f:41:28:8e:25:6a:d8:
3c:77:84:12:91:34:b4:26:7d:f3:dc:10:e8:11:84:f0:78:27:
d2:63:6e:c4:47:fc:dd:3e:4f:d5:f6:e6:14:e8:7d:23:ed:d5:
21:fb:06:63:78:40:79:5d:15:eb:6f:39:5a:98:7d:1c:e0:48:
1d:03:4d:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYfzslF6UbtXt8oYMYKTfhIClx3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTJaFw0yNzAzMTAxOTEzMTJaMDMxMTAvBgNV
BAMTKEQ5QTBBN0MzNkY0NTA2REVGMTIxMjcxNDlEMURDMjNDRTc5N0M4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL3SE7Aj/zd1e+sZmnwfp8jNT
X9L5y8gwApX/j2BNrQBZG0SHTxtR0kxDcLzNlY+7loMKDk2hDS2jQt7ymb1EdBt8
CMakztQxYDGGh6DDHGGyyQL4Yfec/eDxFASbilQphYmj1z+nE6PJZqt064tA1c5d
eQo3rdSvndZ9hAnvCRnNNbLIt44dO/JXq+9JjFOGkeFFmE6CvC8hoDluyhTq0GmA
jBaMySNSmpyPPQC2XZeUeWbn6LPEPGQAsGHZVaig8+iRxjynyyhsqxWS3Jhx5Zx1
NJb+1MZdBbOHdLG5fckF7CaJgYC7rfh2ISxbgHW831L8vh0Zu/PxY8OC+enHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2aCnw29FBt7xIScUnR3CPOeXyDIwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzNzM5MmUzMTM4MzkyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzvfQwDQYJKoZIhvcNAQELBQADggEBAIjW1zIt
FHmgEmGPF+ACf9cC1bXG9Qi+3mmw9WofZjUIkZspe1coOZeOsHV5YWS40QLWG/ea
Rz9nehVtkb12ukaqTQO6KYBboKsV6YW5nesO6NQJs/nH7OY/PSporjO39Za0w3Vt
zPbgwXeaWeQKCXr5ayv2dFCHywzS5ZwcZaejY076i8nwjw+7TiI7GKZebNkvEcnt
rs1wJkx1BbNhsIM1Gmkvy8Cb3IqDzxM10cfbGJRkF2WPk6a8uZR2AU18T0EojiVq
2Dx3hBKRNLQmffPcEOgRhPB4J9JjbsRH/N0+T9X25hTofSPt1SH7BmN4QHldFetv
OVqYfRzgSB0DTb4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:57 2026 by rpki-client