
$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137322e302f32322d3232203d3e203238323532.roa
File: 3138372e312e3137322e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier: s7Y1Vzh5RRUCF5H7LVGZhbvYvs4AkmiwnvybqgBHIeI=
Subject key identifier: A6:FA:EA:9D:A3:0B:F0:1B:61:36:85:0E:C1:08:92:99:6D:AE:0A:63
Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial: 14465A5C245109A2AA80F164E0EC812B84DD3EE2
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137322e302f32322d3232203d3e203238323532.roa
Signing time: Wed 11 Mar 2026 19:13:19 +0000
ROA not before: Wed 11 Mar 2026 19:08:19 +0000
ROA not after: Wed 10 Mar 2027 19:13:19 +0000
asID: 28252
IP address blocks: 187.1.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 19:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:46:5a:5c:24:51:09:a2:aa:80:f1:64:e0:ec:81:2b:84:dd:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Validity
Not Before: Mar 11 19:08:19 2026 GMT
Not After : Mar 10 19:13:19 2027 GMT
Subject: CN=A6FAEA9DA30BF01B6136850EC10892996DAE0A63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:10:0e:e2:14:3c:85:16:a2:90:19:5a:53:
d1:e3:cd:bc:8f:ef:fc:83:57:3a:43:bd:dd:b3:5b:
9d:78:34:74:b6:a5:6a:80:34:b6:b2:38:e2:3e:e2:
16:10:5c:76:53:d7:27:8f:4d:54:d0:d5:9b:56:b9:
0d:67:bc:d6:39:86:4d:2d:f2:20:9d:58:05:76:5c:
f4:84:24:dd:9a:bf:05:98:81:2a:83:77:22:2d:f7:
66:cf:90:0b:20:5f:d0:9c:bb:15:95:4a:ff:cf:63:
e8:65:ae:f3:0e:20:0e:db:11:78:1e:58:a6:e5:25:
0b:68:4b:6a:ea:86:8e:04:03:7a:1d:c0:f6:3f:d3:
b8:8f:63:4e:eb:f1:6d:17:c0:6a:f3:7a:e4:d6:4a:
b8:26:a9:54:8d:ff:fd:0b:a3:84:02:ab:27:94:7c:
a2:e8:64:d6:6b:db:8f:85:37:a0:f1:4b:b1:fa:ef:
55:9c:96:da:e8:d9:9c:25:7a:35:e2:de:5c:7c:26:
9d:f4:40:ce:d7:2e:e7:51:13:f8:5d:71:bc:1e:a0:
5e:ce:7d:93:d8:35:45:8c:d6:cd:1a:5f:36:fe:0e:
27:ad:79:58:32:70:86:1c:bc:e4:ab:6a:7b:09:06:
31:db:27:70:e6:ee:bc:24:8d:4c:93:a5:94:94:54:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:EA:9D:A3:0B:F0:1B:61:36:85:0E:C1:08:92:99:6D:AE:0A:63
X509v3 Authority Key Identifier:
keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137322e302f32322d3232203d3e203238323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.1.172.0/22
Signature Algorithm: sha256WithRSAEncryption
59:66:ab:a3:f8:c3:2f:d5:57:f5:9e:f1:17:43:64:b0:68:9b:
b1:37:be:dd:90:12:b7:f1:6d:90:0f:f7:6a:7c:20:3f:f5:78:
81:d2:e4:ed:f6:80:82:42:9f:2e:62:bc:be:61:f1:dd:3c:8a:
cc:45:ba:22:db:32:d7:26:99:ce:73:c0:d3:46:50:15:00:1a:
d5:d1:6d:04:e2:3f:88:8d:e1:3f:fc:0d:91:2e:39:65:45:78:
44:27:94:35:53:b3:00:d7:86:e7:e7:ea:21:54:30:dc:67:5b:
12:de:89:ca:39:0a:46:f7:90:28:61:83:6f:c9:21:86:07:bd:
0c:18:be:d2:5a:37:f7:f2:09:30:d0:62:56:6a:1a:f1:e3:3a:
30:99:4d:d2:2b:df:f3:43:3e:0f:1c:f6:9b:17:f9:f7:70:2c:
3c:05:be:6e:30:b2:79:cf:4e:e4:e3:7c:a1:10:91:97:25:26:
e2:84:0c:a6:26:bf:6b:ad:21:9d:48:53:6d:f6:10:6f:f3:bd:
c3:90:15:da:81:40:8f:64:fc:3f:34:ad:a3:75:45:58:ac:22:
75:64:24:44:88:4e:6a:b4:89:6f:d2:f0:b2:3d:b4:a6:3b:47:
98:ec:ed:4d:c4:52:a4:f5:92:f7:75:82:32:76:e3:3c:e7:28:
5a:3f:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:48 2026 by rpki-client