
$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32332d3233203d3e203238323532.roa
File: 3138372e312e3137342e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier: VqiVOp1msB9iGnuaOp6PhY3fb68X3ev99ND/UpEYOmU=
Subject key identifier: 2B:B9:65:7C:67:D6:33:07:47:EA:24:A1:3D:46:03:58:55:25:91:98
Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial: 0E03E1FFAC894FC69AB254D2B08B036E754B0021
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32332d3233203d3e203238323532.roa
Signing time: Wed 11 Mar 2026 19:13:15 +0000
ROA not before: Wed 11 Mar 2026 19:08:15 +0000
ROA not after: Wed 10 Mar 2027 19:13:15 +0000
asID: 28252
IP address blocks: 187.1.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 19:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:03:e1:ff:ac:89:4f:c6:9a:b2:54:d2:b0:8b:03:6e:75:4b:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Validity
Not Before: Mar 11 19:08:15 2026 GMT
Not After : Mar 10 19:13:15 2027 GMT
Subject: CN=2BB9657C67D6330747EA24A13D46035855259198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:58:80:d4:f6:96:6a:b8:28:ed:c7:93:d8:
55:9d:37:e1:e2:7c:9c:ad:c1:54:54:65:31:c0:d9:
16:64:2b:c7:5e:e3:17:01:f2:a3:13:0d:4f:b1:cb:
4d:ec:8b:8e:f0:78:e4:4a:92:02:24:ad:34:46:32:
f6:9b:09:82:62:d1:af:b4:31:15:19:23:f8:a9:e3:
84:82:d9:be:ee:f1:b1:42:05:5b:59:77:bd:32:c7:
e6:27:eb:51:f2:ca:93:2e:fe:b4:63:61:ba:85:cb:
0e:b8:1e:f8:4e:a7:eb:46:79:5f:af:c3:20:52:29:
47:e8:e1:d1:34:bd:56:99:a8:4e:4a:e8:f8:50:6d:
6d:5e:18:11:d9:c7:16:cb:5b:96:a8:2d:83:83:b4:
78:9c:32:ec:3e:df:f8:3d:14:6b:42:7d:67:9a:a3:
74:da:52:a5:8b:ee:0b:89:b3:61:6a:d0:24:be:fb:
fd:1f:01:a6:f7:3f:bd:d5:95:6a:96:f0:ce:5c:be:
1a:da:d6:c2:60:0f:55:ed:94:d2:94:24:80:3d:38:
46:64:81:a7:22:cf:ef:68:83:97:a5:e5:8d:6b:1a:
a6:b8:2e:47:b4:1e:29:73:21:5c:3c:30:e9:11:f8:
ca:04:fc:3a:74:b2:09:06:c0:d3:90:41:6a:b5:58:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:65:7C:67:D6:33:07:47:EA:24:A1:3D:46:03:58:55:25:91:98
X509v3 Authority Key Identifier:
keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137342e302f32332d3233203d3e203238323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.1.174.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:2b:2d:f6:d5:3f:15:1b:d6:33:e7:1f:41:26:c6:01:52:9a:
ca:ff:9a:e1:0b:96:33:ff:38:fa:25:62:f5:2f:e2:a7:35:fd:
4e:3e:39:78:6c:f7:d5:60:97:0f:6e:6d:0d:84:8f:6c:0c:9e:
7a:1e:ec:c9:c9:42:9b:88:68:69:42:e9:38:1b:6e:40:3a:60:
e6:78:28:03:49:80:0c:eb:d9:5b:6c:8b:76:fb:44:b7:0e:4f:
65:b6:ee:92:9d:24:1e:b7:cc:8b:31:b0:ec:44:ea:f4:9c:ef:
52:9c:bb:26:c8:ec:96:e2:b6:df:07:1b:c3:9c:4b:0d:28:7a:
6b:91:a7:38:17:ea:50:54:e6:82:b9:e6:fc:39:73:35:c6:ea:
9e:fd:07:70:6a:9e:21:90:44:94:83:31:7a:16:4b:95:2d:a9:
d1:05:c7:18:bc:d4:5d:97:a7:3f:f6:89:27:82:2d:6e:76:c7:
a6:fb:c8:ad:74:e0:4c:fb:cd:2d:18:82:ed:b7:b7:4a:06:72:
ea:9e:ba:b9:84:77:63:9e:77:80:5a:98:55:4c:b1:aa:5b:30:
4c:84:da:da:26:a3:e0:28:e8:a4:bb:0d:48:77:23:62:5e:e4:
b8:a0:6d:e0:8b:92:93:7f:37:80:ab:af:b3:32:f0:23:22:17:
b9:2d:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:47 2026 by rpki-client