
$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa
File: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier: kpXbj/VFh2puGbD2VjTYD77oB6crDJaCbIFxZqmqgFA=
Subject key identifier: D8:B1:0B:0D:27:DD:84:B7:E8:2C:BE:A9:42:8F:7D:FC:A0:EF:54:15
Certificate issuer: /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial: 173E58046D8401487E1B1E4EFE27BB44D3DE4DCC
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa
Signing time: Wed 18 Mar 2026 14:33:07 +0000
ROA not before: Wed 18 Mar 2026 14:28:07 +0000
ROA not after: Wed 17 Mar 2027 14:33:07 +0000
asID: 262316
IP address blocks: 167.250.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3e:58:04:6d:84:01:48:7e:1b:1e:4e:fe:27:bb:44:d3:de:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Validity
Not Before: Mar 18 14:28:07 2026 GMT
Not After : Mar 17 14:33:07 2027 GMT
Subject: CN=D8B10B0D27DD84B7E82CBEA9428F7DFCA0EF5415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:fc:77:01:7a:87:43:1d:94:af:93:5d:08:
55:6c:db:4d:0e:bb:bb:f1:52:b2:d3:18:5f:01:cd:
5c:c3:95:f9:89:05:aa:28:06:79:0b:ba:32:af:85:
cf:f8:4e:ad:84:79:3b:ed:af:c6:8c:69:b7:af:16:
0a:49:2e:48:bd:96:2d:b2:31:2e:0f:b4:d8:23:2a:
c1:f9:21:98:68:2b:90:1e:41:c3:5b:ad:83:00:9f:
95:0e:1d:7b:14:00:3d:8a:c2:64:c8:77:54:81:b1:
b9:f4:4f:02:f7:c0:02:db:97:4f:ea:b5:3b:5d:2c:
78:61:2d:96:07:37:d4:24:0d:12:88:8c:69:a8:dd:
9f:77:83:34:db:da:00:be:bf:57:65:65:cf:04:96:
f8:a3:5b:d8:ed:01:53:19:90:64:b6:13:b1:81:80:
db:48:67:b3:78:f4:78:42:8f:59:f3:e3:17:4f:32:
d4:ce:30:65:12:c1:66:b7:ad:da:28:59:9d:ac:66:
3a:57:f1:5c:62:b6:58:d1:fe:05:83:24:ce:0d:c8:
08:02:60:70:af:f7:23:bf:03:d6:c6:cd:c8:67:ef:
11:0c:ea:0c:b2:96:de:81:6e:f5:6e:df:cf:3f:30:
f7:ae:03:10:62:80:bd:d9:dd:9e:c1:1f:d9:fc:b7:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:0B:0D:27:DD:84:B7:E8:2C:BE:A9:42:8F:7D:FC:A0:EF:54:15
X509v3 Authority Key Identifier:
keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:16:94:74:10:12:86:be:c4:23:de:f8:43:6b:2f:10:69:f7:
ea:80:67:59:46:e5:9f:b2:e4:c8:d3:50:8a:7d:00:43:34:d1:
67:31:de:07:4c:97:87:86:da:a6:40:6c:31:ce:e4:bf:0c:a4:
21:dd:bf:e9:13:cb:7b:1d:ee:13:9b:4b:c2:2c:85:ff:5c:9e:
a2:bd:b6:0b:e6:43:a3:cb:cc:9b:ed:34:d2:be:cc:4c:cc:cb:
3f:a6:fd:3b:06:bc:10:7b:3e:4a:b2:d5:f7:ab:bc:01:33:b6:
48:16:59:f3:01:45:4d:b9:62:03:b0:1b:d0:67:09:df:54:3c:
4e:43:3c:19:d9:2a:e7:65:e0:fa:5d:b3:66:b4:17:58:bd:b6:
69:83:c6:62:7d:90:ed:53:e1:41:f2:aa:4e:c5:55:b0:18:ac:
9f:e7:80:56:64:26:0d:2c:cd:46:7b:bb:61:85:07:aa:33:e8:
85:a7:ed:90:fb:76:0c:60:32:b6:49:37:eb:10:6c:44:8a:74:
33:6c:26:eb:bd:75:b1:a3:37:8e:f7:77:0e:95:38:6f:5c:83:
58:90:b4:8b:13:b7:0e:47:00:6f:d0:f2:65:0d:2f:64:68:b4:
40:e2:8c:a9:72:07:cc:1b:dc:00:f5:12:38:63:77:6b:35:21:
80:54:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:56:52 2026 by rpki-client