
$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa
File: 3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier: JrTk3/3lwBWoMJO8IvhSgfjvIOiPLWmwM/7YbYVxCRs=
Subject key identifier: 01:58:B2:72:C1:5A:20:7D:C5:19:4C:92:3A:E4:9A:A1:A2:31:37:70
Certificate issuer: /CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Certificate serial: 1D7AB4E377C09E4C5D6B4A07E56298A263C75F5E
Authority key identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa
Signing time: Mon 16 Mar 2026 19:07:50 +0000
ROA not before: Mon 16 Mar 2026 19:02:50 +0000
ROA not after: Mon 15 Mar 2027 19:07:50 +0000
asID: 265181
IP address blocks: 167.249.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7a:b4:e3:77:c0:9e:4c:5d:6b:4a:07:e5:62:98:a2:63:c7:5f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Validity
Not Before: Mar 16 19:02:50 2026 GMT
Not After : Mar 15 19:07:50 2027 GMT
Subject: CN=0158B272C15A207DC5194C923AE49AA1A2313770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:43:b1:c8:b3:40:c5:f3:e2:fd:86:e4:ac:
04:8a:e3:ae:5f:b2:b1:2b:87:1d:02:ee:20:3a:64:
8f:a7:0f:5e:86:2a:07:be:23:1b:e9:b0:56:76:77:
18:29:51:61:53:18:5e:c5:7f:8d:89:28:89:d6:a2:
c3:96:6d:31:64:4d:ea:1b:7c:eb:8f:07:1f:1a:be:
da:55:11:f4:cf:bb:e3:b4:11:b3:b5:22:7e:f9:41:
04:d2:cf:00:2e:5b:7b:80:36:6c:26:dd:fd:ae:12:
6f:24:bc:2e:82:16:db:79:43:cf:19:ab:fb:e9:ff:
ed:2e:f4:2a:98:0f:1d:a5:bd:26:45:2b:55:33:cb:
bf:fd:6c:06:a7:7d:34:a0:ea:8f:49:d9:47:a4:c4:
a3:e8:ea:73:3a:8c:e3:bb:e9:37:31:ed:16:cf:74:
97:cc:90:1d:cc:11:ca:03:ad:c5:06:35:fe:b6:6a:
58:5f:54:a6:4a:f2:80:44:b6:1a:b2:ec:3d:86:2d:
12:1e:80:9b:20:10:24:74:59:4b:83:f9:64:f3:b2:
bc:22:d7:e5:ab:39:ec:4d:56:c3:e8:32:07:45:75:
6e:d7:a7:59:d3:2a:2a:62:f3:3e:27:fc:0b:7e:98:
39:78:1c:28:32:43:e7:ac:25:04:f1:2d:a3:22:b2:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:B2:72:C1:5A:20:7D:C5:19:4C:92:3A:E4:9A:A1:A2:31:37:70
X509v3 Authority Key Identifier:
keyid:D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3e:b9:61:1f:4c:25:55:90:1f:7c:68:ec:65:11:20:c0:d3:
ec:24:b4:d7:f2:17:a3:1f:30:99:e0:db:ca:66:18:0d:c5:5c:
f6:be:4b:22:28:0a:d3:da:e7:42:6a:d9:52:71:d1:a6:e3:2b:
20:b9:4e:7f:80:77:59:07:46:67:8e:e7:cd:1e:c2:49:20:c5:
fe:75:75:2b:fb:67:c2:10:bd:d4:e2:78:a4:cb:98:9c:f9:c4:
3b:88:94:d3:a2:f4:62:29:c2:76:01:84:73:76:98:88:f9:e4:
4e:c1:b9:84:60:bf:a6:d3:e9:aa:c7:03:78:5e:75:76:4b:b0:
49:d8:ab:eb:da:68:66:db:c4:fa:01:34:e8:7a:34:6d:ab:3a:
d3:54:fb:4f:7c:70:8f:4f:90:81:0c:c4:76:5f:2f:3a:25:17:
51:b8:ff:db:4e:9a:dd:ac:64:79:d4:97:85:c2:16:21:08:8f:
c1:38:2c:5d:91:b2:b6:9e:03:85:60:e3:31:3b:ae:6e:54:4d:
2f:24:8b:26:12:50:73:e3:1f:f6:51:26:ed:4c:77:d2:d9:b5:
df:ac:69:84:8a:94:ea:4c:8f:40:8b:79:ad:a7:62:a2:49:96:
08:ab:b0:03:57:6f:bf:a7:3e:6c:bf:66:82:bc:60:ef:35:b8:
37:0c:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:11 2026 by rpki-client