
$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa
File: 3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier: SRX7TKvLIME91Hu5gbIws4fzYx+8/0qbTMmQczKDSOs=
Subject key identifier: A3:E3:67:DD:38:2B:47:51:1E:5C:BB:56:F3:A7:53:1B:59:F8:8F:40
Certificate issuer: /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial: 22297561019B405684B967C6B288FADDD6A0B8FF
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa
Signing time: Fri 24 Jul 2026 14:00:39 +0000
ROA not before: Fri 24 Jul 2026 13:55:39 +0000
ROA not after: Fri 23 Jul 2027 14:00:39 +0000
asID: 269038
IP address blocks: 170.245.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 17:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:29:75:61:01:9b:40:56:84:b9:67:c6:b2:88:fa:dd:d6:a0:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Validity
Not Before: Jul 24 13:55:39 2026 GMT
Not After : Jul 23 14:00:39 2027 GMT
Subject: CN=A3E367DD382B47511E5CBB56F3A7531B59F88F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:45:e5:0c:9d:18:b1:5b:2f:62:c9:a3:f2:
7f:58:25:bf:19:bd:39:93:ae:ef:42:df:50:4d:4d:
63:1c:c7:b5:d1:8e:c1:30:8f:25:73:19:1b:1b:d5:
d5:b5:28:ec:b7:84:9a:e2:17:9a:e5:c2:4a:16:2c:
83:fb:26:18:0a:0b:9e:df:8c:9e:e3:3f:23:96:c6:
17:17:54:63:9d:33:c2:7f:8b:11:1c:9c:ec:a5:82:
14:dd:3d:1c:b5:5c:14:f6:0c:fe:5c:96:13:13:d8:
7f:b7:bd:47:b1:55:a6:d2:f1:89:12:98:99:cc:5e:
fd:70:f4:55:b6:63:01:77:97:0f:b9:df:8d:53:ed:
54:e4:6a:96:b8:d5:93:9f:a1:65:59:0b:4d:ac:44:
30:0c:f5:92:17:7e:87:44:0c:3d:ee:e8:62:61:93:
f7:2b:98:e5:24:b4:6a:6a:94:1b:36:c6:72:1d:ca:
14:97:2e:75:0b:60:bf:4d:37:b8:6b:8f:bf:f2:fd:
aa:48:e6:b4:77:f9:b6:35:f0:d8:08:58:87:6b:8e:
d0:86:b7:e2:14:a1:24:85:9a:b7:d2:49:36:a7:d6:
5f:0b:dc:b5:d3:63:b6:75:8d:7e:cf:ea:be:4b:02:
c7:98:fb:ba:31:98:e1:bc:01:17:f8:6a:6f:79:51:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:67:DD:38:2B:47:51:1E:5C:BB:56:F3:A7:53:1B:59:F8:8F:40
X509v3 Authority Key Identifier:
keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f4:73:c5:11:40:79:67:cf:1b:c2:9a:f2:b3:79:9d:b4:54:
d2:26:c4:a0:6e:a3:75:0c:56:2b:e1:4e:9e:a5:c1:53:6a:99:
d9:61:b6:f8:87:7e:79:df:ae:50:27:5f:57:85:9d:26:d8:11:
ec:dd:f4:c7:f5:00:08:ef:8f:13:85:3c:fe:ab:b9:a5:87:de:
1a:66:d8:f4:88:70:fb:9f:fc:df:37:3d:4c:41:2c:68:57:06:
b9:2d:bf:c3:d7:32:3b:61:c3:45:bf:dc:cc:7e:23:62:c5:46:
85:ae:38:de:fb:62:b1:1f:c0:d8:43:70:85:e7:bd:03:76:46:
d6:89:c9:d9:26:c4:76:1b:75:9c:02:ba:6d:30:f9:d3:16:77:
67:1c:35:c0:36:cf:15:73:45:f5:a9:80:ea:34:72:a4:e7:ec:
12:f8:d1:cc:7a:ef:57:87:48:23:f3:7e:09:09:bd:2a:e3:16:
1e:39:4a:42:e9:ac:a1:af:b6:11:e2:60:f4:e7:97:0b:2c:8c:
9e:d9:50:c0:f5:c3:ed:53:86:de:dc:cb:fd:5c:83:fe:09:c6:
ba:ce:1c:1b:8a:34:d6:cc:2a:b9:ec:89:c7:f2:59:c4:37:09:
03:96:5c:af:a9:f6:aa:12:ea:21:42:ac:ab:2c:38:cb:b4:90:
a2:3b:4d:7e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIil1YQGbQFaEuWfGsoj63daguP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGNjQwRDQwQTk4QkVERUIzRkFDOTU1MTEzODc2QzBC
MDRGRUU2MjAeFw0yNjA3MjQxMzU1MzlaFw0yNzA3MjMxNDAwMzlaMDMxMTAvBgNV
BAMTKEEzRTM2N0REMzgyQjQ3NTExRTVDQkI1NkYzQTc1MzFCNTlGODhGNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVkXlDJ0YsVsvYsmj8n9YJb8Z
vTmTru9C31BNTWMcx7XRjsEwjyVzGRsb1dW1KOy3hJriF5rlwkoWLIP7JhgKC57f
jJ7jPyOWxhcXVGOdM8J/ixEcnOylghTdPRy1XBT2DP5clhMT2H+3vUexVabS8YkS
mJnMXv1w9FW2YwF3lw+5341T7VTkapa41ZOfoWVZC02sRDAM9ZIXfodEDD3u6GJh
k/crmOUktGpqlBs2xnIdyhSXLnULYL9NN7hrj7/y/apI5rR3+bY18NgIWIdrjtCG
t+IUoSSFmrfSSTan1l8L3LXTY7Z1jX7P6r5LAseY+7oxmOG8ARf4am95UVmfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUo+Nn3TgrR1EeXLtW86dTG1n4j0AwHwYDVR0j
BBgwFoAUfPZA1AqYvt6z+slVETh2wLBP7mIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVVKVDdqdW9VNldGN2s1TW9wTGFqNkczTHZSeUNWZDlGQ3R4RkE0TGFl
Q1YvMC83Q0Y2NDBENDBBOThCRURFQjNGQUM5NTUxMTM4NzZDMEIwNEZFRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRjY0MEQ0MEE5OEJFREVC
M0ZBQzk1NTExMzg3NkMwQjA0RkVFNjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlVSlQ3anVvVTZXRjdrNU1vcExhajZHM0x2UnlDVmQ5RkN0eEZBNExhZUNWLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzOTMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr11DANBgkqhkiG9w0BAQsFAAOCAQEAkfRz
xRFAeWfPG8Ka8rN5nbRU0ibEoG6jdQxWK+FOnqXBU2qZ2WG2+Id+ed+uUCdfV4Wd
JtgR7N30x/UACO+PE4U8/qu5pYfeGmbY9Ihw+5/83zc9TEEsaFcGuS2/w9cyO2HD
Rb/czH4jYsVGha443vtisR/A2ENwhee9A3ZG1onJ2SbEdht1nAK6bTD50xZ3Zxw1
wDbPFXNF9amA6jRypOfsEvjRzHrvV4dII/N+CQm9KuMWHjlKQumsoa+2EeJg9OeX
CyyMntlQwPXD7VOG3tzL/VyD/gnGus4cG4o01swqueyJx/JZxDcJA5Zcr6n2qhLq
IUKsqyw4y7SQojtNfg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:41:44 2026 by rpki-client