
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
File: 3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: wk+ytcmj+MZe6ujq+6En41RPUr6eUygC4NlDnvuo1Iw=
Subject key identifier: 8A:7D:DB:9B:73:65:95:74:9E:23:D4:37:E7:A8:72:3C:A5:BA:7C:53
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 0D2B27869211377C8CFCFC06BCEC3400B988B93D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
Signing time: Sat 04 Jul 2026 13:44:01 +0000
ROA not before: Sat 04 Jul 2026 13:39:01 +0000
ROA not after: Sat 03 Jul 2027 13:44:01 +0000
asID: 28201
IP address blocks: 170.239.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 22:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2b:27:86:92:11:37:7c:8c:fc:fc:06:bc:ec:34:00:b9:88:b9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Jul 4 13:39:01 2026 GMT
Not After : Jul 3 13:44:01 2027 GMT
Subject: CN=8A7DDB9B736595749E23D437E7A8723CA5BA7C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:dd:e6:a4:a1:e0:83:2c:11:c7:e9:d4:bf:
fa:7c:aa:b6:47:2d:12:42:c9:2a:6b:06:fb:34:9e:
79:b0:d9:86:9c:99:7f:5b:45:27:27:eb:b2:b6:64:
84:49:e0:2a:9a:f8:5b:0b:fa:5e:89:6a:f8:6a:f4:
4c:63:a7:f4:78:0a:60:2f:4f:50:61:f8:4b:37:a3:
c4:02:d1:5f:25:c7:11:82:5f:ca:48:67:ac:a9:3f:
c6:28:dc:03:24:86:40:5d:8d:f5:80:e4:0f:ea:3a:
a0:26:7c:61:88:52:9f:98:d4:d0:d6:d2:20:d2:44:
95:55:75:04:15:f7:64:ad:d1:f6:ba:6d:ee:cf:be:
cb:cc:2e:3f:3b:34:be:e3:89:a3:32:aa:71:b2:71:
fb:31:ef:c1:d6:7b:cf:c8:5e:be:1c:8e:f3:97:88:
0f:6e:a0:46:83:fe:9a:a7:33:2d:be:41:f5:03:24:
44:c2:63:06:e8:c9:6e:2c:1c:f7:db:80:b7:44:fa:
a3:3d:0a:ae:a1:c3:04:41:88:d4:c4:3a:17:e5:0c:
61:80:87:ac:f6:ce:f4:88:44:28:6c:2b:a1:9a:c7:
1f:02:c5:7c:91:eb:de:22:da:26:3e:92:e9:c3:b7:
83:28:6e:cb:d4:4c:b3:40:d4:2e:7f:d1:b0:ca:d1:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:DB:9B:73:65:95:74:9E:23:D4:37:E7:A8:72:3C:A5:BA:7C:53
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3232302e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.220.0/22
Signature Algorithm: sha256WithRSAEncryption
77:bf:69:d0:37:f1:7e:51:c3:2d:dd:ec:dc:8b:24:b6:f4:be:
47:05:a1:5c:1a:82:77:47:09:1d:5e:84:f1:b5:7b:3c:92:0f:
eb:e9:56:2b:08:3c:48:4a:3b:84:6a:36:f9:3a:3b:09:f0:e6:
dc:91:9e:7e:5e:26:f5:2f:20:63:47:52:f0:39:07:2f:fd:d8:
3a:c8:67:5a:6b:fe:3b:72:97:f6:b2:1d:94:c4:87:e7:a9:7c:
65:5e:35:17:c0:fc:a2:0d:ef:a0:17:37:57:d9:9c:11:a1:d9:
c5:56:8c:90:3e:5d:99:3a:ba:e5:3a:7c:84:a2:5b:25:7a:8b:
da:df:ab:88:52:0b:19:e7:94:49:a4:24:e2:0c:da:45:8b:77:
c8:6c:e2:30:fc:74:d6:dd:5a:96:87:b4:1f:5c:38:f4:3a:b8:
ed:41:57:de:82:ba:0d:d1:4c:a5:e8:40:2c:48:49:0b:11:48:
c8:ea:41:a7:f2:ff:f7:70:d3:cf:5d:fb:1e:c8:fc:dc:5a:81:
b9:d9:2c:59:fa:60:6b:b7:66:e5:4e:4c:95:07:3a:de:bd:d3:
cc:b6:62:e1:06:b0:06:fe:56:42:82:ba:96:37:9a:93:b8:87:
c4:76:52:3d:46:ac:b5:ec:a6:78:6a:a6:6f:b5:3c:2d:cd:10:
c2:5d:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:22 2026 by rpki-client