
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa
File: 3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa (raw, json)
Hash identifier: M47JPHrVYTyA0k5KJycwkw6SIdoofPrkjF+JTcCrRXE=
Subject key identifier: D6:10:20:B0:06:8E:FB:8D:45:D0:64:E4:F3:C9:90:07:DE:3E:CD:DC
Certificate issuer: /CN=03496418E6566C421089E8C68778E2A8F969AF30
Certificate serial: 520A4E18BF23007D08B7BD0BA9C098228A281EDE
Authority key identifier: 03:49:64:18:E6:56:6C:42:10:89:E8:C6:87:78:E2:A8:F9:69:AF:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03496418E6566C421089E8C68778E2A8F969AF30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa
Signing time: Fri 20 Mar 2026 17:28:00 +0000
ROA not before: Fri 20 Mar 2026 17:23:00 +0000
ROA not after: Fri 19 Mar 2027 17:28:00 +0000
asID: 264889
IP address blocks: 168.227.220.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/03496418E6566C421089E8C68778E2A8F969AF30.crl
rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/03496418E6566C421089E8C68778E2A8F969AF30.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03496418E6566C421089E8C68778E2A8F969AF30.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 03:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0a:4e:18:bf:23:00:7d:08:b7:bd:0b:a9:c0:98:22:8a:28:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03496418E6566C421089E8C68778E2A8F969AF30
Validity
Not Before: Mar 20 17:23:00 2026 GMT
Not After : Mar 19 17:28:00 2027 GMT
Subject: CN=D61020B0068EFB8D45D064E4F3C99007DE3ECDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:ff:18:58:8d:d2:e7:df:b3:3d:c8:e1:92:
d1:2a:7b:79:d0:a8:f8:bc:34:db:41:7d:bd:46:3d:
48:13:6a:33:3d:97:b3:a6:89:e7:1d:d5:e7:44:a1:
64:40:88:ce:34:6e:b0:4c:f9:e7:72:02:a0:f5:45:
c3:33:c0:4b:57:2b:a4:08:3b:2d:bd:a6:24:87:8f:
8a:0d:0c:72:5e:be:0e:a2:46:ba:fb:a8:f3:c6:07:
46:bd:ce:14:eb:bf:d7:44:6d:37:f3:97:00:40:0c:
72:87:ae:8c:89:b1:3c:84:71:1b:55:77:05:a9:8d:
9b:98:8b:46:7d:4d:8d:54:23:fb:54:ae:74:20:1d:
94:af:86:18:52:0f:1e:15:13:31:06:ca:b3:27:e4:
cb:99:49:9d:66:62:fc:1d:fe:e7:04:3a:71:18:6e:
c2:54:82:09:f8:f8:41:bb:26:a2:55:74:d3:29:bb:
18:1c:dd:4c:5b:41:7c:d5:bd:39:9a:c1:a0:47:e7:
6c:53:31:e8:fd:a2:10:19:19:f3:6f:29:47:1e:2b:
69:f3:21:09:22:26:34:c5:21:f8:d9:34:5e:9a:fc:
ac:ec:d9:d1:b5:d0:32:bc:aa:67:a5:82:50:b8:ed:
e3:29:82:82:28:bc:0e:56:77:56:1a:e3:6f:be:a2:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:20:B0:06:8E:FB:8D:45:D0:64:E4:F3:C9:90:07:DE:3E:CD:DC
X509v3 Authority Key Identifier:
keyid:03:49:64:18:E6:56:6C:42:10:89:E8:C6:87:78:E2:A8:F9:69:AF:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/03496418E6566C421089E8C68778E2A8F969AF30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03496418E6566C421089E8C68778E2A8F969AF30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/1/3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:08:18:33:10:92:d4:de:19:42:ed:ff:63:34:5e:b8:9f:6b:
44:7a:df:08:8e:22:e4:2a:d7:33:6c:e1:50:d3:5c:d6:50:e2:
be:59:7a:dd:9a:64:e4:c3:0a:b7:94:96:40:6b:8a:ce:46:b2:
7b:e9:ca:ff:87:f0:80:aa:a6:17:37:55:e6:41:9d:29:72:18:
62:b4:38:dd:1e:e7:4e:53:eb:c8:ec:1b:84:b1:e2:88:3a:45:
b4:61:a4:8d:17:20:6b:b3:e6:5b:0b:8b:00:f1:64:b3:57:e9:
00:34:63:fd:26:95:78:ec:6f:d0:b7:81:d2:35:cf:e6:5f:ba:
f8:1b:1d:d6:fe:eb:cf:ba:b2:c9:8b:59:6b:7f:62:f1:14:c1:
88:90:f1:a4:8b:ad:2d:91:e7:d9:04:af:c9:5a:21:05:66:1b:
9b:b2:cf:fa:26:50:38:11:00:b1:bc:98:9a:c2:d6:ff:d4:7e:
46:3b:cd:52:d3:3f:9c:1f:2e:3e:ea:84:81:a1:0e:c5:6e:c6:
74:22:c7:2c:e7:f8:d2:04:2e:5d:67:0c:ef:22:ed:bc:26:fe:
33:f5:09:18:1b:de:62:1b:6d:63:7a:a6:13:70:30:c8:68:bc:
a6:58:4a:36:f9:89:97:d8:a1:6f:bd:fe:2f:39:c2:0c:bf:56:
59:37:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:03 2026 by rpki-client