
$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32322d3234203d3e20323633343833.roa
File: 3136382e302e3136342e302f32322d3234203d3e20323633343833.roa (raw, json)
Hash identifier: Eh3hm5UO5THUgv843hvclt2TPT9DVghbdaVewU8IKcI=
Subject key identifier: 9D:3D:B9:1E:AD:E4:06:08:0E:80:41:74:24:70:16:0B:93:FE:71:47
Certificate issuer: /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial: 3AF3C85584573A82BBA9171188A9E9681CD3F90D
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32322d3234203d3e20323633343833.roa
Signing time: Tue 08 Sep 2026 16:18:50 +0000
ROA not before: Tue 08 Sep 2026 16:13:50 +0000
ROA not after: Tue 07 Sep 2027 16:18:50 +0000
asID: 263483
IP address blocks: 168.0.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl
rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 07:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f3:c8:55:84:57:3a:82:bb:a9:17:11:88:a9:e9:68:1c:d3:f9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Validity
Not Before: Sep 8 16:13:50 2026 GMT
Not After : Sep 7 16:18:50 2027 GMT
Subject: CN=9D3DB91EADE406080E8041742470160B93FE7147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:5c:8c:5a:87:d8:10:da:bd:17:87:6e:a0:
d7:5e:0a:aa:d1:e3:20:53:bb:dc:21:bb:00:1b:26:
9c:60:01:67:23:54:42:6e:64:49:1f:d0:f9:14:f3:
3b:3b:9f:1e:3b:24:af:f1:a4:0b:f3:ba:7f:d5:85:
18:86:e7:3c:f7:ed:a2:3d:14:2b:54:7e:67:d1:2e:
55:6e:eb:3a:6c:da:ba:12:15:67:eb:cc:19:79:8f:
ed:7d:bd:85:49:8d:8d:85:f6:d0:cd:05:c9:90:c6:
6f:58:74:7f:65:e1:16:6f:bd:c5:47:d9:f3:d5:b0:
65:58:42:7e:25:bd:49:2d:d1:a8:8e:01:4a:fb:b8:
5e:4f:59:0f:40:51:cf:9d:b7:e3:4d:ca:72:fc:33:
7f:5d:13:24:7a:10:15:11:67:c3:b2:fa:66:16:f3:
13:35:03:e4:a0:37:32:2b:72:08:37:c4:98:ff:03:
97:cb:62:44:f8:1a:62:1c:b6:ef:34:0c:e1:54:f8:
b4:9e:1d:ee:cb:9d:a4:f8:88:b1:05:fa:1a:ed:1a:
1d:44:07:b0:f3:f7:7a:ca:66:b9:e7:b7:55:2f:44:
ce:9a:5a:d7:0e:44:7b:c1:93:97:ef:8d:ab:92:7c:
2c:10:14:65:7d:8c:14:ab:5f:df:0d:5d:86:47:58:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:B9:1E:AD:E4:06:08:0E:80:41:74:24:70:16:0B:93:FE:71:47
X509v3 Authority Key Identifier:
keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32322d3234203d3e20323633343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.164.0/22
Signature Algorithm: sha256WithRSAEncryption
52:40:e5:b6:13:c3:85:ae:e1:89:31:cb:a4:5a:dc:2b:20:4c:
88:89:fd:34:65:f2:41:ec:79:da:24:4c:21:f2:aa:d9:01:9a:
ce:6b:a2:95:8a:ae:2e:9c:cc:35:71:95:93:74:90:d7:ae:8b:
83:0d:72:a6:3c:07:e7:80:1a:de:d4:ae:bb:18:a6:d4:0d:9c:
df:13:60:7d:e4:8c:fe:6c:1e:09:f8:2e:dd:8c:1b:fc:a6:eb:
3a:1e:30:6f:92:a2:c3:56:f7:47:18:0d:7c:83:1a:65:89:9d:
c1:e1:2b:ff:a9:cc:d6:33:50:b7:a4:6b:96:f5:2b:8d:a6:08:
34:1d:72:12:9a:05:5e:ad:5c:82:a3:e7:74:10:d5:6a:ae:86:
5a:53:55:60:d1:93:18:b6:7d:93:61:b0:2f:2d:7b:52:f2:20:
34:8f:be:14:0a:b7:e4:df:26:0f:fe:6c:06:a6:dd:68:f3:3d:
09:16:29:18:66:f2:50:63:7c:ee:2d:11:cf:05:a4:a0:b2:01:
42:c9:2f:73:71:de:20:10:0b:a0:dc:d8:83:a7:57:d5:3a:50:
fb:ca:e8:91:46:b4:b1:d0:47:f1:7c:3b:ff:de:02:39:b3:6f:
14:e2:ed:14:e5:58:31:eb:79:2a:11:cd:ad:43:a7:ea:17:ad:
d4:94:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:02 2026 by rpki-client