
$ rpki-client -vvvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
File: 3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa (raw, json)
Hash identifier: rBVWH1MTw224F/OfcEbmABk5KZh2BBqvfCkOVBHGXD0=
Subject key identifier: 48:4C:AA:28:FC:4E:19:13:CB:50:90:5A:61:D4:82:5E:A7:D8:B0:FF
Certificate issuer: /CN=A9A5DFB43987480BBB355C5728B68951A16DE5BE
Certificate serial: 71BEA251A9CBA60990DACF98182CE78222E58369
Authority key identifier: A9:A5:DF:B4:39:87:48:0B:BB:35:5C:57:28:B6:89:51:A1:6D:E5:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
Signing time: Thu 01 Oct 2026 12:19:04 +0000
ROA not before: Thu 01 Oct 2026 12:14:04 +0000
ROA not after: Thu 30 Sep 2027 12:19:04 +0000
asID: 266357
IP address blocks: 170.239.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.crl
rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 08:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:be:a2:51:a9:cb:a6:09:90:da:cf:98:18:2c:e7:82:22:e5:83:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9A5DFB43987480BBB355C5728B68951A16DE5BE
Validity
Not Before: Oct 1 12:14:04 2026 GMT
Not After : Sep 30 12:19:04 2027 GMT
Subject: CN=484CAA28FC4E1913CB50905A61D4825EA7D8B0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:cc:39:7f:70:fb:1f:34:9b:3b:80:74:db:
b9:c6:06:b6:fb:bf:1c:c0:3e:c3:e5:91:84:71:ff:
07:d9:40:bc:df:e4:36:85:02:6d:e1:24:55:4a:f3:
70:6e:fb:b3:26:2a:7c:06:9d:e7:b1:5e:b3:91:95:
0c:e7:2e:cd:c9:a0:18:a8:28:f7:13:ab:56:ac:c2:
5e:ae:5f:38:e7:44:1a:ce:0d:21:37:d9:fc:79:4d:
9f:c8:5e:ca:fd:db:54:d8:95:d2:33:14:2b:90:70:
cd:cc:fd:39:4d:40:99:de:c0:25:e3:61:cb:b6:93:
96:3f:82:d3:4c:ec:34:50:fa:13:d5:df:9e:9d:3e:
19:e2:35:1f:47:00:ca:7a:db:b5:88:59:51:4d:80:
e5:bc:7d:ab:ae:a3:5c:c4:bd:09:e8:f9:87:26:e7:
90:4e:71:40:3c:49:f1:ae:42:c1:94:7b:8c:a1:71:
3b:1f:e8:d4:d6:25:54:00:e2:20:cd:75:ea:3e:7a:
80:1f:58:0b:ac:3d:7f:95:46:2d:1b:1a:09:66:1a:
ae:e6:df:33:55:aa:74:73:f3:35:24:d8:1f:a0:c0:
40:64:ec:3b:0b:ac:75:a7:f5:95:34:d4:99:12:fd:
ba:0b:96:69:4a:b9:2e:20:b4:73:d6:4d:2c:b1:c1:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:AA:28:FC:4E:19:13:CB:50:90:5A:61:D4:82:5E:A7:D8:B0:FF
X509v3 Authority Key Identifier:
keyid:A9:A5:DF:B4:39:87:48:0B:BB:35:5C:57:28:B6:89:51:A1:6D:E5:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3137302e3233392e3230382e302f32322d3234203d3e20323636333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:cf:3d:bd:0a:90:b2:ff:b3:b8:83:ea:95:e2:33:cb:c1:c2:
a0:44:81:73:fa:3c:7e:c2:58:5c:0a:eb:89:1e:1a:41:78:4d:
9a:24:91:27:8e:56:dc:2f:e3:b3:ff:1d:09:8c:aa:bf:09:10:
51:d6:f4:f6:42:ed:09:d5:8d:6b:4d:5d:9d:4c:49:75:98:7c:
bd:e0:02:d1:ed:3f:c2:3c:69:2e:5f:99:8c:0c:9e:85:c4:ab:
e4:b6:45:55:1b:30:97:81:19:19:41:7c:86:13:1c:6a:8b:77:
eb:1c:55:30:82:f3:32:6d:c5:37:8e:c4:71:97:8f:fd:63:5c:
6c:fd:84:be:d3:18:d3:8d:0f:01:05:df:d0:86:1e:83:92:84:
85:48:b6:9d:fc:9c:18:5c:75:28:e0:d2:a7:fc:f1:46:53:e3:
5d:ee:43:32:5e:fb:ce:71:99:1c:a0:dd:a8:03:3a:71:ff:0a:
67:21:7d:8b:6c:07:e6:91:e8:96:e8:3b:11:3d:3c:e9:c9:65:
c1:7f:0a:4f:9b:6c:52:75:f5:c7:3a:b6:a5:af:96:bf:5c:4f:
92:bb:d6:49:2e:4a:34:ea:c6:99:35:44:2b:f1:c5:3e:7b:89:
d8:c5:f5:0a:1b:ac:d1:0e:05:e9:63:bf:86:34:43:53:2c:f2:
35:e7:9a:a2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcb6iUanLpgmQ2s+YGCzngiLlg2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlBNURGQjQzOTg3NDgwQkJCMzU1QzU3MjhCNjg5NTFB
MTZERTVCRTAeFw0yNjEwMDExMjE0MDRaFw0yNzA5MzAxMjE5MDRaMDMxMTAvBgNV
BAMTKDQ4NENBQTI4RkM0RTE5MTNDQjUwOTA1QTYxRDQ4MjVFQTdEOEIwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrfMw5f3D7HzSbO4B027nGBrb7
vxzAPsPlkYRx/wfZQLzf5DaFAm3hJFVK83Bu+7MmKnwGneexXrORlQznLs3JoBio
KPcTq1aswl6uXzjnRBrODSE32fx5TZ/IXsr921TYldIzFCuQcM3M/TlNQJnewCXj
Ycu2k5Y/gtNM7DRQ+hPV356dPhniNR9HAMp627WIWVFNgOW8fauuo1zEvQno+Ycm
55BOcUA8SfGuQsGUe4yhcTsf6NTWJVQA4iDNdeo+eoAfWAusPX+VRi0bGglmGq7m
3zNVqnRz8zUk2B+gwEBk7DsLrHWn9ZU01JkS/boLlmlKuS4gtHPWTSyxwTvFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSEyqKPxOGRPLUJBaYdSCXqfYsP8wHwYDVR0j
BBgwFoAUqaXftDmHSAu7NVxXKLaJUaFt5b4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJtcDI1MkJia3B5UXYyeWFWUllWaDRpb3ZBcUFtVTYzVEM4R1o3NHJl
cjkvMC9BOUE1REZCNDM5ODc0ODBCQkIzNTVDNTcyOEI2ODk1MUExNkRFNUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5QTVERkI0Mzk4NzQ4MEJC
QjM1NUM1NzI4QjY4OTUxQTE2REU1QkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCbXAyNTJCYmtweVF2MnlhVlJZVmg0aW92QXFBbVU2M1RDOEdaNzRyZXI5LzAv
MzEzNzMwMmUzMjMzMzkyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrv0DANBgkqhkiG9w0BAQsFAAOCAQEATM89
vQqQsv+zuIPqleIzy8HCoESBc/o8fsJYXArriR4aQXhNmiSRJ45W3C/js/8dCYyq
vwkQUdb09kLtCdWNa01dnUxJdZh8veAC0e0/wjxpLl+ZjAyehcSr5LZFVRswl4EZ
GUF8hhMcaot36xxVMILzMm3FN47EcZeP/WNcbP2EvtMY040PAQXf0IYeg5KEhUi2
nfycGFx1KODSp/zxRlPjXe5DMl77znGZHKDdqAM6cf8KZyF9i2wH5pHolug7ET08
6cllwX8KT5tsUnX1xzq2pa+Wv1xPkrvWSS5KNOrGmTVEK/HFPnuJ2MX1Chus0Q4F
6WO/hjRDUyzyNeeaog==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:22:52 2026 by rpki-client