
$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
File: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (raw, json)
Hash identifier: zUh5d0ilRi1kWKl+eSUSG/nXPhyikJVFYIqNwaCIunY=
Subject key identifier: 6B:D6:0A:5E:B5:4A:F2:84:57:18:A3:0F:69:BF:EE:99:0F:67:DE:E4
Certificate issuer: /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial: 354C5DAC395618F9E82468F782147AF2767ED045
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
Signing time: Tue 10 Mar 2026 20:55:30 +0000
ROA not before: Tue 10 Mar 2026 20:50:30 +0000
ROA not after: Tue 09 Mar 2027 20:55:30 +0000
asID: 28277
IP address blocks: 189.14.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 17:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4c:5d:ac:39:56:18:f9:e8:24:68:f7:82:14:7a:f2:76:7e:d0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Validity
Not Before: Mar 10 20:50:30 2026 GMT
Not After : Mar 9 20:55:30 2027 GMT
Subject: CN=6BD60A5EB54AF2845718A30F69BFEE990F67DEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:44:49:37:c1:a0:76:00:50:4f:7c:5b:49:
d0:7e:f7:fd:80:10:3e:e7:0f:a6:58:a1:c7:13:79:
d0:2e:d7:68:5a:18:b6:d7:e4:65:17:4c:b9:7b:a4:
5b:49:f2:1d:48:f1:9d:83:a9:36:2e:e2:5d:fb:e5:
f4:62:22:23:82:a4:81:79:f7:e1:e7:3c:12:f5:54:
59:59:8b:fd:06:ea:fd:9e:b5:8e:31:c5:6e:55:26:
33:42:cc:b2:de:03:33:7d:0c:67:42:3d:a5:1e:5f:
5a:af:7c:12:fc:3c:8e:3e:f0:78:20:ab:42:43:74:
b9:fe:8a:9b:a3:2c:14:38:18:65:1f:7a:90:b5:ec:
ba:68:32:46:b1:e4:a3:03:84:96:c2:e6:bb:15:b8:
c5:89:eb:a6:31:7b:ad:4b:b5:3c:95:1a:ef:29:ef:
55:60:da:82:77:14:87:1c:97:63:f5:b1:54:47:4d:
12:4d:20:d5:30:28:19:66:9a:c5:f2:38:60:49:21:
35:20:cf:84:21:04:e8:c7:af:9d:46:cc:a5:97:29:
fe:45:c4:4e:ba:cf:20:5e:e9:09:45:8d:c5:81:6a:
88:fd:c7:9d:19:51:c8:61:6e:ee:07:85:df:04:fc:
6d:8c:93:6b:81:f0:43:ba:e4:a2:cd:7f:f8:ed:7c:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:0A:5E:B5:4A:F2:84:57:18:A3:0F:69:BF:EE:99:0F:67:DE:E4
X509v3 Authority Key Identifier:
keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.80.0/20
Signature Algorithm: sha256WithRSAEncryption
21:1c:e7:3e:ab:5f:ba:af:7e:7b:6a:3a:19:bd:6a:6b:35:24:
c5:fb:df:7c:ab:ce:3a:f6:a0:ad:97:ef:1c:3c:da:83:ed:67:
b0:e5:75:9a:8e:13:f8:37:e8:91:f9:72:fc:26:05:86:6c:88:
c8:54:ba:3c:44:3d:81:8f:d3:9a:6a:4a:02:be:52:a2:59:95:
c1:5e:da:04:fa:8b:a0:d9:34:21:32:40:db:0c:d9:00:1a:17:
4c:b8:df:f8:99:66:63:3e:38:0b:37:95:83:d8:0d:90:31:a5:
d8:16:bb:33:ff:1f:43:61:47:6b:de:27:53:1f:dc:69:16:8a:
92:95:0e:93:2f:d2:5c:69:09:91:a8:b5:c3:b6:f8:85:5e:af:
cd:4b:60:d2:3b:46:f7:b8:fc:f0:6b:83:ad:82:19:f4:b6:c9:
d9:88:e1:88:c7:90:0f:69:c4:a3:bc:0e:84:e8:c7:57:47:df:
4b:0b:cd:b6:ee:d7:1c:8d:16:84:10:28:44:59:dc:53:55:30:
83:6e:bc:9a:ba:be:16:48:50:29:42:57:f5:df:34:69:24:c1:
13:34:ac:f9:58:2f:11:60:a7:d3:27:ec:46:9a:24:21:22:21:
49:3b:41:d3:d8:38:a7:e1:db:e6:60:fe:1c:d7:2e:bb:3a:7e:
6e:4a:8e:cd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNUxdrDlWGPnoJGj3ghR68nZ+0EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB
QjlENzNDODAeFw0yNjAzMTAyMDUwMzBaFw0yNzAzMDkyMDU1MzBaMDMxMTAvBgNV
BAMTKDZCRDYwQTVFQjU0QUYyODQ1NzE4QTMwRjY5QkZFRTk5MEY2N0RFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYERJN8GgdgBQT3xbSdB+9/2A
ED7nD6ZYoccTedAu12haGLbX5GUXTLl7pFtJ8h1I8Z2DqTYu4l375fRiIiOCpIF5
9+HnPBL1VFlZi/0G6v2etY4xxW5VJjNCzLLeAzN9DGdCPaUeX1qvfBL8PI4+8Hgg
q0JDdLn+ipujLBQ4GGUfepC17LpoMkax5KMDhJbC5rsVuMWJ66Yxe61LtTyVGu8p
71Vg2oJ3FIccl2P1sVRHTRJNINUwKBlmmsXyOGBJITUgz4QhBOjHr51GzKWXKf5F
xE66zyBe6QlFjcWBaoj9x50ZUchhbu4Hhd8E/G2Mk2uB8EO65KLNf/jtfDExAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUa9YKXrVK8oRXGKMPab/umQ9n3uQwHwYDVR0j
BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ
RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD
MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3dHZwRkhGM0JrWlBjNUpaU2lVTEt0akdtdlBlNGZBanhpVTJESlpxUEcxLzAv
MzEzODM5MmUzMTM0MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMy
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0OUDANBgkqhkiG9w0BAQsFAAOCAQEAIRznPqtfuq9+
e2o6Gb1qazUkxfvffKvOOvagrZfvHDzag+1nsOV1mo4T+Dfokfly/CYFhmyIyFS6
PEQ9gY/TmmpKAr5SolmVwV7aBPqLoNk0ITJA2wzZABoXTLjf+JlmYz44CzeVg9gN
kDGl2Ba7M/8fQ2FHa94nUx/caRaKkpUOky/SXGkJkai1w7b4hV6vzUtg0jtG97j8
8GuDrYIZ9LbJ2YjhiMeQD2nEo7wOhOjHV0ffSwvNtu7XHI0WhBAoRFncU1Uwg268
mrq+FkhQKUJX9d80aSTBEzSs+VgvEWCn0yfsRpokISIhSTtB09g4p+Hb5mD+HNcu
uzp+bkqOzQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:22:18 2026 by rpki-client