
$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa
File: 3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa (raw, json)
Hash identifier: RnnqFnuRTJSTCS6yQgDAL5p9xs898xsCSxUZMmK53N8=
Subject key identifier: 46:8C:E5:1C:FB:34:94:63:E1:3C:84:87:87:C9:28:A5:1E:28:FA:58
Certificate issuer: /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Certificate serial: 5210A4FDFDB85EDB9FFCEC7EC8198D63A64D1CC6
Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa
Signing time: Mon 02 Mar 2026 22:55:39 +0000
ROA not before: Mon 02 Mar 2026 22:50:39 +0000
ROA not after: Mon 01 Mar 2027 22:55:39 +0000
asID: 265173
IP address blocks: 167.249.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 21:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:10:a4:fd:fd:b8:5e:db:9f:fc:ec:7e:c8:19:8d:63:a6:4d:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Validity
Not Before: Mar 2 22:50:39 2026 GMT
Not After : Mar 1 22:55:39 2027 GMT
Subject: CN=468CE51CFB349463E13C848787C928A51E28FA58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:49:d9:c8:a9:06:e4:4f:87:de:90:13:6a:
6a:eb:e0:f8:3e:51:de:8e:28:65:cc:e4:fa:05:6d:
33:2e:a2:ce:47:f8:a3:3b:70:11:52:2a:72:40:3c:
80:d9:eb:1e:55:5b:ec:6e:82:c8:f4:87:84:db:d2:
71:d5:07:58:0a:9a:ee:ca:d3:09:94:72:f4:bb:30:
a0:3b:65:7a:f9:ab:eb:5b:22:66:68:43:48:6b:aa:
e8:99:01:4d:25:91:61:94:1e:d0:39:9d:92:e7:9b:
e8:df:e6:2f:21:ec:a9:57:06:40:ce:c4:39:f5:2e:
76:3e:1d:35:15:63:76:dc:e3:2c:76:d5:a6:d1:11:
71:27:f3:55:b6:20:f6:5c:3d:02:74:df:45:fb:5a:
1c:57:d3:d8:70:52:f0:3a:09:bb:4e:b2:c7:f3:86:
9f:94:f3:61:08:e7:bf:dc:d7:8b:9c:ea:04:02:1d:
39:51:86:a6:d7:b1:61:cd:e7:af:ad:3e:87:99:78:
4f:2e:9a:3e:98:53:0f:60:9f:62:9b:86:45:78:34:
77:ed:84:40:65:df:ed:3a:ab:02:16:ce:f8:0b:47:
10:5a:64:dd:66:e0:12:ab:29:98:9c:d5:01:bd:2d:
3d:c1:f3:16:8c:da:e5:29:56:2f:07:36:d3:3e:35:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8C:E5:1C:FB:34:94:63:E1:3C:84:87:87:C9:28:A5:1E:28:FA:58
X509v3 Authority Key Identifier:
keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.244.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c0:bb:d4:8c:56:a6:26:df:2b:d4:f9:1f:8c:37:3b:59:0d:
24:64:4d:f7:66:4f:44:47:d7:49:14:19:51:6d:01:69:3c:ef:
56:cc:31:74:cd:37:36:cc:5a:f0:8d:1f:bf:3a:6f:74:7d:6e:
56:dc:fb:18:ff:b1:e0:5d:07:5b:2b:01:c2:48:a2:cd:72:a6:
49:19:83:8f:84:f6:1b:52:60:d6:c5:9d:06:e2:ec:fb:db:9a:
3f:42:a5:80:54:ac:d6:1a:93:f8:cc:6c:a4:63:ac:e1:d3:8f:
cd:31:67:33:6f:94:26:7d:9c:53:98:cc:82:0a:5e:94:9e:66:
65:35:d8:a8:55:0b:58:e3:d9:db:71:ba:77:c5:31:e7:59:1e:
cb:3f:a4:45:52:e7:fb:11:c4:6c:7d:2f:be:71:b0:f4:0a:df:
22:5b:8a:d9:f1:64:e4:5a:0c:23:2d:75:5a:9a:72:e3:bb:a4:
9f:67:fd:4d:48:94:ad:95:26:88:68:a1:fd:53:27:77:45:16:
bf:f0:26:45:24:4b:54:25:a2:da:17:01:1a:19:5b:eb:6e:2f:
73:92:8a:b5:92:80:ce:50:a5:1c:17:38:2c:26:6c:cc:13:f1:
76:e5:9f:a8:e7:3e:4e:c8:03:0e:d7:d8:fe:12:94:b8:58:9a:
9c:aa:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:54:00 2026 by rpki-client