
$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa
File: 3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa (raw, json)
Hash identifier: PnXpoQlILp8ZlGXHCrTJh5VRZ4dRdsX3+HByUad9ME8=
Subject key identifier: BE:18:AF:27:C0:89:66:5E:CA:6A:05:A2:72:F8:69:E3:97:04:7F:AF
Certificate issuer: /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Certificate serial: 398745C35E7D35FB4EB5475A578086718E65D733
Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa
Signing time: Mon 02 Mar 2026 22:55:41 +0000
ROA not before: Mon 02 Mar 2026 22:50:41 +0000
ROA not after: Mon 01 Mar 2027 22:55:41 +0000
asID: 265173
IP address blocks: 167.249.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 21:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:87:45:c3:5e:7d:35:fb:4e:b5:47:5a:57:80:86:71:8e:65:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Validity
Not Before: Mar 2 22:50:41 2026 GMT
Not After : Mar 1 22:55:41 2027 GMT
Subject: CN=BE18AF27C089665ECA6A05A272F869E397047FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:66:5e:e4:46:33:31:c2:cc:f6:ba:30:fd:
45:ad:91:9a:3c:0a:58:09:a2:21:70:17:45:91:10:
23:d5:70:52:a0:be:5a:b3:07:6a:91:d5:c9:c7:dc:
a4:7c:d4:b7:6e:6e:8d:c4:57:fe:57:92:09:f2:57:
82:fb:38:94:3c:5d:eb:b1:f4:3c:31:a6:9b:44:5e:
10:05:a5:cf:53:c1:e2:59:bf:29:60:6e:3d:fb:e3:
02:e5:88:0c:e8:ae:0c:1f:0a:c3:47:80:5a:b1:e5:
54:6e:6b:22:82:49:16:f7:ed:0e:61:17:24:ad:42:
d3:44:e9:0f:ce:3e:68:5a:14:b5:c8:0f:4c:6b:65:
8f:2f:23:b2:a4:87:b8:71:ac:30:6b:a5:03:67:5a:
fe:f8:a4:bc:82:c5:f1:f4:d1:01:b6:0d:9d:ed:ef:
85:ae:99:02:92:86:d5:14:3e:ad:70:f3:70:c8:b0:
0f:a0:4f:5d:ea:27:52:e9:c7:a0:5c:86:6f:5c:48:
24:d9:61:c6:5f:21:76:32:d4:e6:4c:97:35:dd:21:
64:4e:24:6c:25:e8:15:2c:f1:aa:00:e6:fd:49:a0:
b6:62:1d:2e:b9:73:08:fd:51:bf:e2:38:e7:e0:68:
74:07:b0:64:98:8e:8b:bf:83:47:c6:d7:4e:49:5c:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:AF:27:C0:89:66:5E:CA:6A:05:A2:72:F8:69:E3:97:04:7F:AF
X509v3 Authority Key Identifier:
keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:68:67:1e:47:9a:b3:f2:bf:5b:43:b1:cd:b3:b0:25:44:6c:
8f:c7:5b:db:06:05:84:9f:67:dd:8d:76:3b:f3:b6:53:5e:c8:
d3:66:bb:eb:7d:d4:a2:ff:d9:ad:9c:1a:d5:55:fe:38:b0:35:
69:8a:d7:f4:42:10:25:a3:2a:80:f7:42:74:fc:e2:24:e0:1f:
57:0d:d5:23:72:69:cd:ea:01:2c:bd:e3:f4:52:3c:dc:69:5a:
b2:8f:e1:42:75:34:05:ab:55:62:87:2b:91:fe:3c:aa:0a:dc:
34:98:4b:1c:65:38:36:17:dd:32:6b:17:4c:15:46:5f:5d:9e:
fc:b3:ac:b6:90:ce:2c:23:56:73:3b:bd:28:e1:d9:80:fe:8d:
a5:49:fe:1a:af:6c:77:61:be:43:bb:da:96:a6:bb:50:2f:e6:
48:ef:9b:e4:b3:03:4e:e4:10:59:08:c5:f4:86:59:d1:55:a1:
fd:df:61:69:e1:9a:92:5f:a9:e6:bd:a7:e6:ce:30:46:dc:5e:
7c:19:a7:e3:d0:67:a3:53:16:86:61:bd:83:7f:21:5f:51:4e:
a7:6c:65:74:95:2f:2c:4c:e5:25:76:33:e0:2a:d5:3b:ac:a5:
63:0c:d9:87:e8:b3:69:da:db:4f:5e:50:4c:e9:75:1c:9b:e1:
1a:06:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:54:08 2026 by rpki-client