
$ rpki-client -vvvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
File: 3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa (raw, json)
Hash identifier: sFjyIpCt16EY6dHBhimCDPLgeL/Ll35IRfB8qbYf+RI=
Subject key identifier: AE:71:EE:69:13:21:AC:6F:EC:3D:8F:85:96:4B:E1:48:36:95:89:DF
Certificate issuer: /CN=5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1
Certificate serial: 79004BCD29FDD75037F9F089FF419C7992215BB8
Authority key identifier: 5A:4F:06:DA:9F:92:E1:BD:C4:10:46:45:7C:D0:BD:36:7F:1F:8A:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
Signing time: Tue 01 Sep 2026 18:35:53 +0000
ROA not before: Tue 01 Sep 2026 18:30:53 +0000
ROA not after: Tue 31 Aug 2027 18:35:53 +0000
asID: 265462
IP address blocks: 168.196.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1.crl
rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 04 Sep 2026 08:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:00:4b:cd:29:fd:d7:50:37:f9:f0:89:ff:41:9c:79:92:21:5b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1
Validity
Not Before: Sep 1 18:30:53 2026 GMT
Not After : Aug 31 18:35:53 2027 GMT
Subject: CN=AE71EE691321AC6FEC3D8F85964BE148369589DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:47:64:41:54:90:3c:d8:ef:e7:e8:36:df:
5b:77:75:c5:e6:56:1c:43:cb:30:5d:de:31:a6:3d:
b8:a4:4b:91:58:94:d8:a8:e8:ce:ae:d8:4b:93:03:
1b:f8:5a:4c:39:e5:cd:60:de:a6:76:a5:0b:74:c3:
6f:29:41:cd:ee:5c:37:2c:9a:29:7e:00:3f:fd:b0:
13:c2:08:26:3d:0c:55:e7:67:47:03:72:44:85:b5:
b4:e9:e4:b8:9d:e3:39:e7:b6:7f:a7:50:84:40:65:
ce:1a:50:66:f4:3c:b8:b2:ac:4d:cb:dc:81:44:1b:
bd:00:13:7a:8f:ba:a2:e3:33:1b:84:e8:53:55:92:
15:91:52:59:42:60:4c:bf:6b:07:32:2b:01:74:24:
cc:d4:58:fc:65:4b:06:cb:b2:64:e6:bf:e5:aa:46:
0b:26:c2:69:d8:1b:20:77:ac:ba:e4:d5:4a:1d:86:
c8:47:a9:20:fb:97:8c:d7:bf:3f:2f:f2:e2:63:92:
72:82:d0:76:1f:99:75:c5:21:80:1a:46:87:31:ab:
34:e7:9e:fd:61:da:e3:99:90:df:3b:d4:2a:6a:b3:
5b:6f:47:35:0a:af:27:b4:cc:01:af:f1:cb:75:92:
8e:a6:d0:c2:8a:3a:67:1f:f4:25:58:8d:cf:2c:e1:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:EE:69:13:21:AC:6F:EC:3D:8F:85:96:4B:E1:48:36:95:89:DF
X509v3 Authority Key Identifier:
keyid:5A:4F:06:DA:9F:92:E1:BD:C4:10:46:45:7C:D0:BD:36:7F:1F:8A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A4F06DA9F92E1BDC41046457CD0BD367F1F8AF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.220.0/22
Signature Algorithm: sha256WithRSAEncryption
72:87:09:2d:21:71:52:b2:96:a5:ff:00:a4:62:1d:cf:16:df:
b8:eb:fe:2a:92:b7:ac:b1:2c:c5:f9:cd:12:3b:1d:cd:77:3f:
c3:5a:f6:06:71:17:b5:dc:fb:4d:e0:d6:bb:d1:8f:b1:9f:95:
43:00:97:7c:a1:76:d7:db:fd:02:2b:32:ad:a8:61:80:9f:ec:
6c:33:d2:a5:b1:b6:93:85:90:bf:42:59:ec:90:f8:a9:67:f8:
83:d0:30:92:db:a3:77:ad:62:43:3c:3d:c0:41:ee:f4:c3:98:
e6:60:8f:58:70:69:7e:09:58:4d:fd:d3:11:88:0d:fc:92:ce:
a2:30:25:5d:3a:3f:c1:02:63:e2:c5:a7:d4:68:c8:ec:5f:ef:
31:ce:a6:86:49:dd:fc:df:96:1e:51:cf:c8:95:73:39:e0:9c:
7f:07:db:03:02:35:db:22:e2:a7:61:c4:aa:a8:3b:93:68:34:
68:17:0e:15:7b:cb:49:b8:03:f4:1d:56:dc:74:2b:48:33:3c:
1d:f5:1a:87:35:30:af:90:45:0b:be:50:5c:18:35:a5:0d:13:
aa:80:19:7f:20:bc:9a:75:48:e6:24:f0:b7:00:66:d8:d0:61:
08:2e:f7:24:fa:80:40:fb:05:a0:c5:bc:53:e7:b1:30:7c:d5:
27:0d:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:45:56 2026 by rpki-client