
$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
File: 3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (raw, json)
Hash identifier: gpxq9dPp07FkIxkAcw4L9W1dG+CpDQzjaatp2V8fFVw=
Subject key identifier: CA:7D:B9:FE:73:F9:7F:83:35:35:0A:0E:F9:2B:C5:47:BF:09:DA:8E
Certificate issuer: /CN=DB055820B43AFF7A7173228557B8758637A96D68
Certificate serial: 66E3282CAA3A7B562822885B61D20A4C32218798
Authority key identifier: DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
Signing time: Fri 03 Apr 2026 18:16:33 +0000
ROA not before: Fri 03 Apr 2026 18:11:33 +0000
ROA not after: Fri 02 Apr 2027 18:16:33 +0000
asID: 265487
IP address blocks: 168.197.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.crl
rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 04:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:28:2c:aa:3a:7b:56:28:22:88:5b:61:d2:0a:4c:32:21:87:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB055820B43AFF7A7173228557B8758637A96D68
Validity
Not Before: Apr 3 18:11:33 2026 GMT
Not After : Apr 2 18:16:33 2027 GMT
Subject: CN=CA7DB9FE73F97F8335350A0EF92BC547BF09DA8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:68:ad:22:3f:a8:02:16:39:a6:be:56:ee:
d4:28:3c:1e:56:24:e9:fd:81:3a:ed:62:a3:96:cb:
28:69:ba:ab:12:25:3a:76:a7:40:5f:5e:d5:aa:55:
c0:db:1a:6d:7f:a0:9e:eb:78:5e:f1:99:48:42:4f:
90:31:cb:a0:1d:23:a1:d2:0b:67:09:02:cd:e1:3e:
ff:79:3a:52:6d:77:1a:f3:9f:d1:93:9d:33:65:9b:
81:c2:57:04:0b:83:4c:7c:a4:d1:26:c5:59:ea:c5:
08:49:dd:10:47:f8:b5:f2:b0:31:85:d2:04:f9:2a:
aa:ca:17:f9:b7:36:8e:cb:61:b7:db:d7:ea:b0:4d:
74:d9:8f:ab:f8:00:90:61:e6:95:b8:be:55:a1:9c:
bf:2f:7c:77:f9:21:16:2d:eb:66:cf:6a:2e:1c:83:
2b:91:47:b3:c2:22:49:20:ff:25:87:6b:b9:f2:83:
ab:77:cc:41:2c:9c:58:ae:4d:60:31:35:78:67:63:
58:c1:7d:1d:cf:3f:24:a9:b6:8c:20:b5:e1:3d:01:
24:dc:62:65:87:72:7c:11:76:22:68:7c:b2:85:50:
1e:11:70:73:a1:05:5b:3a:45:98:5c:4f:88:d3:85:
50:37:5e:2d:8b:19:f5:cf:0f:6f:9f:02:90:55:df:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7D:B9:FE:73:F9:7F:83:35:35:0A:0E:F9:2B:C5:47:BF:09:DA:8E
X509v3 Authority Key Identifier:
keyid:DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:44:2b:22:18:a8:9e:78:91:41:96:e0:db:6c:99:d9:51:4b:
60:23:e5:84:a1:f7:42:52:29:7a:00:8b:68:3f:e8:88:c6:9f:
9d:13:84:8b:3d:07:a3:a5:7b:5c:09:17:b8:46:81:39:bd:42:
39:3d:70:91:57:e2:23:bf:d7:35:1f:4b:ad:9f:ff:09:d7:b1:
bd:69:cc:70:5d:68:d2:97:12:5e:68:ea:21:5a:28:f4:48:c8:
f2:59:69:91:ac:df:b4:7f:e4:29:a5:2b:79:74:eb:56:82:14:
86:23:e2:9b:e1:e6:19:f3:51:6b:c1:1d:b8:d6:49:a8:05:76:
fd:7f:ca:ed:f0:79:f9:e0:e4:71:10:3c:61:1e:4f:b6:eb:5f:
b3:74:40:fd:c2:9a:33:a3:03:47:94:7f:ae:2e:9a:ff:85:3a:
87:fc:c5:a3:df:1d:3e:6e:25:67:c7:2a:97:35:76:e4:8f:26:
32:4a:2e:ed:68:62:3d:41:a3:b4:52:3d:b9:94:1f:cc:76:dc:
2c:19:01:10:0a:ec:f8:1e:f1:07:6b:42:1e:9f:16:ed:3c:47:
7c:6a:e6:96:ce:d4:00:79:4e:d8:8d:53:f6:0e:58:a3:d5:9e:
ee:65:33:3c:e2:da:8e:42:63:57:a9:5a:3a:13:39:e0:7a:7d:
72:0a:09:40
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZuMoLKo6e1YoIohbYdIKTDIhh5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwNTU4MjBCNDNBRkY3QTcxNzMyMjg1NTdCODc1ODYz
N0E5NkQ2ODAeFw0yNjA0MDMxODExMzNaFw0yNzA0MDIxODE2MzNaMDMxMTAvBgNV
BAMTKENBN0RCOUZFNzNGOTdGODMzNTM1MEEwRUY5MkJDNTQ3QkYwOURBOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRWitIj+oAhY5pr5W7tQoPB5W
JOn9gTrtYqOWyyhpuqsSJTp2p0BfXtWqVcDbGm1/oJ7reF7xmUhCT5Axy6AdI6HS
C2cJAs3hPv95OlJtdxrzn9GTnTNlm4HCVwQLg0x8pNEmxVnqxQhJ3RBH+LXysDGF
0gT5KqrKF/m3No7LYbfb1+qwTXTZj6v4AJBh5pW4vlWhnL8vfHf5IRYt62bPai4c
gyuRR7PCIkkg/yWHa7nyg6t3zEEsnFiuTWAxNXhnY1jBfR3PPySptowgteE9ASTc
YmWHcnwRdiJofLKFUB4RcHOhBVs6RZhcT4jThVA3Xi2LGfXPD2+fApBV36y/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyn25/nP5f4M1NQoO+SvFR78J2o4wHwYDVR0j
BBgwFoAU2wVYILQ6/3pxcyKFV7h1hjepbWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEgxNzhDSjVWd2I2RFNxbXpnU0Z6aDcxNVQxczdlb0NVQk5Od0JLVEda
VWMvMC9EQjA1NTgyMEI0M0FGRjdBNzE3MzIyODU1N0I4NzU4NjM3QTk2RDY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCMDU1ODIwQjQzQUZGN0E3
MTczMjI4NTU3Qjg3NTg2MzdBOTZENjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhIMTc4Q0o1VndiNkRTcW16Z1NGemg3MTVUMXM3ZW9DVUJOTndCS1RHWlVjLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjFkDANBgkqhkiG9w0BAQsFAAOCAQEAakQr
IhionniRQZbg22yZ2VFLYCPlhKH3QlIpegCLaD/oiMafnROEiz0Ho6V7XAkXuEaB
Ob1COT1wkVfiI7/XNR9LrZ//CdexvWnMcF1o0pcSXmjqIVoo9EjI8llpkazftH/k
KaUreXTrVoIUhiPim+HmGfNRa8EduNZJqAV2/X/K7fB5+eDkcRA8YR5Ptutfs3RA
/cKaM6MDR5R/ri6a/4U6h/zFo98dPm4lZ8cqlzV25I8mMkou7WhiPUGjtFI9uZQf
zHbcLBkBEArs+B7xB2tCHp8W7TxHfGrmls7UAHlO2I1T9g5Yo9We7mUzPOLajkJj
V6laOhM54Hp9cgoJQA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 17:07:56 2026 by rpki-client