
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
File: 3136382e3232382e33362e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier: BMAg3ibIVRYLCoqExOWsLZtAF5dysyAFetZC85c5ZKw=
Subject key identifier: 68:63:0A:8B:0E:44:13:42:27:AB:AE:22:B7:3F:BF:B1:41:E8:4B:D7
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 044F7C066F1A617B860D5B0F85AD377C91032D2E
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
Signing time: Wed 01 Apr 2026 19:08:41 +0000
ROA not before: Wed 01 Apr 2026 19:03:41 +0000
ROA not after: Wed 31 Mar 2027 19:08:41 +0000
asID: 61794
IP address blocks: 168.228.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 15:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4f:7c:06:6f:1a:61:7b:86:0d:5b:0f:85:ad:37:7c:91:03:2d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Apr 1 19:03:41 2026 GMT
Not After : Mar 31 19:08:41 2027 GMT
Subject: CN=68630A8B0E44134227ABAE22B73FBFB141E84BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:32:cc:a7:ac:ec:c7:01:5b:29:a4:ed:5b:
e0:b0:86:35:8b:f1:5b:f7:d6:12:1e:22:eb:42:c3:
3b:19:05:ed:cc:e3:54:73:fe:39:a9:cd:1c:23:62:
2a:4b:d5:ce:e0:ff:d5:33:04:7d:a0:07:d6:91:01:
d8:5f:68:1e:72:a5:91:aa:4f:84:f8:6b:de:b2:9d:
f8:61:e4:94:e1:cd:67:d2:bf:cf:a5:ae:18:79:86:
89:70:1c:2c:9e:ce:26:be:6c:cb:c0:c5:83:44:0e:
38:fe:4f:b1:58:27:1d:66:b4:06:ba:64:21:b2:6d:
32:ba:76:2b:c9:fc:de:f7:76:d1:21:3a:c1:18:5a:
53:3f:af:89:c6:a5:f4:e4:43:9a:f6:5a:81:a1:36:
65:25:45:c1:67:ed:aa:be:f9:f3:53:fe:23:18:c1:
db:5c:b8:84:f3:00:55:4f:24:3c:2d:05:f5:3d:85:
6b:ba:d5:01:cf:54:48:1e:57:7d:e3:e7:21:2a:cd:
73:f6:bb:20:bc:26:e4:eb:3f:59:48:de:fb:7d:ca:
e1:4b:d2:14:c9:84:97:93:ec:06:a1:3d:39:f0:17:
4e:8d:07:d1:f3:a7:e4:27:f1:98:38:29:6a:b5:51:
86:2e:e1:84:f4:1a:b4:7a:cb:e3:34:fa:c5:ea:be:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:0A:8B:0E:44:13:42:27:AB:AE:22:B7:3F:BF:B1:41:E8:4B:D7
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:51:a5:9f:49:67:9f:01:8d:a2:b6:78:83:43:bc:b4:74:e6:
8a:df:9d:d7:f4:a9:dd:1f:38:66:57:36:f3:aa:1b:a6:ca:ea:
e8:82:35:3d:0b:0e:5c:d9:73:56:cf:e9:c7:77:8b:a4:79:10:
24:c6:0f:1f:eb:c5:19:65:32:f6:65:d8:fe:36:6c:6c:da:ec:
27:3a:0d:6b:7c:5e:b3:76:41:1c:4e:0e:cc:70:44:ed:f9:73:
39:1f:6c:00:70:73:2f:90:90:46:20:91:49:ae:3d:4a:9b:33:
07:fd:57:1f:51:90:bd:a6:f2:19:6d:19:ba:a9:d7:82:bf:c8:
2e:df:c4:76:db:9a:e5:02:ce:91:b6:bf:15:bd:f8:f2:33:9b:
93:ce:5c:3f:8c:bd:5b:1a:b2:ed:36:64:65:ec:14:e3:be:4f:
d0:69:00:a9:29:31:7f:6c:7f:35:62:6d:42:ee:a5:8c:6c:52:
53:dc:3f:13:2d:13:0a:40:d4:5b:fe:64:81:64:79:e1:b7:bf:
97:3b:66:91:74:b3:7c:bc:4c:3c:2f:ef:21:29:b5:55:2f:59:
dc:7e:1d:1f:76:6d:98:4a:a0:77:ba:4d:77:72:70:97:6e:c6:
dc:dd:a8:22:a8:c6:b7:62:44:da:28:62:95:d5:5f:05:c4:d3:
98:3c:d7:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBE98Bm8aYXuGDVsPha03fJEDLS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNjA0MDExOTAzNDFaFw0yNzAzMzExOTA4NDFaMDMxMTAvBgNV
BAMTKDY4NjMwQThCMEU0NDEzNDIyN0FCQUUyMkI3M0ZCRkIxNDFFODRCRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvTLMp6zsxwFbKaTtW+CwhjWL
8Vv31hIeIutCwzsZBe3M41Rz/jmpzRwjYipL1c7g/9UzBH2gB9aRAdhfaB5ypZGq
T4T4a96ynfhh5JThzWfSv8+lrhh5holwHCyezia+bMvAxYNEDjj+T7FYJx1mtAa6
ZCGybTK6divJ/N73dtEhOsEYWlM/r4nGpfTkQ5r2WoGhNmUlRcFn7aq++fNT/iMY
wdtcuITzAFVPJDwtBfU9hWu61QHPVEgeV33j5yEqzXP2uyC8JuTrP1lI3vt9yuFL
0hTJhJeT7AahPTnwF06NB9Hzp+Qn8Zg4KWq1UYYu4YT0GrR6y+M0+sXqvq9pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaGMKiw5EE0Inq64itz+/sUHoS9cwHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzEzNjM4MmUzMjMyMzgyZTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzczOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqOQkMA0GCSqGSIb3DQEBCwUAA4IBAQBtUaWfSWef
AY2itniDQ7y0dOaK353X9KndHzhmVzbzqhumyurogjU9Cw5c2XNWz+nHd4ukeRAk
xg8f68UZZTL2Zdj+Nmxs2uwnOg1rfF6zdkEcTg7McETt+XM5H2wAcHMvkJBGIJFJ
rj1KmzMH/VcfUZC9pvIZbRm6qdeCv8gu38R225rlAs6Rtr8VvfjyM5uTzlw/jL1b
GrLtNmRl7BTjvk/QaQCpKTF/bH81Ym1C7qWMbFJT3D8TLRMKQNRb/mSBZHnht7+X
O2aRdLN8vEw8L+8hKbVVL1ncfh0fdm2YSqB3uk13cnCXbsbc3agiqMa3YkTaKGKV
1V8FxNOYPNcR
-----END CERTIFICATE-----
Generated at Wed Apr 8 18:19:21 2026 by rpki-client