
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
File: 3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa (raw, json)
Hash identifier: JlfNfU1uq1ueFoC3ChaIz8lRrCduY2cTLr8g6GLU35Y=
Subject key identifier: B8:5C:43:92:9E:85:B0:39:A9:43:F6:D9:23:2D:5F:A9:22:D6:6A:4A
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 25910D6EF08AD08E70204E75331A2165CAE825D6
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
Signing time: Wed 01 Apr 2026 19:08:38 +0000
ROA not before: Wed 01 Apr 2026 19:03:38 +0000
ROA not after: Wed 31 Mar 2027 19:08:38 +0000
asID: 52547
IP address blocks: 177.152.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 21:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:0d:6e:f0:8a:d0:8e:70:20:4e:75:33:1a:21:65:ca:e8:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Apr 1 19:03:38 2026 GMT
Not After : Mar 31 19:08:38 2027 GMT
Subject: CN=B85C43929E85B039A943F6D9232D5FA922D66A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:72:77:d2:4f:45:13:5b:f0:65:10:ed:3d:
e6:7c:14:e6:d9:94:62:c0:ca:9d:9d:51:f2:57:f6:
fc:d7:b3:fb:a3:13:e0:e3:ef:ae:b0:77:c2:fd:d8:
26:f2:4c:ca:00:15:14:b0:98:09:73:bc:8a:da:ea:
86:d7:6c:59:34:fd:8f:12:f4:dd:c4:b6:8b:6f:e8:
31:05:8a:37:41:2f:67:fe:b1:e7:ec:3b:b5:a1:33:
27:db:4d:f8:4d:b7:ff:9e:89:f7:a6:3c:3a:96:61:
bd:7c:b0:88:81:55:b5:d3:df:88:1b:34:2b:31:98:
37:af:78:30:c1:7b:cf:a8:71:f1:24:c5:27:cf:52:
ef:f7:c3:af:b4:92:94:72:11:f1:b8:5c:35:f8:82:
ca:0c:57:e4:c5:2b:29:d8:0c:82:f2:27:17:9b:8b:
79:9b:b9:02:82:b8:a7:e9:1e:8d:72:a9:40:b5:c5:
61:c6:b7:a5:78:4e:b7:03:7d:37:73:9b:93:9e:c6:
bb:58:2c:76:5c:b6:67:67:99:d5:1a:09:9b:3b:92:
96:e6:40:18:5d:79:ae:bf:31:b3:d0:6d:0f:4d:93:
38:87:f8:8d:4a:19:ef:86:65:48:5f:ac:43:f2:ad:
5c:a0:3e:0a:20:98:25:f5:5a:d2:59:1c:e4:92:ce:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:43:92:9E:85:B0:39:A9:43:F6:D9:23:2D:5F:A9:22:D6:6A:4A
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.176.0/21
Signature Algorithm: sha256WithRSAEncryption
56:5c:30:25:08:66:c5:68:2f:31:61:ed:6e:ca:a7:4c:e4:18:
a8:4e:1e:17:0e:a8:08:5d:a2:01:f9:f8:54:be:93:df:ab:6d:
9a:ba:75:a9:ab:77:20:fe:9f:86:d4:ea:74:92:0f:5f:90:9b:
e0:2f:16:d1:f4:21:18:5a:79:43:f1:a9:7d:dc:0f:d4:ba:f1:
44:86:2a:15:10:62:94:1c:01:96:88:a5:83:dd:9b:de:0e:05:
45:d5:05:a8:17:54:ef:75:ab:80:07:49:51:66:7d:bd:c0:81:
d9:03:a5:dc:70:a5:5d:9a:ca:87:3b:de:b6:c9:12:7e:8c:62:
b4:69:7e:2d:df:9c:d4:0e:c8:87:c9:5c:db:9e:db:b0:f0:cd:
0e:bf:5d:4b:c8:f0:96:64:82:05:f2:12:66:94:4e:d2:be:cf:
86:f6:25:e7:55:11:d2:51:6f:65:76:20:7a:d6:ff:84:8b:47:
94:0a:d1:af:a9:ec:79:5e:25:cd:12:36:ed:36:e3:c0:ff:3c:
ac:4c:49:1c:7d:ba:7b:7f:26:b0:e0:60:c1:b6:3d:d6:2e:23:
11:af:1a:6f:95:85:b1:9a:ce:91:6d:9f:04:fc:fd:e0:dc:eb:
81:a8:cf:c8:7e:44:1b:23:19:b1:92:34:49:c9:e3:88:8f:e7:
bc:5c:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:55:40 2026 by rpki-client