
$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
File: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (raw, json)
Hash identifier: 6J/Woy2uRK1B2dNQ2tt84/6O9ugNLPe6HwJN4LKAnpQ=
Subject key identifier: 32:D6:55:7C:B9:06:41:68:D2:B4:73:71:6F:0C:86:18:33:E4:13:0D
Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial: 3D788818678AC0594B012D6459E12A40CC8145F3
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
Signing time: Fri 27 Mar 2026 07:37:24 +0000
ROA not before: Fri 27 Mar 2026 07:32:24 +0000
ROA not after: Fri 26 Mar 2027 07:37:24 +0000
asID: 263395
IP address blocks: 168.194.136.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 05:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:78:88:18:67:8a:c0:59:4b:01:2d:64:59:e1:2a:40:cc:81:45:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
Validity
Not Before: Mar 27 07:32:24 2026 GMT
Not After : Mar 26 07:37:24 2027 GMT
Subject: CN=32D6557CB9064168D2B473716F0C861833E4130D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:b9:65:b1:0b:e2:93:5b:4d:df:db:49:92:
62:71:5e:3d:ce:75:4f:c9:74:cc:0c:6c:70:c4:c1:
53:e0:12:bc:f3:42:dd:ba:d6:58:02:5f:43:ac:09:
1e:ae:26:b3:cd:6f:3f:a3:47:a2:46:ff:4f:25:ac:
30:f6:87:ec:d6:90:9e:8f:6f:a9:b7:fd:08:7f:cd:
bd:15:43:d5:c1:91:a0:bf:f4:cb:af:00:ed:b8:e3:
55:db:ad:25:9e:43:97:66:fa:a1:b4:21:c7:fe:d0:
3e:fd:90:f5:a9:7d:0b:57:ce:65:51:3a:a5:13:d1:
89:92:08:50:7c:80:97:1f:38:e4:17:1f:42:e7:19:
a4:30:d4:52:9e:e6:14:94:9e:0c:b9:92:fc:f3:c2:
3a:8c:2e:9d:ef:d3:e5:3e:2a:5c:cf:1b:02:30:6b:
9d:a4:4e:ab:ac:85:5b:8d:e9:8b:67:c3:f2:86:37:
f7:5a:33:0f:08:a3:0e:64:83:99:e3:db:b8:25:01:
b6:a7:da:74:24:26:ee:e2:c7:15:db:e3:a5:9e:2a:
83:27:ce:6d:8e:98:e6:d2:6f:8d:84:0c:f6:bb:69:
9e:97:c7:0c:e3:34:a1:63:63:df:ae:a0:0e:33:0e:
e6:f3:a2:3a:12:03:31:0e:2d:9f:ff:a8:5d:9d:53:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:55:7C:B9:06:41:68:D2:B4:73:71:6F:0C:86:18:33:E4:13:0D
X509v3 Authority Key Identifier:
keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:75:f1:2d:57:1b:02:e6:0d:06:7a:4d:3f:03:ab:f9:52:5e:
df:5c:c8:34:06:b8:2b:0a:0a:10:b7:c8:f7:46:88:d6:b9:33:
f9:f5:93:28:a5:dc:a8:52:d0:da:2f:74:2b:22:6e:de:13:c6:
2c:5a:01:1b:d0:7b:08:65:f2:bd:0e:db:07:91:e0:7c:89:18:
6e:8e:37:8a:63:33:12:3c:e1:4a:5f:1d:06:cd:e5:71:83:f9:
15:67:8a:30:a4:15:b2:fd:c0:31:d0:f3:9a:d0:8a:7a:43:22:
bc:e8:ac:95:a9:0b:cf:b6:76:71:ff:bf:1a:91:d6:38:76:4a:
31:fd:7f:9b:6c:8d:d4:18:17:f5:8e:9a:6a:32:56:fc:b6:fc:
bf:92:0d:72:37:c4:e3:9f:fe:10:bc:77:2a:be:11:1e:d8:d5:
09:30:4e:57:23:de:78:b9:05:38:71:20:8a:1b:de:43:c5:60:
fb:bd:5c:8b:3e:ae:47:ad:22:c8:2f:1a:f3:a9:36:d1:73:a6:
b5:01:a7:48:bd:fa:4e:4b:5d:94:9e:5a:17:ce:d3:99:6a:c0:
ff:fd:2a:d9:bf:f8:9d:7b:fd:93:58:05:7b:63:f0:f1:5c:b4:
4f:6e:b2:b7:9b:72:55:3f:da:c7:ca:8b:d9:03:40:40:c7:cd:
bf:e5:b4:c3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPXiIGGeKwFlLAS1kWeEqQMyBRfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4
QTExMjQzMTAeFw0yNjAzMjcwNzMyMjRaFw0yNzAzMjYwNzM3MjRaMDMxMTAvBgNV
BAMTKDMyRDY1NTdDQjkwNjQxNjhEMkI0NzM3MTZGMEM4NjE4MzNFNDEzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cbllsQvik1tN39tJkmJxXj3O
dU/JdMwMbHDEwVPgErzzQt261lgCX0OsCR6uJrPNbz+jR6JG/08lrDD2h+zWkJ6P
b6m3/Qh/zb0VQ9XBkaC/9MuvAO2441XbrSWeQ5dm+qG0Icf+0D79kPWpfQtXzmVR
OqUT0YmSCFB8gJcfOOQXH0LnGaQw1FKe5hSUngy5kvzzwjqMLp3v0+U+KlzPGwIw
a52kTqushVuN6Ytnw/KGN/daMw8Iow5kg5nj27glAban2nQkJu7ixxXb46WeKoMn
zm2OmObSb42EDPa7aZ6XxwzjNKFjY9+uoA4zDubzojoSAzEOLZ//qF2dUwQFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMtZVfLkGQWjStHNxbwyGGDPkEw0wHwYDVR0j
BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT
bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3
MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGb0ZxQng3eFN2U3JqMzJaRjJ6SnRCcUNMaXRFRUdEMng0OVZxZFE1U240LzEv
MzEzNjM4MmUzMTM5MzQyZTMxMzMzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMzMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCiDANBgkqhkiG9w0BAQsFAAOCAQEALnXx
LVcbAuYNBnpNPwOr+VJe31zINAa4KwoKELfI90aI1rkz+fWTKKXcqFLQ2i90KyJu
3hPGLFoBG9B7CGXyvQ7bB5HgfIkYbo43imMzEjzhSl8dBs3lcYP5FWeKMKQVsv3A
MdDzmtCKekMivOislakLz7Z2cf+/GpHWOHZKMf1/m2yN1BgX9Y6aajJW/Lb8v5IN
cjfE45/+ELx3Kr4RHtjVCTBOVyPeeLkFOHEgihveQ8Vg+71ciz6uR60iyC8a86k2
0XOmtQGnSL36TktdlJ5aF87TmWrA//0q2b/4nXv9k1gFe2Pw8Vy0T26yt5tyVT/a
x8qL2QNAQMfNv+W0ww==
-----END CERTIFICATE-----
Generated at Wed Apr 8 19:28:16 2026 by rpki-client