
$ rpki-client -vvf rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/3137392e3138392e37322e302f32312d3234203d3e203532363130.roa
File: 3137392e3138392e37322e302f32312d3234203d3e203532363130.roa (raw, json)
Hash identifier: KRmIU8C1v1YEBWFZs2m02yhlB0LxeSQAq+BZaAkrgP8=
Subject key identifier: 74:BA:6F:8C:98:FF:05:B8:1A:4C:EA:E3:76:2A:B1:1F:A4:D4:3A:90
Certificate issuer: /CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551
Certificate serial: 6B53FAFE912CA8C2FDEB636FD55D63B5C4AFF8E6
Authority key identifier: 5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
Subject info access: rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/3137392e3138392e37322e302f32312d3234203d3e203532363130.roa
Signing time: Mon 30 Mar 2026 17:11:45 +0000
ROA not before: Mon 30 Mar 2026 17:06:45 +0000
ROA not after: Mon 29 Mar 2027 17:11:45 +0000
asID: 52610
IP address blocks: 179.189.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl
rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:53:fa:fe:91:2c:a8:c2:fd:eb:63:6f:d5:5d:63:b5:c4:af:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551
Validity
Not Before: Mar 30 17:06:45 2026 GMT
Not After : Mar 29 17:11:45 2027 GMT
Subject: CN=74BA6F8C98FF05B81A4CEAE3762AB11FA4D43A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:f4:11:fa:23:08:ca:df:c1:aa:bf:9e:ee:
55:ad:31:40:78:67:4f:c1:d8:33:18:52:42:61:93:
40:3b:c8:40:8e:11:d7:1d:b3:66:08:e4:a5:72:b0:
0b:86:e9:e1:49:b7:db:d7:ac:88:16:86:dc:e0:60:
79:79:48:db:92:87:2f:cf:d5:49:74:02:6b:a4:11:
ad:58:5e:1b:ca:77:a2:0f:96:b1:a4:19:9f:66:1c:
12:96:0c:8a:c6:d9:e8:78:15:6e:9d:1b:18:05:d6:
b3:97:8a:93:23:bd:ba:1f:20:a1:ca:f9:a8:98:e7:
87:fa:0a:a8:36:6a:1f:5b:b4:94:56:b9:e3:7b:d6:
25:ae:85:b6:b1:ba:b6:43:f3:b8:0b:ae:ce:92:9e:
52:68:11:a7:9a:26:df:9b:26:3b:4b:3b:24:a2:b1:
cb:e9:78:78:e4:c5:d0:da:46:60:49:c1:41:1b:74:
4a:8f:de:2b:f4:fc:be:3e:00:31:7d:08:81:68:b4:
6d:f7:ef:92:ef:3a:ec:3e:69:89:c3:89:a2:ad:88:
a8:1c:e4:5f:c5:d2:6a:e3:0e:06:e1:82:97:39:9b:
4c:8a:53:ae:f3:57:8b:b7:43:7a:d6:e6:ed:41:0a:
4b:e8:05:d9:f0:d5:d6:2b:7d:4d:df:b9:4d:f6:23:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:6F:8C:98:FF:05:B8:1A:4C:EA:E3:76:2A:B1:1F:A4:D4:3A:90
X509v3 Authority Key Identifier:
keyid:5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/3137392e3138392e37322e302f32312d3234203d3e203532363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.189.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:ff:75:8a:db:57:63:c3:3f:cf:2b:6d:ee:99:7c:04:11:4e:
93:04:dc:cd:98:0f:11:e4:25:84:4b:79:0f:e9:3e:77:17:2b:
9e:08:2a:1d:5e:bd:cf:d3:f6:69:80:1e:48:aa:42:70:fd:ca:
e0:74:b5:c1:8e:1b:e7:39:a6:ef:cd:6b:40:1b:4b:0e:cd:40:
9a:ba:a7:13:5d:47:31:f6:66:af:11:ae:20:ea:91:63:69:42:
44:21:0f:87:01:0a:2e:49:7c:03:ce:8a:ab:c3:f3:7c:5c:43:
43:6c:07:0d:08:24:fb:16:a6:36:dd:1c:70:25:07:97:dc:d8:
cc:7f:39:fe:a4:5a:7f:0c:59:6e:6d:9b:8d:59:21:b9:40:40:
28:f8:33:8b:cf:4e:f9:1e:79:3f:72:58:81:ea:c1:83:e0:67:
54:23:b1:6e:9d:c9:56:6f:0c:a7:53:e0:34:7c:99:2a:6c:87:
69:16:f5:d5:36:bf:f4:7e:3e:3b:68:6d:99:ff:46:e3:c8:e6:
f9:59:67:7e:51:00:15:9a:c6:0c:f0:cc:f7:b6:09:8d:4a:1e:
f4:b4:e7:13:7d:51:73:b4:5d:df:74:96:2d:ff:e9:6a:3a:20:
8c:0f:ce:6e:b8:4d:1c:26:8d:cc:2c:cd:3b:cc:16:50:1e:76:
f7:b8:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:39:36 2026 by rpki-client