
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
File: 3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa (raw, json)
Hash identifier: 2VuK46iw1ehIan4E8MnSlBaremuJkCzXFvgcxanIJ5M=
Subject key identifier: 42:67:6B:62:EA:74:3E:CF:A0:82:03:75:A4:F9:AC:BB:16:A8:0F:12
Certificate issuer: /CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Certificate serial: 2A81C555B4691D5F4753BD6014682F961B68830A
Authority key identifier: 97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
Signing time: Mon 30 Mar 2026 16:00:43 +0000
ROA not before: Mon 30 Mar 2026 15:55:43 +0000
ROA not after: Mon 29 Mar 2027 16:00:43 +0000
asID: 264915
IP address blocks: 168.228.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 05:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:81:c5:55:b4:69:1d:5f:47:53:bd:60:14:68:2f:96:1b:68:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Validity
Not Before: Mar 30 15:55:43 2026 GMT
Not After : Mar 29 16:00:43 2027 GMT
Subject: CN=42676B62EA743ECFA0820375A4F9ACBB16A80F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:1e:7e:56:d3:20:34:05:37:f0:bd:7c:48:
02:6f:6d:49:d4:23:a6:6c:1b:af:bd:c4:fb:68:10:
89:f7:23:a1:c6:fc:d6:94:ea:3d:fd:33:73:51:a6:
33:76:4a:4f:47:55:c7:c2:ce:be:0d:4d:4a:eb:a1:
98:fe:0a:11:fb:68:8a:62:51:ee:97:ce:64:33:53:
56:70:f9:02:a9:af:43:29:38:db:28:d7:de:2a:a5:
0a:cb:b4:c1:57:0f:57:c5:17:a5:3d:e9:64:95:97:
e2:ae:e9:ac:59:c9:af:13:db:7c:67:4e:5d:66:41:
88:e4:54:c6:d6:b3:e5:cc:32:12:dc:2a:83:38:1c:
d5:41:bd:ff:fd:76:04:f8:11:bd:ed:41:67:8b:ca:
4e:1e:df:f2:d4:48:a7:dd:90:00:ed:2f:b0:a9:1e:
f7:aa:86:6b:49:ff:7a:cb:c1:2f:9c:3e:8f:1d:1d:
50:79:8e:34:cf:8a:25:f6:1e:b2:19:2a:8e:e5:93:
5b:5e:9b:1c:09:f6:ee:5c:3d:07:24:e2:fc:2b:23:
b8:9f:f2:34:b0:c3:0c:39:65:83:3e:34:1d:52:f7:
7e:45:f0:6c:e7:be:a1:7c:9e:53:69:74:fa:81:a2:
e5:f3:cc:d3:03:7a:2d:1d:fa:60:f2:81:55:72:35:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:67:6B:62:EA:74:3E:CF:A0:82:03:75:A4:F9:AC:BB:16:A8:0F:12
X509v3 Authority Key Identifier:
keyid:97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
39:80:63:03:c3:0e:22:44:c5:2d:99:33:28:5b:35:b0:74:98:
9b:63:35:67:7f:e5:23:73:e2:3c:57:cc:2e:0a:81:66:0c:9f:
7e:78:b3:56:f9:5d:12:8a:e6:ea:ee:91:c7:8d:8a:fc:db:1c:
e2:a9:8e:e7:2b:2f:74:b6:f6:72:7f:39:bb:c2:16:0d:d8:60:
f0:ae:2c:6d:20:8d:16:80:5c:83:5b:3c:d7:e6:ce:24:cb:53:
cb:9b:e7:92:cb:ac:9f:31:c5:4b:ae:48:b2:d1:6b:c9:e0:43:
1f:39:7e:89:f9:3f:73:8c:cb:f7:7e:cb:05:3e:8f:d6:70:27:
76:b6:7c:3a:6c:2b:ee:92:7e:7c:be:c7:ce:fe:a7:3a:20:71:
75:1a:6a:40:a7:5b:73:6a:68:30:da:7e:06:f3:33:6a:b9:9e:
17:3f:b3:2c:77:14:a8:6b:66:26:bf:66:39:4d:36:83:16:02:
3d:25:c8:ef:4d:ed:1c:5f:e7:2a:53:ce:2e:e0:a5:26:0c:e8:
d3:57:25:c8:e6:d8:61:c9:9e:0c:b8:8d:03:af:57:f3:f1:19:
be:cc:24:ea:6c:df:e3:72:41:3a:89:77:ba:51:ae:5a:a2:17:
8e:ac:0e:65:0a:86:86:83:3d:49:f0:3d:46:0a:7c:0c:0f:d8:
c8:a4:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:51 2026 by rpki-client