
$ rpki-client -vvvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa
File: 3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa (raw, json)
Hash identifier: jVp1BZNjXfdjpP+W8LMuDkvSng0SsTluGZFTysak+cA=
Subject key identifier: 96:43:DD:EA:3B:10:36:B7:FD:37:75:3B:07:D4:69:5A:5A:05:5F:68
Certificate issuer: /CN=AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97
Certificate serial: 79B648AAAAD5750009D68F299F558AAF403D1705
Authority key identifier: AF:C9:C4:F9:A8:69:7F:12:08:AC:7B:C2:BE:DC:12:1D:57:DC:FA:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa
Signing time: Thu 29 Oct 2026 17:44:26 +0000
ROA not before: Thu 29 Oct 2026 17:39:26 +0000
ROA not after: Thu 28 Oct 2027 17:44:26 +0000
asID: 262841
IP address blocks: 168.228.76.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.crl
rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 03:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b6:48:aa:aa:d5:75:00:09:d6:8f:29:9f:55:8a:af:40:3d:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97
Validity
Not Before: Oct 29 17:39:26 2026 GMT
Not After : Oct 28 17:44:26 2027 GMT
Subject: CN=9643DDEA3B1036B7FD37753B07D4695A5A055F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:74:d5:79:7c:61:48:7b:c7:b4:41:7e:da:
09:ad:b3:9e:7b:bc:76:50:41:e9:08:7f:8f:71:c2:
cd:f5:e4:0d:81:9a:28:6a:99:be:d3:c8:c7:76:a6:
07:9d:31:73:6f:f9:5f:33:86:63:0c:9a:e4:f4:99:
ac:68:af:13:da:94:12:2f:aa:08:68:f1:f9:7d:62:
22:51:a8:15:87:a7:4b:19:ec:8e:64:0b:7d:42:7a:
e0:34:a9:cb:fc:00:5f:15:88:64:9c:68:19:1e:3d:
85:cb:c5:5e:5b:08:89:46:15:5e:30:4c:51:3e:db:
e8:39:8e:10:40:3b:1a:2b:bf:57:3d:d3:1b:22:a0:
2a:57:98:c7:33:ff:fc:0d:1d:b7:81:b8:5a:44:71:
a2:19:8c:c4:9c:19:fb:f5:cb:33:f0:4c:59:1f:ae:
6e:84:ce:f0:ec:5d:0a:a8:14:5e:1e:e4:23:04:1c:
19:31:2a:56:54:a1:75:19:6f:cc:b6:ed:f0:9a:2f:
9c:d7:71:50:02:59:6c:14:80:24:06:e0:26:25:83:
27:78:17:64:f0:9f:c4:62:0a:e7:a8:f8:2c:36:b1:
9b:ba:58:74:09:12:39:6e:18:3b:c7:d4:01:f1:e3:
4a:77:36:7e:da:81:98:2c:8b:69:61:b5:28:55:8a:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:DD:EA:3B:10:36:B7:FD:37:75:3B:07:D4:69:5A:5A:05:5F:68
X509v3 Authority Key Identifier:
keyid:AF:C9:C4:F9:A8:69:7F:12:08:AC:7B:C2:BE:DC:12:1D:57:DC:FA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
84:b9:6a:43:b5:87:92:f2:d3:37:e1:92:9c:1c:7f:55:52:26:
48:8f:21:5b:29:14:5d:e1:3a:50:6a:a7:6a:95:14:4b:f0:fd:
d6:9b:7c:1a:08:aa:1c:65:cc:ac:5d:7b:1d:6b:66:1f:d7:23:
af:2b:16:c7:74:75:c0:0a:e8:3b:4d:7c:b6:d8:f5:22:80:7c:
92:bb:4d:b2:0a:9e:52:74:14:dc:de:fc:04:cc:58:4e:92:9d:
44:49:ca:9d:f7:56:c6:25:23:3b:7b:b5:75:b0:71:36:e2:20:
87:e8:d9:5b:17:32:c1:fc:82:c9:3e:96:ac:cd:2f:09:b9:44:
39:87:c9:6d:22:42:06:2c:88:40:b4:46:dd:86:92:bb:01:f2:
9d:a8:55:05:3a:2f:1a:e2:ff:5a:48:91:b3:6b:7b:18:b8:fc:
18:19:ee:bb:54:c5:c5:ba:14:1d:73:7a:32:57:16:51:8b:1b:
25:88:31:7a:26:fc:29:9d:0f:7e:50:bd:f4:95:69:68:74:bd:
e2:de:75:31:43:cc:33:55:18:6a:9a:cf:27:2a:92:39:c0:3e:
05:39:21:e5:c6:de:06:64:f5:3c:20:af:c1:5e:0e:16:7f:a7:
e1:6a:ad:6d:1c:67:ea:20:fb:ba:98:ea:26:2f:74:03:de:a7:
5a:4e:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:44 2026 by rpki-client