
$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32342d3234203d3e20323730323835.roa
File: 3230312e37312e31362e302f32342d3234203d3e20323730323835.roa (raw, json)
Hash identifier: J6OuuWpfoeunCGCRveamwBVUiSNVpBTLzlMvRwEjk2c=
Subject key identifier: F1:F3:14:28:9E:10:DC:CE:41:DB:86:23:19:A6:56:5E:6A:CE:17:03
Certificate issuer: /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial: 5EF4120DDEAFB0BD42D713ECE72BF67D8444C58F
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32342d3234203d3e20323730323835.roa
Signing time: Mon 10 Aug 2026 19:08:11 +0000
ROA not before: Mon 10 Aug 2026 19:03:11 +0000
ROA not after: Mon 09 Aug 2027 19:08:11 +0000
asID: 270285
IP address blocks: 201.71.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 11:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f4:12:0d:de:af:b0:bd:42:d7:13:ec:e7:2b:f6:7d:84:44:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Validity
Not Before: Aug 10 19:03:11 2026 GMT
Not After : Aug 9 19:08:11 2027 GMT
Subject: CN=F1F314289E10DCCE41DB862319A6565E6ACE1703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:78:8f:20:58:75:be:f0:bc:2a:03:83:ac:
b7:e3:80:d8:6f:23:9c:f9:8b:4d:e0:a9:37:d3:b7:
59:60:bb:c3:9b:ce:b6:42:f8:1e:f7:70:f2:b2:8c:
b4:e2:8c:3c:bb:ca:5b:4f:9f:47:7b:10:af:1a:a7:
e5:61:20:ce:21:f6:6e:41:84:b1:62:28:c5:8b:13:
d2:3a:77:8d:2c:a7:d7:42:fa:5b:ba:c2:73:a0:e8:
97:d7:07:e0:78:37:0f:15:a2:c8:87:e2:53:5c:2b:
20:93:26:1c:64:01:1c:af:2a:2c:77:50:0d:35:4f:
7d:cb:37:d3:f7:2f:b2:92:3b:41:39:74:8a:b6:da:
41:ff:e0:c8:ab:9e:6a:bf:a4:a6:ae:2b:39:7c:21:
2c:c1:49:c6:90:3d:c3:f0:83:0f:10:7f:ab:b5:2f:
36:8d:a6:22:ea:01:f0:2e:8a:90:56:6e:2d:38:53:
8a:02:b4:b4:74:b3:d1:55:bd:4e:48:dc:0f:88:86:
cd:01:28:63:67:88:13:1a:25:65:2f:3a:e6:91:33:
35:89:c6:59:f1:ed:97:3b:0c:9d:25:18:1a:50:05:
be:b0:d5:c3:17:a0:b9:46:f0:13:5c:24:8b:0f:2f:
99:8d:db:60:ae:04:5b:68:16:b9:51:03:d7:0a:18:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:14:28:9E:10:DC:CE:41:DB:86:23:19:A6:56:5E:6A:CE:17:03
X509v3 Authority Key Identifier:
keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32342d3234203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:55:6f:a3:31:73:63:fa:e9:5e:e8:bb:51:6f:16:5b:90:96:
88:5e:56:43:72:6b:53:09:c5:29:cf:c8:42:eb:7b:b5:5d:3d:
b6:5f:f3:0e:c3:88:25:4b:b4:a2:77:1b:df:d1:69:06:88:b7:
eb:6e:29:5d:70:c0:ef:42:cc:fa:d7:c6:eb:88:10:1e:12:cc:
79:9c:26:0b:33:7c:04:86:e4:78:b7:52:15:fd:4d:af:17:30:
1b:f6:17:86:32:9c:77:aa:91:06:45:de:a3:1a:5e:80:fa:f9:
11:6f:39:8f:2e:0e:78:4a:ed:f9:ac:65:b4:d7:7a:94:d0:61:
f9:60:be:fb:27:67:24:48:29:9a:76:0a:e2:58:48:73:1b:40:
7a:b1:c6:ec:3a:32:41:37:97:9c:e7:2a:f9:6f:e1:58:85:e7:
16:38:02:71:5b:e4:7a:10:48:1e:a7:eb:27:db:83:13:43:26:
68:97:1a:7f:52:f2:ee:41:87:82:91:76:27:33:b6:24:6d:cc:
c7:02:1e:af:a5:ac:03:1b:f7:88:90:b6:80:8d:7f:cc:81:ab:
18:70:32:9b:a9:d9:5c:08:08:60:91:21:71:fe:c6:d8:60:98:
e9:42:42:86:b7:85:24:d4:07:e9:39:31:25:1c:b4:19:a9:e6:
c6:60:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:05:11 2026 by rpki-client