
$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
File: 3230302e332e31362e302f32302d3234203d3e203532363839.roa (raw, json)
Hash identifier: kx9GvgSHREQhYCuJOxuhkPkGY+YqfYlpfutFW2U46Wg=
Subject key identifier: 13:0A:96:07:67:B5:C9:55:3E:6D:FD:84:92:6F:55:90:47:02:6E:3F
Certificate issuer: /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
Certificate serial: 6E0FC61218E9DFAFC50C15C33F2D09490B4C8103
Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
Signing time: Fri 30 Jan 2026 15:48:05 +0000
ROA not before: Fri 30 Jan 2026 15:43:05 +0000
ROA not after: Fri 29 Jan 2027 15:48:05 +0000
asID: 52689
IP address blocks: 200.3.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl
rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 20:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0f:c6:12:18:e9:df:af:c5:0c:15:c3:3f:2d:09:49:0b:4c:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
Validity
Not Before: Jan 30 15:43:05 2026 GMT
Not After : Jan 29 15:48:05 2027 GMT
Subject: CN=130A960767B5C9553E6DFD84926F559047026E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:67:40:55:c6:e6:27:e7:45:5b:fc:7e:4b:
83:3d:5b:cd:97:a5:71:6a:a7:46:d2:52:1f:44:25:
a6:3e:ab:3a:b9:47:0f:ef:0e:dd:a5:68:82:ef:d8:
8f:24:00:93:23:4c:88:59:73:60:3b:76:5e:f5:b4:
f5:eb:3f:60:72:fc:6d:fa:e2:0c:91:7d:ad:2f:06:
24:44:55:d6:90:81:d8:65:d3:ca:16:f5:29:dc:07:
22:86:88:a1:89:b3:81:02:7f:99:16:c5:7f:ab:a3:
9f:82:f4:b5:98:19:ec:29:de:18:de:27:9e:b5:de:
73:fe:d9:77:23:ab:77:4a:61:35:28:3a:e3:df:b3:
3e:a3:ad:3e:da:05:77:89:50:65:92:74:0a:95:52:
e5:69:9d:4c:b1:38:9c:9d:ea:26:66:88:b7:4f:5c:
2b:35:c1:2b:6b:b5:eb:3e:24:8d:8a:85:2e:dc:2e:
2e:60:58:8c:55:e5:9e:ae:a3:82:d9:d2:0b:d3:a3:
4f:35:1e:c9:0b:5f:b8:a4:21:1f:99:d2:ef:e5:7d:
48:df:47:e1:5e:17:86:4c:13:ba:2a:71:29:73:af:
b2:76:00:a4:3e:b0:50:53:47:10:be:d4:9c:24:6a:
d3:e2:26:b4:b7:1f:9b:f5:9e:08:29:8e:1a:dc:f1:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:96:07:67:B5:C9:55:3E:6D:FD:84:92:6F:55:90:47:02:6E:3F
X509v3 Authority Key Identifier:
keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.16.0/20
Signature Algorithm: sha256WithRSAEncryption
17:44:2b:1a:32:f6:4c:54:5b:39:5f:10:01:1a:e1:43:fa:6f:
32:2a:da:c0:84:44:9c:1e:2c:b4:9b:19:95:09:59:25:54:73:
27:76:43:89:12:b1:13:56:a0:c7:70:e9:f9:56:6b:b2:b3:73:
52:10:1b:34:0e:53:12:cb:7b:e4:9a:3b:71:bd:1a:dd:d7:f7:
7e:e1:d4:f1:b2:9a:53:ae:2c:0b:5a:8a:cf:47:56:02:40:df:
ce:51:39:c6:51:d7:51:ea:65:11:04:03:a2:62:90:1a:13:7c:
ab:d4:13:a7:72:95:50:a8:04:ae:a8:2a:ec:52:97:a7:e2:9a:
5b:7c:c5:3e:2f:b4:8b:04:33:fe:2d:7a:59:7a:00:fa:17:42:
d5:f9:b7:c8:96:f1:7e:e7:6f:e9:ee:ed:a6:fc:67:97:c4:2d:
4b:63:16:56:4f:9f:ff:34:34:07:31:a5:5c:1e:0b:58:8d:92:
d6:be:73:de:80:40:a1:5b:1e:6c:56:d9:71:a4:1d:2d:fc:4b:
d7:55:fa:f2:17:99:68:17:24:d1:76:41:52:c8:8e:f0:0d:bc:
9b:4d:74:f5:38:23:6a:a2:2a:fb:06:5b:2d:26:26:97:f2:52:
47:53:e3:ab:4a:ae:74:c6:ee:b4:13:4e:26:7a:6a:f9:e4:79:
68:04:d2:7a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUbg/GEhjp36/FDBXDPy0JSQtMgQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1OTZGMzFGNkNGRTU3MDc4QjEzMDNFNjhGRUJERUVF
QUY5NkRERTAeFw0yNjAxMzAxNTQzMDVaFw0yNzAxMjkxNTQ4MDVaMDMxMTAvBgNV
BAMTKDEzMEE5NjA3NjdCNUM5NTUzRTZERkQ4NDkyNkY1NTkwNDcwMjZFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzGdAVcbmJ+dFW/x+S4M9W82X
pXFqp0bSUh9EJaY+qzq5Rw/vDt2laILv2I8kAJMjTIhZc2A7dl71tPXrP2By/G36
4gyRfa0vBiREVdaQgdhl08oW9SncByKGiKGJs4ECf5kWxX+ro5+C9LWYGewp3hje
J5613nP+2Xcjq3dKYTUoOuPfsz6jrT7aBXeJUGWSdAqVUuVpnUyxOJyd6iZmiLdP
XCs1wStrtes+JI2KhS7cLi5gWIxV5Z6uo4LZ0gvTo081HskLX7ikIR+Z0u/lfUjf
R+FeF4ZME7oqcSlzr7J2AKQ+sFBTRxC+1JwkatPiJrS3H5v1nggpjhrc8WDhAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUEwqWB2e1yVU+bf2Ekm9VkEcCbj8wHwYDVR0j
BBgwFoAUjllvMfbP5XB4sTA+aP697ur5bd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQz
dGkvMC84RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTk2RjMxRjZDRkU1NzA3
OEIxMzAzRTY4RkVCREVFRUFGOTZEREUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk0OGlEMmg4WHZ3a2lCTkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAv
MzIzMDMwMmUzMzJlMzEzNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzNjM4
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBATIAxAwDQYJKoZIhvcNAQELBQADggEBABdEKxoy9kxUWzlf
EAEa4UP6bzIq2sCERJweLLSbGZUJWSVUcyd2Q4kSsRNWoMdw6flWa7Kzc1IQGzQO
UxLLe+SaO3G9Gt3X937h1PGymlOuLAtais9HVgJA385ROcZR11HqZREEA6JikBoT
fKvUE6dylVCoBK6oKuxSl6fimlt8xT4vtIsEM/4tell6APoXQtX5t8iW8X7nb+nu
7ab8Z5fELUtjFlZPn/80NAcxpVweC1iNkta+c96AQKFbHmxW2XGkHS38S9dV+vIX
mWgXJNF2QVLIjvANvJtNdPU4I2qiKvsGWy0mJpfyUkdT46tKrnTG7rQTTiZ6avnk
eWgE0no=
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:58:57 2026 by rpki-client