
$ rpki-client -vvvf rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa
File: 3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa (raw, json)
Hash identifier: XXMZhbwCsivmtOgGXLArWNOWpvHiLPPdn/1WsXjVjk4=
Subject key identifier: 59:FC:35:D3:9A:E6:EB:F5:F4:54:95:6E:9C:EE:36:A6:AF:79:21:50
Certificate issuer: /CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C
Certificate serial: 31D6407AA3100A391168CFC4C485A3BE3CA570A6
Authority key identifier: 3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa
Signing time: Wed 30 Sep 2026 16:45:50 +0000
ROA not before: Wed 30 Sep 2026 16:40:50 +0000
ROA not after: Wed 29 Sep 2027 16:45:50 +0000
asID: 262895
IP address blocks: 201.140.208.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl
rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 16:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d6:40:7a:a3:10:0a:39:11:68:cf:c4:c4:85:a3:be:3c:a5:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C
Validity
Not Before: Sep 30 16:40:50 2026 GMT
Not After : Sep 29 16:45:50 2027 GMT
Subject: CN=59FC35D39AE6EBF5F454956E9CEE36A6AF792150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:85:25:74:a6:8a:e6:56:64:72:7e:62:f2:
1c:9b:88:2f:2d:2c:85:3c:bc:1a:be:c4:cf:02:58:
8a:63:38:8a:25:f7:2e:6c:88:f0:ee:e7:56:31:49:
ee:1d:15:53:76:7b:a4:ff:cb:12:63:b6:54:f6:86:
96:94:24:81:6d:04:f1:0e:02:43:5f:cf:a8:f7:55:
67:4e:ff:1e:cc:9c:30:1c:82:ed:13:49:ac:83:f5:
07:70:1c:83:ba:74:04:99:d9:4f:75:6f:2b:41:79:
8f:d2:06:1f:df:fe:25:82:d0:76:6f:58:2b:df:1e:
5e:2b:f6:ec:0d:a3:b2:9f:27:42:25:0d:13:80:3f:
48:30:d6:75:27:7d:1d:8d:08:51:42:98:e3:62:bf:
16:36:70:32:26:fe:de:af:d0:9f:2a:26:06:79:63:
a0:ac:6f:e9:2f:30:58:84:fd:56:ba:41:cc:50:26:
c1:96:e4:f5:1b:e6:7b:21:e5:3a:02:32:20:05:7f:
c4:d8:b5:02:87:78:28:33:07:39:e3:2b:92:8d:93:
16:7e:8f:47:20:5f:f8:9a:7d:08:8b:aa:0b:20:07:
4e:c4:7a:b5:3f:6c:01:6d:19:0e:04:42:da:10:d7:
5e:f4:fc:ac:69:39:e5:c4:fb:e6:c6:75:ce:8a:e1:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:35:D3:9A:E6:EB:F5:F4:54:95:6E:9C:EE:36:A6:AF:79:21:50
X509v3 Authority Key Identifier:
keyid:3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.140.208.0/22
Signature Algorithm: sha256WithRSAEncryption
76:be:b8:4b:8f:39:f1:18:75:48:ec:ef:76:29:b7:ec:9c:cb:
89:48:7a:5b:8b:28:10:eb:e9:34:61:53:9b:4b:cf:5a:7e:9e:
ea:44:cd:15:0d:d4:04:3a:55:4a:dc:8c:bc:fc:42:18:5f:a9:
73:7f:88:e8:44:d1:47:40:fa:98:f5:ac:ed:9c:8c:6b:02:c6:
81:26:f3:47:30:61:1c:59:5e:c8:04:27:70:14:74:f4:70:18:
87:ad:0f:43:81:f9:37:12:f2:b6:a3:5b:77:f8:77:eb:92:fe:
06:08:92:72:fb:4e:8d:55:a4:b9:a7:27:24:65:a5:ed:e8:3a:
be:56:9d:6c:45:bb:cf:65:5d:32:ea:eb:b8:34:d2:ba:16:95:
11:b2:03:cc:d6:df:e3:09:6b:94:a6:d5:0f:1e:af:7c:f7:1d:
46:5d:aa:05:3c:7b:23:11:59:9e:f8:fb:e1:e5:40:91:37:d0:
82:d5:7d:e9:e8:f3:41:50:a4:4e:fd:06:5d:7e:16:05:3d:3f:
44:44:15:d9:76:01:17:4c:b6:c2:d1:19:19:2b:03:cb:2d:9e:
63:4c:48:af:15:4b:79:44:74:fc:c7:5a:1a:96:08:a7:39:78:
25:1d:d2:ea:ff:cf:d9:73:69:9f:26:f0:2d:d1:fc:7b:9e:45:
7c:9e:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:08 2026 by rpki-client