
$ rpki-client -vvvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa
File: 3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa (raw, json)
Hash identifier: V1sKKM+yzUAEg4dC+2++rJXfoAv/x0ULYDQQ+5RdkCk=
Subject key identifier: 8F:98:CA:B5:CC:B6:EB:33:47:66:C5:2C:80:5F:B4:0D:D7:75:F3:23
Certificate issuer: /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial: 0171CCE61163CACCC40F95013A0496D59409DF5C
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa
Signing time: Fri 25 Sep 2026 18:46:11 +0000
ROA not before: Fri 25 Sep 2026 18:41:11 +0000
ROA not after: Fri 24 Sep 2027 18:46:11 +0000
asID: 263924
IP address blocks: 168.232.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 20:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:71:cc:e6:11:63:ca:cc:c4:0f:95:01:3a:04:96:d5:94:09:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Validity
Not Before: Sep 25 18:41:11 2026 GMT
Not After : Sep 24 18:46:11 2027 GMT
Subject: CN=8F98CAB5CCB6EB334766C52C805FB40DD775F323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:7b:c9:1a:7a:cc:6a:05:58:e7:02:e3:2d:
a3:bb:8a:c1:6c:26:d0:e5:d5:a9:08:90:4d:e0:5f:
00:44:d2:ea:cc:8d:cf:59:18:7f:57:e0:10:06:55:
4a:25:21:4b:82:04:fc:6f:61:a7:f6:e9:d5:9a:6b:
99:e3:cd:dd:55:49:df:ad:20:5f:cb:80:33:67:df:
bb:8e:b7:91:62:ab:78:18:97:b4:93:12:62:5b:70:
69:c8:f5:92:f7:49:3b:7a:84:9b:16:e8:83:fb:83:
8a:75:e5:06:74:1a:26:ff:85:eb:36:ce:99:b1:44:
81:8d:9c:bb:18:42:16:9a:a3:88:bd:d7:f2:fd:ca:
73:33:59:ea:6e:f8:95:02:90:cd:a0:70:66:84:0b:
d1:13:e9:44:4e:47:5a:b9:b1:81:74:f1:30:56:1b:
b8:94:8a:f5:c4:ee:96:a2:95:1f:a8:49:47:ce:cd:
f5:90:a7:bf:e3:a4:a4:7e:36:6a:dd:4f:0a:86:02:
ae:95:84:7d:7a:06:0f:b3:75:99:4b:5b:6b:dc:9c:
d4:ed:a0:22:0f:55:5b:6a:be:8d:e5:c6:84:b4:bb:
0a:12:8a:4c:4c:ba:da:78:df:13:6e:31:c9:b6:74:
10:8a:c6:69:31:0f:5c:7f:f4:31:a0:f0:99:bc:25:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:98:CA:B5:CC:B6:EB:33:47:66:C5:2C:80:5F:B4:0D:D7:75:F3:23
X509v3 Authority Key Identifier:
keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32342d3234203d3e20323633393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1f:8c:15:7a:14:d3:5f:6a:17:04:bf:59:fe:a2:7a:2e:92:
0a:1b:e6:29:96:76:3f:b7:df:d7:bd:83:a2:e5:73:9b:60:9f:
cc:50:10:98:a4:04:be:2e:09:83:4e:0d:17:7e:fb:2f:0f:82:
0c:e7:78:7a:89:98:c1:0d:ff:fa:54:ae:ea:7e:c5:78:eb:be:
62:c2:ba:ee:40:47:80:91:63:12:38:99:52:aa:44:7f:96:45:
71:00:51:5e:0e:ad:a3:ec:b1:15:39:cd:d0:d4:b9:91:f3:e0:
f4:81:f8:f3:3c:b9:34:e4:98:31:a5:49:46:63:8f:13:e3:3c:
5a:ab:cd:a5:79:c5:e3:79:61:02:36:81:17:57:d0:b2:d0:a0:
62:f0:01:20:ba:fb:9c:77:97:ea:b7:7d:b4:cf:c7:00:01:61:
68:9d:59:2e:d0:4a:15:42:75:ba:a4:58:8e:c3:ba:3f:97:13:
d4:73:97:28:3f:08:06:28:5e:46:3a:ff:d8:af:a3:19:8d:3e:
15:03:63:25:a9:72:be:52:bd:82:ae:f2:62:c9:bc:93:4b:c1:
b4:c5:f2:d1:af:b7:19:77:c4:fa:0e:0a:f8:49:5c:8e:e0:e4:
97:88:b0:63:98:20:0d:2e:f8:c8:61:ec:f9:60:50:c2:ed:b2:
7c:53:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:59:58 2026 by rpki-client