
$ rpki-client -vvvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137332e302f32342d3234203d3e20323633393234.roa
File: 3136382e3233322e3137332e302f32342d3234203d3e20323633393234.roa (raw, json)
Hash identifier: ffhNJ+lIh9EirDuhZQmoM56c0zP9tnluYmt0aSXomqo=
Subject key identifier: 23:F9:30:F9:98:E5:CA:36:65:75:EB:57:B1:56:6A:D6:E3:E4:81:68
Certificate issuer: /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial: 2F1613195DF633948014F845FFF4E985BBEE943F
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137332e302f32342d3234203d3e20323633393234.roa
Signing time: Fri 25 Sep 2026 18:46:12 +0000
ROA not before: Fri 25 Sep 2026 18:41:12 +0000
ROA not after: Fri 24 Sep 2027 18:46:12 +0000
asID: 263924
IP address blocks: 168.232.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 04:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:16:13:19:5d:f6:33:94:80:14:f8:45:ff:f4:e9:85:bb:ee:94:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Validity
Not Before: Sep 25 18:41:12 2026 GMT
Not After : Sep 24 18:46:12 2027 GMT
Subject: CN=23F930F998E5CA366575EB57B1566AD6E3E48168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:d6:40:c5:1c:4e:fb:87:f7:b0:82:45:c5:
30:27:72:3d:42:17:2d:cf:2c:3d:f2:20:89:c0:79:
9b:dc:e9:1a:22:5e:af:58:45:68:0e:73:48:dc:91:
cd:a0:df:0d:61:9c:1e:e4:84:fe:2c:cc:5f:f4:e6:
db:4b:da:61:de:1b:9d:5d:2e:b2:76:0b:46:f2:83:
40:46:33:02:21:11:83:4c:9e:5d:31:b0:67:25:41:
dc:c2:a6:90:52:1b:34:b8:ee:a8:0d:56:27:5a:ef:
48:33:f8:bf:93:f2:e5:fa:38:f0:ec:39:f0:9d:9b:
0a:bd:88:e9:c0:09:60:9f:c8:cd:b1:11:de:42:68:
bf:d5:7e:e9:78:9b:df:b0:f5:3f:32:f0:35:76:6a:
1d:fb:9e:42:d3:69:7e:bb:54:26:a1:41:a5:7e:f2:
e0:93:f6:ba:07:30:b4:c1:28:79:d9:f4:73:e2:d4:
6a:13:e3:db:7c:99:76:32:01:9f:93:c7:3f:ec:5f:
7d:70:90:9d:ae:bc:d8:87:d0:44:7c:70:17:c9:a6:
f8:e1:c9:cb:91:4b:28:72:13:85:f0:6b:76:bb:0a:
90:6d:c1:27:5e:86:1b:81:5c:39:9a:47:a5:0e:05:
58:75:59:f2:c4:18:94:bd:9b:38:b6:c5:73:35:64:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:30:F9:98:E5:CA:36:65:75:EB:57:B1:56:6A:D6:E3:E4:81:68
X509v3 Authority Key Identifier:
keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137332e302f32342d3234203d3e20323633393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.173.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:cd:5b:f6:44:bf:9b:ee:1e:79:0a:2c:9f:3d:44:2e:93:ca:
87:80:d3:76:24:97:e4:aa:c0:56:a8:c7:ed:18:c5:5c:a3:3a:
be:a0:18:4b:ea:23:a8:1e:e8:42:c2:a5:9f:7a:5f:d5:4b:38:
83:c4:cc:5c:8e:60:e9:25:bd:c5:7c:84:78:69:dd:aa:0a:c4:
e1:7f:91:7f:5e:06:c0:fa:13:c0:01:bb:04:84:09:ca:38:4b:
6f:00:c0:93:14:57:49:2d:9a:54:a7:7b:98:f7:dc:66:67:81:
63:2d:59:3e:7d:a1:14:d0:63:de:8e:dc:b8:36:1b:e7:8f:8e:
6c:0f:05:8a:ad:8e:ea:79:2b:5d:81:64:93:60:66:c4:5f:83:
2f:32:7f:e6:3f:56:7c:13:e0:4f:19:57:91:30:e1:6b:4c:e4:
9f:5f:2b:3d:62:f7:a7:03:07:a0:66:45:cd:ff:3c:dc:90:7e:
a3:23:5c:a4:0e:a1:8e:d6:29:ae:fe:b1:07:cc:06:bb:f8:b0:
1b:1b:3c:86:3d:0c:64:c9:df:8d:1d:96:16:9f:9d:aa:72:01:
93:d6:d3:01:43:20:35:77:4a:b2:c1:54:9e:f1:0a:21:d3:20:
69:b5:00:46:4e:f1:17:a2:99:68:1d:50:74:34:f1:bb:c4:f3:
2f:56:d9:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULxYTGV32M5SAFPhF//TphbvulD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFGOEU2RkY4OTgzQzgyRTU5QjYxQUZCQzExQkI3RkFF
NzUzMjk3QjAeFw0yNjA5MjUxODQxMTJaFw0yNzA5MjQxODQ2MTJaMDMxMTAvBgNV
BAMTKDIzRjkzMEY5OThFNUNBMzY2NTc1RUI1N0IxNTY2QUQ2RTNFNDgxNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHU9ZAxRxO+4f3sIJFxTAncj1C
Fy3PLD3yIInAeZvc6RoiXq9YRWgOc0jckc2g3w1hnB7khP4szF/05ttL2mHeG51d
LrJ2C0byg0BGMwIhEYNMnl0xsGclQdzCppBSGzS47qgNVida70gz+L+T8uX6OPDs
OfCdmwq9iOnACWCfyM2xEd5CaL/Vful4m9+w9T8y8DV2ah37nkLTaX67VCahQaV+
8uCT9roHMLTBKHnZ9HPi1GoT49t8mXYyAZ+Txz/sX31wkJ2uvNiH0ER8cBfJpvjh
ycuRSyhyE4Xwa3a7CpBtwSdehhuBXDmaR6UOBVh1WfLEGJS9mzi2xXM1ZBSXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUI/kw+ZjlyjZldetXsVZq1uPkgWgwHwYDVR0j
BBgwFoAUMfjm/4mDyC5Zthr7wRu3+udTKXswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC8zMUY4RTZGRjg5ODNDODJFNTlCNjFBRkJDMTFCQjdGQUU3NTMyOTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxRjhFNkZGODk4M0M4MkU1
OUI2MUFGQkMxMUJCN0ZBRTc1MzI5N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjorTANBgkqhkiG9w0BAQsFAAOCAQEA0M1b
9kS/m+4eeQosnz1ELpPKh4DTdiSX5KrAVqjH7RjFXKM6vqAYS+ojqB7oQsKln3pf
1Us4g8TMXI5g6SW9xXyEeGndqgrE4X+Rf14GwPoTwAG7BIQJyjhLbwDAkxRXSS2a
VKd7mPfcZmeBYy1ZPn2hFNBj3o7cuDYb54+ObA8Fiq2O6nkrXYFkk2BmxF+DLzJ/
5j9WfBPgTxlXkTDha0zkn18rPWL3pwMHoGZFzf883JB+oyNcpA6hjtYprv6xB8wG
u/iwGxs8hj0MZMnfjR2WFp+dqnIBk9bTAUMgNXdKssFUnvEKIdMgabUARk7xF6KZ
aB1QdDTxu8TzL1bZ8A==
-----END CERTIFICATE-----
Generated at Sat Oct 31 18:08:08 2026 by rpki-client