
$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
File: 3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa (raw, json)
Hash identifier: fSTDs8YDPsxdA5uxNNX/gPcN+eM3m0zmIMsiExYJmVc=
Subject key identifier: 29:73:79:71:A7:BB:50:E1:86:6A:67:CF:4D:DB:F9:E4:72:60:83:97
Certificate issuer: /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial: 635803263F894F4671B097C04936EE9CC1CC4407
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
Signing time: Mon 07 Jul 2025 15:19:47 +0000
ROA not before: Mon 07 Jul 2025 15:14:47 +0000
ROA not after: Mon 06 Jul 2026 15:19:47 +0000
asID: 264425
IP address blocks: 131.221.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 01:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:58:03:26:3f:89:4f:46:71:b0:97:c0:49:36:ee:9c:c1:cc:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Validity
Not Before: Jul 7 15:14:47 2025 GMT
Not After : Jul 6 15:19:47 2026 GMT
Subject: CN=29737971A7BB50E1866A67CF4DDBF9E472608397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:c9:7e:d5:12:98:ac:b1:40:9d:7b:9d:10:
e7:2a:03:61:f0:0d:69:df:de:e1:09:c0:b6:40:30:
2d:c5:b6:fe:d8:2b:be:75:e8:a8:67:0c:1d:0a:33:
9c:a4:9f:23:cf:aa:66:32:58:ae:6c:21:88:23:76:
e1:c0:d4:b0:93:60:82:fc:33:7d:c9:5b:a4:76:dd:
19:95:14:cc:5a:74:41:a6:5e:9d:49:48:81:73:e5:
a1:c2:db:dd:a4:89:81:9d:9f:65:8f:ed:71:c5:fd:
2a:9c:bc:06:d9:aa:5a:8f:37:84:5a:9e:08:6b:f5:
72:36:be:fa:33:18:82:a3:5f:45:0e:f9:b8:d0:7e:
10:fd:fa:13:a4:95:64:7f:8c:67:c2:a3:b5:70:36:
26:c7:da:c2:9d:17:1d:a2:93:1d:60:38:e1:9f:c3:
8d:d2:89:cc:9f:d6:f0:f1:c7:ae:f1:09:4c:17:ec:
47:7a:5a:04:15:9c:66:5e:f1:9d:aa:26:fc:f8:c9:
04:b8:0f:14:aa:56:2b:6d:eb:81:8b:fd:ef:65:5d:
0c:9d:d4:6d:0a:24:34:d0:e7:7e:7c:11:35:b1:07:
c6:b3:74:2a:d0:21:51:59:ee:f1:62:27:0a:91:34:
a1:8d:b1:2d:79:0e:a2:83:09:ee:9e:8b:6d:69:a0:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:79:71:A7:BB:50:E1:86:6A:67:CF:4D:DB:F9:E4:72:60:83:97
X509v3 Authority Key Identifier:
keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:9f:d4:b9:67:01:2b:b4:52:83:bf:2e:1a:33:58:c5:fb:ef:
f9:83:f5:e4:15:4e:d7:24:79:b8:bb:24:b1:1a:89:86:e9:cb:
11:fd:a5:3d:18:8b:8f:57:d5:08:ea:59:1f:91:ba:ac:fa:2e:
5e:91:3c:c3:e1:4b:1e:88:a4:0a:6e:a8:55:d2:1e:04:4b:5e:
e0:e8:67:d3:29:00:0d:f4:34:1d:a1:4e:25:d5:36:dc:5f:07:
21:50:d4:5d:a2:46:c2:0c:43:5f:87:8c:31:c1:af:6a:7b:77:
1b:b2:6c:18:2f:9a:48:48:75:26:19:96:a3:bd:06:9e:4a:2b:
f4:df:b8:73:d5:51:57:42:f1:a3:fe:95:50:d6:1c:4f:1e:aa:
ee:6f:2b:73:40:23:e5:61:df:05:ed:fa:57:2a:ff:a2:4c:f4:
6d:f8:58:b6:1a:6d:83:60:5f:07:e5:f7:7e:6e:cb:5f:c6:12:
62:fd:7d:71:37:3d:01:c9:ef:29:14:53:50:a9:b7:a3:91:34:
41:09:b8:ff:47:e1:31:e1:fb:1c:c0:78:9e:ba:61:91:f7:bf:
c3:f3:bb:06:aa:88:79:e7:d1:64:6e:5d:ec:96:1d:a1:d8:eb:
9f:0b:b0:75:5f:c4:4e:11:11:f4:f1:82:7e:49:4a:43:32:cd:
bb:66:76:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY1gDJj+JT0ZxsJfASTbunMHMRAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkExRkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4
REM5NEE5RjAeFw0yNTA3MDcxNTE0NDdaFw0yNjA3MDYxNTE5NDdaMDMxMTAvBgNV
BAMTKDI5NzM3OTcxQTdCQjUwRTE4NjZBNjdDRjREREJGOUU0NzI2MDgzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuesl+1RKYrLFAnXudEOcqA2Hw
DWnf3uEJwLZAMC3Ftv7YK7516KhnDB0KM5yknyPPqmYyWK5sIYgjduHA1LCTYIL8
M33JW6R23RmVFMxadEGmXp1JSIFz5aHC292kiYGdn2WP7XHF/SqcvAbZqlqPN4Ra
nghr9XI2vvozGIKjX0UO+bjQfhD9+hOklWR/jGfCo7VwNibH2sKdFx2ikx1gOOGf
w43Sicyf1vDxx67xCUwX7Ed6WgQVnGZe8Z2qJvz4yQS4DxSqVitt64GL/e9lXQyd
1G0KJDTQ5358ETWxB8azdCrQIVFZ7vFiJwqRNKGNsS15DqKDCe6ei21poE4NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKXN5cae7UOGGamfPTdv55HJgg5cwHwYDVR0j
BBgwFoAU+h/ju3bSL5tXasJA+o4FCo3JSp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC9GQTFGRTNCQjc2RDIyRjlCNTc2QUMyNDBGQThFMDUwQThEQzk0QTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMUZFM0JCNzZEMjJGOUI1
NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzgzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYPduDANBgkqhkiG9w0BAQsFAAOCAQEAnJ/U
uWcBK7RSg78uGjNYxfvv+YP15BVO1yR5uLsksRqJhunLEf2lPRiLj1fVCOpZH5G6
rPouXpE8w+FLHoikCm6oVdIeBEte4Ohn0ykADfQ0HaFOJdU23F8HIVDUXaJGwgxD
X4eMMcGvant3G7JsGC+aSEh1JhmWo70Gnkor9N+4c9VRV0Lxo/6VUNYcTx6q7m8r
c0Aj5WHfBe36Vyr/okz0bfhYthptg2BfB+X3fm7LX8YSYv19cTc9AcnvKRRTUKm3
o5E0QQm4/0fhMeH7HMB4nrphkfe/w/O7BqqIeefRZG5d7JYdodjrnwuwdV/EThER
9PGCfklKQzLNu2Z2JA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:15 2025 by rpki-client