
$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
File: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (raw, json)
Hash identifier: xWjFkUUH3xOUgkG4v7wi/q2SB8ChAo5GzZN4HLrLRT8=
Subject key identifier: 83:58:60:C2:C9:A7:5C:A2:D3:45:14:E6:F3:E6:B9:F1:5F:E1:86:6E
Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial: 7A424883024B628D3A573E1CCD10F79DCDD1AAC2
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
Signing time: Wed 01 Jul 2026 18:16:01 +0000
ROA not before: Wed 01 Jul 2026 18:11:01 +0000
ROA not after: Wed 30 Jun 2027 18:16:01 +0000
asID: 263482
IP address blocks: 191.242.216.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 17:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:42:48:83:02:4b:62:8d:3a:57:3e:1c:cd:10:f7:9d:cd:d1:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Validity
Not Before: Jul 1 18:11:01 2026 GMT
Not After : Jun 30 18:16:01 2027 GMT
Subject: CN=835860C2C9A75CA2D34514E6F3E6B9F15FE1866E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:e1:c7:6d:58:48:a2:b6:d3:1c:9b:c7:96:
b3:b4:08:ae:b4:08:8c:6c:35:58:9c:d4:34:53:ec:
68:e0:45:77:93:b8:74:d8:e5:37:9e:ad:d2:77:f9:
8f:f0:d9:1c:de:0c:be:2e:a1:99:f0:b5:f2:9a:b2:
16:00:22:0b:8e:e9:14:5f:09:dc:a6:2f:ce:c2:48:
c7:0d:2d:ea:ee:60:4a:5a:a9:5a:01:21:58:1b:d8:
c3:90:41:c3:e3:b3:90:f6:c7:73:c4:74:d0:01:0d:
4c:47:10:63:19:f0:2e:33:e0:77:66:cc:e3:d0:96:
98:d8:f0:06:83:03:85:b4:1e:23:cd:18:25:b0:aa:
7d:1c:d6:d1:b1:5f:fe:60:ab:02:83:3d:6f:47:36:
1b:68:0c:e1:4d:09:fc:c0:25:85:30:d6:1d:00:a9:
b0:51:9b:d1:a4:40:9e:b3:17:25:d5:da:88:36:32:
ed:4b:8b:c3:1e:42:d3:89:86:a1:f3:d5:59:99:ac:
00:e2:a9:18:c2:65:b1:b0:eb:ec:1d:bf:09:d7:58:
b3:f1:2f:d7:11:e6:e1:51:91:93:90:27:d7:2b:2d:
f0:6e:7f:09:18:ff:99:31:f6:63:28:fd:0d:97:3a:
69:62:78:92:0d:ac:1e:41:b5:92:f0:94:8e:29:f2:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:60:C2:C9:A7:5C:A2:D3:45:14:E6:F3:E6:B9:F1:5F:E1:86:6E
X509v3 Authority Key Identifier:
keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.216.0/22
Signature Algorithm: sha256WithRSAEncryption
75:65:51:e8:b1:9f:72:0d:74:21:a4:e9:b4:6b:19:05:47:7a:
81:32:c2:3d:bc:2a:80:f2:ed:81:80:89:5d:90:f6:4b:04:79:
02:2a:ba:6f:f8:b0:a9:2e:d2:88:ea:ff:c9:13:e0:c9:50:28:
db:0d:70:8a:44:c9:0c:a5:9a:f3:75:fa:6d:7d:08:6b:8f:1e:
58:54:f0:a4:16:0c:c0:cd:05:2e:78:ff:4d:1b:b9:2c:c1:e1:
b8:3f:fc:d2:59:1a:76:27:c5:6c:e2:2f:d7:6d:b9:1c:90:53:
a9:90:8c:87:d7:b4:c0:38:48:80:3f:4c:54:23:63:89:9b:55:
e6:b3:24:1e:39:5b:c9:62:ea:70:e4:7b:c8:e4:a6:46:5f:19:
9f:d0:4a:81:4f:7a:8a:53:7c:c1:53:60:97:bb:e5:60:54:db:
96:eb:46:7b:d3:31:df:46:9a:26:05:7c:91:d5:35:55:b2:fa:
3e:d1:e9:ed:61:41:31:b3:e4:29:72:25:7c:80:9b:22:8f:df:
1a:b0:1f:14:d3:68:e1:d1:82:aa:1d:c3:dd:85:b7:e0:51:ce:
86:16:78:8c:07:65:cb:f6:7a:c9:8b:4d:51:04:31:be:c4:d9:
19:d1:a7:7b:66:29:a2:dd:b6:51:e9:61:d3:fa:72:8b:23:b8:
b5:71:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:22:54 2026 by rpki-client