
$ rpki-client -vvvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa
File: 3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier: BtLK6F0bx8fPAzrT1MPWy5w46M06TJw0OiDjxdz3NnE=
Subject key identifier: 21:4D:72:8C:0F:C2:C4:A2:55:95:56:00:DF:1E:EF:AA:BB:3E:73:7F
Certificate issuer: /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial: 650C792A0FB75E4FD199F2DFDEF04397E314080E
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa
Signing time: Wed 12 Aug 2026 13:04:22 +0000
ROA not before: Wed 12 Aug 2026 12:59:22 +0000
ROA not after: Wed 11 Aug 2027 13:04:22 +0000
asID: 271111
IP address blocks: 192.140.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 20:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0c:79:2a:0f:b7:5e:4f:d1:99:f2:df:de:f0:43:97:e3:14:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Validity
Not Before: Aug 12 12:59:22 2026 GMT
Not After : Aug 11 13:04:22 2027 GMT
Subject: CN=214D728C0FC2C4A255955600DF1EEFAABB3E737F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:dd:29:8e:08:97:98:6d:4b:ed:5d:f9:c6:
d9:27:16:35:a9:f1:60:9d:68:d3:71:6b:36:6a:6f:
08:9d:e0:4c:ba:a1:8f:7e:97:a9:f0:39:3e:39:00:
14:9e:28:9a:a3:ae:a5:05:ca:6f:bd:d8:46:88:23:
bd:96:b7:5c:d9:b0:ff:2f:ae:12:57:c7:33:85:eb:
9b:51:5b:f9:6a:81:48:07:50:cb:95:22:7c:f2:ec:
4e:fd:49:b2:10:2f:e8:b4:6c:84:86:ca:86:7f:d5:
d8:c6:f1:7b:7f:c2:a4:3b:88:18:f6:b2:9f:61:07:
0f:0f:43:47:97:01:cb:55:a2:8c:39:b1:0a:45:b5:
10:8c:6f:b1:d0:d1:01:8f:69:54:d2:70:89:27:64:
4b:c1:aa:65:e9:a0:b6:1f:35:e5:df:e8:d5:44:37:
35:1b:56:2f:9f:c2:1c:5a:8f:b2:66:a0:da:53:32:
89:4e:0d:4c:df:49:ca:30:60:f9:92:e5:c7:5d:44:
ca:ce:8a:b7:6e:b7:f8:df:e5:8b:8b:b5:5c:7e:90:
4a:7c:6a:a4:ee:fd:ec:ec:16:97:cd:f0:82:55:4b:
12:68:0f:81:50:c7:f3:a4:99:01:68:fd:a0:a6:b5:
0f:65:7c:a2:b1:5c:93:4f:01:63:10:97:64:7d:2f:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:72:8C:0F:C2:C4:A2:55:95:56:00:DF:1E:EF:AA:BB:3E:73:7F
X509v3 Authority Key Identifier:
keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.84.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3b:9b:2e:0d:bc:99:41:c9:78:ff:7f:9d:01:e7:5c:d4:d8:
b0:04:83:d9:76:7b:ab:cf:dd:55:50:56:31:20:26:f7:9a:bb:
ee:d6:aa:fd:e9:c6:8f:fa:cd:5f:f6:8c:24:f8:5e:e1:2a:f6:
bc:0e:9d:f1:bc:82:b6:eb:51:a4:aa:dd:34:1d:05:8a:55:02:
f5:fa:ef:fc:a8:77:b2:2b:3a:e0:59:07:b8:eb:f7:7a:ea:5d:
8b:cf:0e:16:1f:0d:bb:95:a0:e6:0e:9c:c6:bf:05:08:9b:cf:
51:99:fb:c4:62:9e:37:92:0d:42:fc:36:cd:41:cc:a7:5e:3d:
8a:68:df:6c:07:8e:4f:07:9d:7d:38:1e:51:5d:d4:2a:87:a5:
58:07:2d:67:9f:54:40:1c:da:d8:d5:36:2c:7c:3c:95:90:e0:
56:c3:9c:d5:ba:d2:a4:35:56:5d:42:db:ca:e7:ff:d7:59:fa:
36:99:b1:58:17:64:82:2b:3a:c0:ed:dc:e3:0a:29:89:d0:fa:
86:29:67:3e:8a:ae:16:fb:f4:b1:1c:f2:2a:89:9b:2e:a6:e1:
a9:28:a5:af:2f:b4:a0:0f:07:9e:b0:6a:14:c0:13:af:82:4f:
7b:47:52:1f:a0:1c:5c:98:ba:25:5b:b7:6b:d2:94:71:44:ff:
95:84:8a:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZQx5Kg+3Xk/RmfLf3vBDl+MUCA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNUVFRjdFNkVFODk0QzE5N0RCRDc4MzdDQjNDMDVE
RkI5RThFMDAeFw0yNjA4MTIxMjU5MjJaFw0yNzA4MTExMzA0MjJaMDMxMTAvBgNV
BAMTKDIxNEQ3MjhDMEZDMkM0QTI1NTk1NTYwMERGMUVFRkFBQkIzRTczN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrs90pjgiXmG1L7V35xtknFjWp
8WCdaNNxazZqbwid4Ey6oY9+l6nwOT45ABSeKJqjrqUFym+92EaII72Wt1zZsP8v
rhJXxzOF65tRW/lqgUgHUMuVInzy7E79SbIQL+i0bISGyoZ/1djG8Xt/wqQ7iBj2
sp9hBw8PQ0eXActVoow5sQpFtRCMb7HQ0QGPaVTScIknZEvBqmXpoLYfNeXf6NVE
NzUbVi+fwhxaj7JmoNpTMolODUzfScowYPmS5cddRMrOirdut/jf5YuLtVx+kEp8
aqTu/ezsFpfN8IJVSxJoD4FQx/OkmQFo/aCmtQ9lfKKxXJNPAWMQl2R9L32tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIU1yjA/CxKJVlVYA3x7vqrs+c38wHwYDVR0j
BBgwFoAUriXu9+buiUwZfb14N8s8Bd+56OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5
NmIvMC9BRTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjVFRUY3RTZFRTg5NEMx
OTdEQkQ3ODM3Q0IzQzA1REZCOUU4RTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzAv
MzEzOTMyMmUzMTM0MzAyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjFQwDQYJKoZIhvcNAQELBQADggEBACQ7my4N
vJlByXj/f50B51zU2LAEg9l2e6vP3VVQVjEgJveau+7Wqv3pxo/6zV/2jCT4XuEq
9rwOnfG8grbrUaSq3TQdBYpVAvX67/yod7IrOuBZB7jr93rqXYvPDhYfDbuVoOYO
nMa/BQibz1GZ+8RinjeSDUL8Ns1BzKdePYpo32wHjk8HnX04HlFd1CqHpVgHLWef
VEAc2tjVNix8PJWQ4FbDnNW60qQ1Vl1C28rn/9dZ+jaZsVgXZIIrOsDt3OMKKYnQ
+oYpZz6Krhb79LEc8iqJmy6m4akopa8vtKAPB56wahTAE6+CT3tHUh+gHFyYuiVb
t2vSlHFE/5WEiv4=
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:30:30 2026 by rpki-client