
$ rpki-client -vvvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa
File: 3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa (raw, json)
Hash identifier: lyaYmXVE1WUtP+5N1pMzJizocUc1mGHa1tit9EzEsUE=
Subject key identifier: 21:F2:91:C0:88:30:9E:A6:49:DB:D9:A9:FD:9F:9B:4E:0E:AF:06:34
Certificate issuer: /CN=88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451
Certificate serial: 0ADF71534A00608A61364334EEB59EE678A38883
Authority key identifier: 88:FC:1A:77:77:5D:2D:81:57:A4:A2:AB:B5:DE:02:DB:DB:EC:44:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa
Signing time: Tue 08 Sep 2026 16:09:47 +0000
ROA not before: Tue 08 Sep 2026 16:04:47 +0000
ROA not after: Tue 07 Sep 2027 16:09:47 +0000
asID: 265055
IP address blocks: 170.231.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451.crl
rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 02:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:df:71:53:4a:00:60:8a:61:36:43:34:ee:b5:9e:e6:78:a3:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451
Validity
Not Before: Sep 8 16:04:47 2026 GMT
Not After : Sep 7 16:09:47 2027 GMT
Subject: CN=21F291C088309EA649DBD9A9FD9F9B4E0EAF0634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:68:72:c6:53:17:d8:c3:d7:e8:78:c3:e1:
f3:fd:02:6a:9b:2e:fd:b3:75:d6:8f:68:64:9e:2b:
9b:77:84:a6:63:2a:0d:da:27:8d:1d:59:aa:02:75:
b5:1f:dd:f5:06:0e:dd:fe:0e:3e:7e:fe:98:e4:8b:
81:88:9c:b8:05:2d:59:1e:cf:2c:73:88:7c:ef:b3:
d9:9d:c9:ba:96:62:fc:63:db:9c:0f:ab:6f:28:fa:
59:0a:db:fb:3a:69:a3:ee:1e:99:b1:d8:f9:8f:2f:
b4:4b:bd:1e:9d:86:c2:7f:42:0a:c1:af:19:4b:e7:
7d:31:6e:6f:b7:1d:c6:78:6e:60:4c:fa:11:03:f6:
03:35:0c:cf:ed:72:77:9a:ec:9a:39:02:7e:97:30:
7a:c1:d4:dc:b4:1a:14:d7:a5:f3:71:8f:e2:31:b6:
58:f0:b1:ee:bd:8d:f9:8e:af:c6:49:5e:2c:e3:db:
6c:bd:7f:c6:02:49:db:37:ea:a1:a2:cd:d0:0c:42:
16:60:94:3a:7f:75:8c:1a:b6:b2:20:d3:99:44:6d:
09:24:cb:bc:ab:c7:9d:a4:92:fd:86:3e:69:9e:18:
9d:6a:b1:d5:0f:f0:76:db:5a:39:5c:f6:61:e8:1e:
cc:8c:55:46:71:21:a3:7a:9a:d4:5b:0e:21:5c:0b:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F2:91:C0:88:30:9E:A6:49:DB:D9:A9:FD:9F:9B:4E:0E:AF:06:34
X509v3 Authority Key Identifier:
keyid:88:FC:1A:77:77:5D:2D:81:57:A4:A2:AB:B5:DE:02:DB:DB:EC:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FC1A77775D2D8157A4A2ABB5DE02DBDBEC4451.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:22:d9:a9:78:d7:da:24:ef:f6:7e:fd:b1:35:16:58:bf:fc:
07:e6:d2:d4:a8:75:89:5d:53:5d:0c:dd:8e:60:14:27:b1:18:
56:7c:90:fa:73:e0:0a:8e:b2:cb:52:f3:3b:a0:1a:0e:a3:14:
a8:38:93:5a:98:fb:3a:58:54:e4:07:58:8d:86:32:0d:fc:94:
1c:74:8c:9a:09:fc:03:60:2e:6f:04:19:b9:82:10:b6:e0:22:
e6:be:6f:c0:0d:95:b9:96:73:7d:6f:4d:7b:00:7e:ee:5d:98:
00:9c:85:0d:fc:4a:16:93:81:f7:c3:01:be:26:f6:00:91:97:
d9:47:d5:4b:21:27:52:b2:fc:ad:6b:fe:e8:aa:ec:89:ad:5d:
39:34:85:ea:73:0e:77:bb:05:f8:d4:21:40:10:23:c1:17:be:
d5:92:d4:77:7a:7a:9e:de:b1:65:88:f6:00:22:8c:ca:91:84:
26:5c:92:52:b2:95:e3:01:94:eb:82:02:30:0f:3e:b2:57:08:
d8:7e:95:6a:0f:ed:2f:99:dd:bc:f4:7b:26:c8:9d:17:5a:e6:
f6:53:a9:9b:aa:b4:e9:3d:00:16:1e:37:ed:e4:cf:97:fd:32:
2b:ae:b0:41:ef:b9:02:67:58:31:18:3c:61:50:22:b2:43:78:
49:06:9a:b0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCt9xU0oAYIphNkM07rWe5nijiIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGQzFBNzc3NzVEMkQ4MTU3QTRBMkFCQjVERTAyREJE
QkVDNDQ1MTAeFw0yNjA5MDgxNjA0NDdaFw0yNzA5MDcxNjA5NDdaMDMxMTAvBgNV
BAMTKDIxRjI5MUMwODgzMDlFQTY0OURCRDlBOUZEOUY5QjRFMEVBRjA2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPGhyxlMX2MPX6HjD4fP9Amqb
Lv2zddaPaGSeK5t3hKZjKg3aJ40dWaoCdbUf3fUGDt3+Dj5+/pjki4GInLgFLVke
zyxziHzvs9mdybqWYvxj25wPq28o+lkK2/s6aaPuHpmx2PmPL7RLvR6dhsJ/QgrB
rxlL530xbm+3HcZ4bmBM+hED9gM1DM/tcnea7Jo5An6XMHrB1Ny0GhTXpfNxj+Ix
tljwse69jfmOr8ZJXizj22y9f8YCSds36qGizdAMQhZglDp/dYwatrIg05lEbQkk
y7yrx52kkv2GPmmeGJ1qsdUP8HbbWjlc9mHoHsyMVUZxIaN6mtRbDiFcC0wJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIfKRwIgwnqZJ29mp/Z+bTg6vBjQwHwYDVR0j
BBgwFoAUiPwad3ddLYFXpKKrtd4C29vsRFEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkpMaEpmZTZoa05FSkF4YTZ6OXRNa3ROUHNCdWlZbkVyTHhmaGFjNWZz
aFUvMS84OEZDMUE3Nzc3NUQyRDgxNTdBNEEyQUJCNURFMDJEQkRCRUM0NDUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RkMxQTc3Nzc1RDJEODE1
N0E0QTJBQkI1REUwMkRCREJFQzQ0NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZKTGhKZmU2aGtORUpBeGE2ejl0TWt0TlBzQnVpWW5Fckx4ZmhhYzVmc2hVLzEv
MzEzNzMwMmUzMjMzMzEyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMwMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrneDANBgkqhkiG9w0BAQsFAAOCAQEAeiLZ
qXjX2iTv9n79sTUWWL/8B+bS1Kh1iV1TXQzdjmAUJ7EYVnyQ+nPgCo6yy1LzO6Aa
DqMUqDiTWpj7OlhU5AdYjYYyDfyUHHSMmgn8A2AubwQZuYIQtuAi5r5vwA2VuZZz
fW9NewB+7l2YAJyFDfxKFpOB98MBvib2AJGX2UfVSyEnUrL8rWv+6Krsia1dOTSF
6nMOd7sF+NQhQBAjwRe+1ZLUd3p6nt6xZYj2ACKMypGEJlySUrKV4wGU64ICMA8+
slcI2H6Vag/tL5ndvPR7JsidF1rm9lOpm6q06T0AFh437eTPl/0yK66wQe+5AmdY
MRg8YVAiskN4SQaasA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:25:21 2026 by rpki-client