
$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
File: 3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (raw, json)
Hash identifier: 7YfExPXq7Ye4itBMQCeqWg1+1vl2fApxYX9BrxELw9w=
Subject key identifier: 6C:A3:3E:A0:E5:6C:D0:6F:5E:60:95:2D:DA:57:63:CF:B7:33:D1:01
Certificate issuer: /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial: 62C65DE68A670E4A5D639F072472E01228F62755
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
Signing time: Sat 04 Apr 2026 17:01:26 +0000
ROA not before: Sat 04 Apr 2026 16:56:26 +0000
ROA not after: Sat 03 Apr 2027 17:01:26 +0000
asID: 270815
IP address blocks: 200.229.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 11:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c6:5d:e6:8a:67:0e:4a:5d:63:9f:07:24:72:e0:12:28:f6:27:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Validity
Not Before: Apr 4 16:56:26 2026 GMT
Not After : Apr 3 17:01:26 2027 GMT
Subject: CN=6CA33EA0E56CD06F5E60952DDA5763CFB733D101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:f8:4b:7a:f9:57:33:c6:48:0f:8c:21:da:
e4:e4:6d:77:17:61:ee:9e:05:64:43:2a:3c:5b:87:
1e:12:bd:a5:ce:24:fc:f7:ed:e3:a1:96:64:88:68:
0f:35:da:1d:90:4f:02:16:54:4e:c3:be:1f:4f:e9:
09:6a:ee:e0:d1:31:ba:17:63:37:a7:2d:87:f7:5c:
54:6f:38:b3:72:dc:83:2a:b0:61:1e:90:68:02:28:
1e:db:f3:31:79:d8:a8:99:95:f9:0f:d8:4f:79:d1:
96:77:7b:49:73:93:27:75:84:5b:a1:d7:4a:80:bc:
15:72:da:51:6c:74:1e:37:3c:c7:63:c6:47:0f:81:
c4:be:ad:b7:e7:0b:a0:81:e9:74:bf:16:ea:dc:d7:
12:e4:b3:93:f5:99:4e:da:b7:e5:c9:cb:32:ba:0a:
f0:d7:42:07:4b:8f:c9:0e:59:d3:75:d1:6b:74:b2:
74:a3:d3:67:94:64:59:03:3f:44:08:6b:09:5e:de:
ee:cf:c8:ac:6f:7f:e5:83:d7:98:a2:ce:9d:39:56:
e7:90:54:50:4d:60:34:cd:45:fe:f8:c8:99:04:2c:
da:b6:7a:cd:b2:f1:87:f4:0b:f5:c6:3f:87:38:91:
fe:5b:8b:1f:c6:03:0a:2f:1d:fd:12:e7:17:c5:da:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:3E:A0:E5:6C:D0:6F:5E:60:95:2D:DA:57:63:CF:B7:33:D1:01
X509v3 Authority Key Identifier:
keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.244.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:b0:50:0e:ca:e0:f9:1a:19:8f:05:a6:63:9f:ce:48:d5:aa:
e7:d1:d3:6f:c7:83:69:22:9f:39:e4:a8:74:90:3d:db:d4:1d:
d8:ab:1c:66:7f:3f:35:b9:ef:3e:04:0f:d6:d7:31:06:12:cb:
7c:9a:94:17:c2:4d:f5:41:91:ba:b8:77:43:2e:8d:e7:b7:8c:
bf:a7:69:b5:62:6d:17:90:f2:22:f0:94:5a:f6:ad:8b:f2:f6:
26:33:fd:d8:52:cb:19:b6:74:b0:06:9a:c6:f2:8d:a9:a5:7f:
02:2b:c2:56:f2:13:59:ec:fe:8d:c5:5c:39:c0:e1:6f:97:71:
ab:98:47:ff:dd:16:44:db:33:04:ab:ea:5f:96:d8:51:14:2a:
79:d1:3a:e9:99:5d:72:66:19:01:b8:0e:d6:80:e7:41:0d:aa:
22:a8:b4:02:9f:d5:8c:e4:38:b2:b4:82:22:23:82:4f:c1:ec:
3a:b5:99:68:46:75:ce:bc:63:4c:7a:77:37:f2:42:91:89:5b:
37:2d:b3:b0:5d:3e:4f:97:90:03:27:b1:1b:b0:ab:ee:1b:9f:
b0:cb:64:d1:a8:9d:5b:1a:54:9e:0b:33:86:5d:72:81:d7:98:
99:c2:22:78:e1:2a:47:52:e2:57:a5:6e:3c:7e:eb:7a:4b:67:
a9:2c:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:00 2026 by rpki-client