
$ rpki-client -vvvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
File: 3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa (raw, json)
Hash identifier: xyBiVf4dFOVmxX75/4YSTeJ1rdXtrXGR0vGtbNL+L00=
Subject key identifier: 02:5F:97:2C:A1:5C:90:9C:05:DE:9E:37:CC:26:83:32:F1:8B:46:5C
Certificate issuer: /CN=8A68D9494B4B3C3F595CA7A24DB830D6489ED07F
Certificate serial: 4A933CA70DB6911F88D08DDC04CCF27336AE146B
Authority key identifier: 8A:68:D9:49:4B:4B:3C:3F:59:5C:A7:A2:4D:B8:30:D6:48:9E:D0:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
Signing time: Sat 10 Oct 2026 13:45:18 +0000
ROA not before: Sat 10 Oct 2026 13:40:18 +0000
ROA not after: Sat 09 Oct 2027 13:45:18 +0000
asID: 263049
IP address blocks: 170.84.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.crl
rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 01:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:93:3c:a7:0d:b6:91:1f:88:d0:8d:dc:04:cc:f2:73:36:ae:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A68D9494B4B3C3F595CA7A24DB830D6489ED07F
Validity
Not Before: Oct 10 13:40:18 2026 GMT
Not After : Oct 9 13:45:18 2027 GMT
Subject: CN=025F972CA15C909C05DE9E37CC268332F18B465C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:32:cd:46:0f:41:18:0e:0d:26:07:db:38:
de:11:b7:21:14:58:78:4a:8d:23:84:98:b1:bc:bf:
1e:b3:02:01:ed:94:aa:01:c8:af:92:d3:24:b7:8f:
72:55:cb:0b:9a:09:c2:b0:be:ba:e2:e2:3a:28:e6:
52:7f:ee:8c:b8:7c:41:cc:83:5f:29:8d:57:30:17:
cf:c6:ae:aa:bf:d6:76:3a:fa:c6:78:72:85:36:76:
76:69:98:fa:99:d0:ab:26:22:8a:ce:fd:d9:64:5b:
d1:8d:41:9e:dd:f0:b6:81:a3:5d:4f:eb:21:92:5f:
79:c9:1d:7c:08:9c:d8:b2:f6:06:0a:cb:63:37:ab:
9c:f0:d6:07:77:af:35:f6:f7:71:73:d8:61:5a:aa:
14:84:ba:4f:fa:68:3e:83:97:41:d5:d6:1c:15:2f:
6f:c6:d2:8a:71:58:51:59:1c:f3:06:93:a7:cd:e7:
9a:6e:df:9f:45:1e:1b:59:b7:a8:71:98:2f:95:7d:
95:99:db:15:ba:02:c1:0e:66:1f:09:0d:70:c5:a1:
81:8e:6f:05:c9:9d:18:dc:fb:d6:4a:4c:56:c7:67:
fc:af:e0:7a:1f:cc:d6:0c:dd:a1:70:69:87:90:74:
bd:ca:80:84:ae:87:95:9f:b5:f0:67:48:4f:81:be:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:97:2C:A1:5C:90:9C:05:DE:9E:37:CC:26:83:32:F1:8B:46:5C
X509v3 Authority Key Identifier:
keyid:8A:68:D9:49:4B:4B:3C:3F:59:5C:A7:A2:4D:B8:30:D6:48:9E:D0:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A68D9494B4B3C3F595CA7A24DB830D6489ED07F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:21:29:56:84:19:aa:d9:5c:95:b0:28:34:7f:b9:d6:bb:15:
69:e9:b1:84:a0:b0:5b:2d:27:d3:c3:dd:22:3c:06:59:9b:f0:
cc:4d:19:fb:14:02:ea:9b:be:15:fc:fc:0c:e4:0a:e1:45:cf:
ca:18:f4:25:aa:a7:60:48:7e:cc:34:b4:7c:f6:e0:0b:82:fd:
ae:07:3f:a3:d7:c2:7b:9d:16:4e:e6:f5:d2:87:73:76:6a:d9:
9b:5e:13:53:9e:0e:1d:e1:13:f2:c0:8f:a0:9b:c6:fc:c3:c2:
c8:02:4b:ac:5c:8d:7e:47:80:af:1e:98:c5:73:c5:7e:57:21:
90:06:a1:71:25:60:b7:2a:d6:66:79:63:66:ba:6e:f0:9f:34:
1a:b8:b6:b8:c3:7f:9f:87:12:64:d5:a9:31:75:ac:19:82:43:
14:4b:a1:90:cf:26:b4:e9:44:cf:27:50:be:1f:9d:26:94:8d:
46:61:82:8a:b6:56:f7:f7:ef:be:82:36:8b:42:c3:14:0e:1b:
dc:e0:31:81:c5:54:ab:99:95:7a:33:df:e0:ac:d3:eb:c6:f5:
4b:e3:40:0c:94:2a:16:d9:97:11:4e:d7:fc:3e:56:66:af:e5:
c6:3e:9a:e2:80:f4:57:05:5b:11:0b:84:69:3b:4b:a7:4d:81:
c2:31:70:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSpM8pw22kR+I0I3cBMzyczauFGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2OEQ5NDk0QjRCM0MzRjU5NUNBN0EyNERCODMwRDY0
ODlFRDA3RjAeFw0yNjEwMTAxMzQwMThaFw0yNzEwMDkxMzQ1MThaMDMxMTAvBgNV
BAMTKDAyNUY5NzJDQTE1QzkwOUMwNURFOUUzN0NDMjY4MzMyRjE4QjQ2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AzLNRg9BGA4NJgfbON4RtyEU
WHhKjSOEmLG8vx6zAgHtlKoByK+S0yS3j3JVywuaCcKwvrri4joo5lJ/7oy4fEHM
g18pjVcwF8/Grqq/1nY6+sZ4coU2dnZpmPqZ0KsmIorO/dlkW9GNQZ7d8LaBo11P
6yGSX3nJHXwInNiy9gYKy2M3q5zw1gd3rzX293Fz2GFaqhSEuk/6aD6Dl0HV1hwV
L2/G0opxWFFZHPMGk6fN55pu359FHhtZt6hxmC+VfZWZ2xW6AsEOZh8JDXDFoYGO
bwXJnRjc+9ZKTFbHZ/yv4HofzNYM3aFwaYeQdL3KgISuh5WftfBnSE+BvmKxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAl+XLKFckJwF3p43zCaDMvGLRlwwHwYDVR0j
BBgwFoAUimjZSUtLPD9ZXKeiTbgw1kie0H8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMC84QTY4RDk0OTRCNEIzQzNGNTk1Q0E3QTI0REI4MzBENjQ4OUVEMDdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNjhEOTQ5NEI0QjNDM0Y1
OTVDQTdBMjREQjgzMEQ2NDg5RUQwN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzAv
MzEzNzMwMmUzODM0MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVHAwDQYJKoZIhvcNAQELBQADggEBAE4hKVaE
GarZXJWwKDR/uda7FWnpsYSgsFstJ9PD3SI8Blmb8MxNGfsUAuqbvhX8/AzkCuFF
z8oY9CWqp2BIfsw0tHz24AuC/a4HP6PXwnudFk7m9dKHc3Zq2ZteE1OeDh3hE/LA
j6CbxvzDwsgCS6xcjX5HgK8emMVzxX5XIZAGoXElYLcq1mZ5Y2a6bvCfNBq4trjD
f5+HEmTVqTF1rBmCQxRLoZDPJrTpRM8nUL4fnSaUjUZhgoq2Vvf3776CNotCwxQO
G9zgMYHFVKuZlXoz3+Cs0+vG9UvjQAyUKhbZlxFO1/w+Vmav5cY+muKA9FcFWxEL
hGk7S6dNgcIxcN8=
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:19:08 2026 by rpki-client