
$ rpki-client -vvvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
File: 3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier: 0EUbvystlMssdSlG76g2yLAUrsy4ndurKDzrc1IFnK4=
Subject key identifier: 00:3F:35:22:85:3C:92:AD:E6:F3:45:9C:A8:C9:20:04:15:3D:CF:E5
Certificate issuer: /CN=14FFC8E5B952B4495755D566554505DF141BAB32
Certificate serial: 568A59DDAADF63106CBE8D7810D07441F93AF8B4
Authority key identifier: 14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
Signing time: Wed 16 Sep 2026 18:52:20 +0000
ROA not before: Wed 16 Sep 2026 18:47:20 +0000
ROA not after: Wed 15 Sep 2027 18:52:20 +0000
asID: 265419
IP address blocks: 168.195.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl
rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 16:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8a:59:dd:aa:df:63:10:6c:be:8d:78:10:d0:74:41:f9:3a:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFC8E5B952B4495755D566554505DF141BAB32
Validity
Not Before: Sep 16 18:47:20 2026 GMT
Not After : Sep 15 18:52:20 2027 GMT
Subject: CN=003F3522853C92ADE6F3459CA8C92004153DCFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:8f:88:00:80:7a:cb:94:7f:12:93:0b:f5:
ea:92:8d:97:03:4c:ea:ac:d5:7d:93:6c:44:9d:dd:
a0:16:a0:9c:7e:7f:ec:49:92:dc:6b:14:17:9c:8d:
af:e0:04:72:72:7a:d5:d6:b1:1f:0f:28:2d:c4:a4:
b3:d4:8c:dd:a1:b1:b0:0b:df:4d:c0:ae:c6:91:ef:
3f:ad:bb:be:d9:87:ad:2f:3b:30:c6:37:fd:a3:01:
33:4f:ff:56:ba:55:d3:13:c7:5f:1e:e0:d7:6f:e3:
a5:cb:74:dc:37:83:89:63:f5:80:35:95:0f:49:80:
27:dc:70:30:e5:cc:bd:9a:82:19:06:5a:4c:7f:66:
5d:ae:5b:aa:1e:db:58:d9:de:0e:50:e6:ec:f0:2b:
23:b6:5f:51:6c:77:1c:ec:6c:4c:c1:0a:81:34:08:
a5:f6:b9:66:06:05:68:5e:8f:e2:7e:39:b6:70:d4:
29:fe:08:3d:17:6a:6b:6c:fa:38:65:dd:f7:73:4b:
95:e1:4a:21:ac:25:7b:0f:7c:6c:69:1e:84:fa:ae:
8c:0a:04:10:94:5d:36:e9:f7:b4:c2:c5:22:39:21:
00:08:18:5b:89:a5:9b:35:39:18:79:23:ba:20:7b:
68:18:64:7e:0f:28:cc:46:30:b5:d6:9a:2f:4d:2b:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:35:22:85:3C:92:AD:E6:F3:45:9C:A8:C9:20:04:15:3D:CF:E5
X509v3 Authority Key Identifier:
keyid:14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:99:e6:c0:12:96:a7:7b:46:61:f9:f7:98:c3:bd:c2:23:b3:
f1:38:15:49:48:5e:70:62:ba:a6:61:9c:54:66:df:0a:13:3b:
f8:05:31:03:7b:79:d7:6a:04:63:fd:aa:6c:79:42:24:27:c0:
39:a6:aa:76:5f:33:82:1a:d0:61:04:3b:08:e9:53:8a:b4:42:
6b:aa:af:30:01:08:42:df:74:54:c3:db:0a:44:ce:e7:a7:b3:
c4:7a:c9:a5:a2:93:17:ba:37:9c:44:98:3c:53:81:b0:c9:9c:
dc:11:f7:6c:68:38:d9:e7:da:f3:84:7e:87:73:2f:5d:c3:e2:
ca:cf:89:24:31:db:2b:27:f6:40:66:ca:c2:7a:29:50:35:ca:
e3:c9:18:8f:c1:ef:b5:b6:6b:45:12:ee:7c:8a:47:b6:ef:1d:
e2:05:33:00:7d:b7:45:3f:16:8d:b7:92:a5:24:0e:69:6c:21:
6d:cb:e1:7f:4f:18:c0:0f:b9:d3:27:99:51:94:df:fd:c5:2e:
08:fe:33:f3:fd:3c:7f:8b:8e:f0:41:88:d1:8a:63:a3:02:c1:
53:de:c3:1a:84:b2:31:e7:e8:f1:d7:bd:37:67:38:39:86:88:
c3:46:8c:28:d1:27:54:2d:66:3f:a3:4e:40:35:3d:7c:7b:7f:
1a:3a:65:b7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVopZ3arfYxBsvo14ENB0Qfk6+LQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkM4RTVCOTUyQjQ0OTU3NTVENTY2NTU0NTA1REYx
NDFCQUIzMjAeFw0yNjA5MTYxODQ3MjBaFw0yNzA5MTUxODUyMjBaMDMxMTAvBgNV
BAMTKDAwM0YzNTIyODUzQzkyQURFNkYzNDU5Q0E4QzkyMDA0MTUzRENGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqY+IAIB6y5R/EpML9eqSjZcD
TOqs1X2TbESd3aAWoJx+f+xJktxrFBecja/gBHJyetXWsR8PKC3EpLPUjN2hsbAL
303ArsaR7z+tu77Zh60vOzDGN/2jATNP/1a6VdMTx18e4Ndv46XLdNw3g4lj9YA1
lQ9JgCfccDDlzL2aghkGWkx/Zl2uW6oe21jZ3g5Q5uzwKyO2X1FsdxzsbEzBCoE0
CKX2uWYGBWhej+J+ObZw1Cn+CD0Xamts+jhl3fdzS5XhSiGsJXsPfGxpHoT6rowK
BBCUXTbp97TCxSI5IQAIGFuJpZs1ORh5I7oge2gYZH4PKMxGMLXWmi9NK35jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAD81IoU8kq3m80WcqMkgBBU9z+UwHwYDVR0j
BBgwFoAUFP/I5blStElXVdVmVUUF3xQbqzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry
OGMvMC8xNEZGQzhFNUI5NTJCNDQ5NTc1NUQ1NjY1NTQ1MDVERjE0MUJBQjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RkZDOEU1Qjk1MkI0NDk1
NzU1RDU2NjU1NDUwNURGMTQxQkFCMzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowxUwDQYJKoZIhvcNAQELBQADggEBAB+Z5sAS
lqd7RmH595jDvcIjs/E4FUlIXnBiuqZhnFRm3woTO/gFMQN7eddqBGP9qmx5QiQn
wDmmqnZfM4Ia0GEEOwjpU4q0QmuqrzABCELfdFTD2wpEzuens8R6yaWikxe6N5xE
mDxTgbDJnNwR92xoONnn2vOEfodzL13D4srPiSQx2ysn9kBmysJ6KVA1yuPJGI/B
77W2a0US7nyKR7bvHeIFMwB9t0U/Fo23kqUkDmlsIW3L4X9PGMAPudMnmVGU3/3F
Lgj+M/P9PH+LjvBBiNGKY6MCwVPewxqEsjHn6PHXvTdnODmGiMNGjCjRJ1QtZj+j
TkA1PXx7fxo6Zbc=
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:56:29 2026 by rpki-client