
$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa
File: 3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa (raw, json)
Hash identifier: Qr29lJi1CpN3xupclEaWtBOCJ/+kCgZEfYdhQngUtJo=
Subject key identifier: 6E:F0:86:B4:04:C6:F0:28:09:B9:2B:EB:77:0A:DA:D7:34:6D:7E:32
Certificate issuer: /CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
Certificate serial: 516C67DB43301664DF86E621F910A01B9C914A74
Authority key identifier: D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa
Signing time: Tue 21 Oct 2025 17:53:02 +0000
ROA not before: Tue 21 Oct 2025 17:48:02 +0000
ROA not after: Tue 20 Oct 2026 17:53:02 +0000
asID: 264356
IP address blocks: 131.108.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl
rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:6c:67:db:43:30:16:64:df:86:e6:21:f9:10:a0:1b:9c:91:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D92133A080AA62F6B797FAD0AB6A6FD3074170E1
Validity
Not Before: Oct 21 17:48:02 2025 GMT
Not After : Oct 20 17:53:02 2026 GMT
Subject: CN=6EF086B404C6F02809B92BEB770ADAD7346D7E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:97:38:63:04:f2:d2:46:96:c8:43:63:0c:
f0:12:2c:9a:d7:85:fb:6a:e6:13:f9:ee:4b:d2:f4:
79:01:79:71:05:af:23:6c:f7:43:f8:ab:e4:67:91:
f2:cc:0b:d7:df:93:31:a6:fd:d9:22:7f:c2:5a:88:
98:5c:fd:ce:12:4c:cd:4b:bb:0d:f6:75:5d:a8:e0:
d9:6a:11:54:d9:22:dd:10:cd:52:58:49:2b:c3:06:
b9:b2:b3:f5:ef:57:d7:a6:57:e3:de:ca:3b:16:00:
7a:9a:2d:08:72:14:41:bc:7c:d3:46:09:8c:df:0a:
21:f1:0a:84:6b:32:b2:8f:92:b3:0f:d2:1d:c5:9a:
7f:9f:41:c1:82:fa:d9:72:61:e6:d9:cf:7d:26:11:
d0:d0:6c:4f:c3:b0:9c:a6:c0:ff:c3:62:03:ff:70:
9e:07:e6:49:24:a4:36:85:4a:00:90:ea:92:f9:bd:
86:b0:58:db:f0:e8:b7:e0:5b:4a:80:05:36:80:59:
f1:cc:db:c7:f7:21:22:40:55:0c:c2:16:4d:52:90:
62:ff:e9:e0:58:25:29:b1:29:fb:0b:58:c0:53:a3:
fb:92:19:28:1f:5e:93:11:e0:3d:8f:ed:1f:fb:eb:
41:41:b3:66:1b:20:17:0c:02:fc:ef:99:9a:20:32:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:86:B4:04:C6:F0:28:09:B9:2B:EB:77:0A:DA:D7:34:6D:7E:32
X509v3 Authority Key Identifier:
keyid:D9:21:33:A0:80:AA:62:F6:B7:97:FA:D0:AB:6A:6F:D3:07:41:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D92133A080AA62F6B797FAD0AB6A6FD3074170E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234392e302f32342d3234203d3e20323634333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.249.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0e:f1:79:f7:85:23:6d:4a:70:c2:46:e1:95:5f:3b:74:2b:
4a:2a:04:a5:b0:a7:30:12:18:f4:0a:c3:13:fa:3a:76:34:79:
84:7e:5f:57:2d:44:2a:a9:4b:2d:1c:11:64:0e:a7:e6:ff:5a:
ba:c9:31:70:d7:6e:8a:14:72:ca:dc:53:61:eb:06:b9:73:69:
0f:d5:94:3d:63:9f:8b:69:bc:32:a3:c8:55:fa:be:10:00:14:
6c:ee:d0:99:9e:56:17:66:1a:99:78:c5:b5:7d:88:23:37:61:
cb:bf:d1:a8:3f:b1:17:33:08:ab:87:0a:65:8a:ee:de:09:15:
c5:a9:06:72:50:7b:27:4d:8a:04:d9:30:01:4a:03:d9:bc:2c:
38:b4:d1:c6:fb:4c:a3:fd:7d:a4:7b:33:ed:e4:98:0b:f1:c3:
c2:e2:db:d8:0b:12:09:0f:d5:3e:07:ef:dc:14:32:2b:ff:da:
de:39:23:bc:f9:20:40:b7:45:77:bf:e5:02:db:e0:44:80:0e:
1d:05:0d:85:17:36:c8:e0:42:02:25:69:25:78:fb:db:27:c4:
bc:74:4b:5c:2c:e1:e4:a8:b3:20:22:3a:30:c6:75:e1:ac:b2:
47:7e:a3:ef:fb:4b:c0:6d:00:f6:9d:5a:04:ca:94:23:d4:b3:
26:3d:11:3e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUWxn20MwFmTfhuYh+RCgG5yRSnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkyMTMzQTA4MEFBNjJGNkI3OTdGQUQwQUI2QTZGRDMw
NzQxNzBFMTAeFw0yNTEwMjExNzQ4MDJaFw0yNjEwMjAxNzUzMDJaMDMxMTAvBgNV
BAMTKDZFRjA4NkI0MDRDNkYwMjgwOUI5MkJFQjc3MEFEQUQ3MzQ2RDdFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YZc4YwTy0kaWyENjDPASLJrX
hftq5hP57kvS9HkBeXEFryNs90P4q+RnkfLMC9ffkzGm/dkif8JaiJhc/c4STM1L
uw32dV2o4NlqEVTZIt0QzVJYSSvDBrmys/XvV9emV+PeyjsWAHqaLQhyFEG8fNNG
CYzfCiHxCoRrMrKPkrMP0h3Fmn+fQcGC+tlyYebZz30mEdDQbE/DsJymwP/DYgP/
cJ4H5kkkpDaFSgCQ6pL5vYawWNvw6LfgW0qABTaAWfHM28f3ISJAVQzCFk1SkGL/
6eBYJSmxKfsLWMBTo/uSGSgfXpMR4D2P7R/760FBs2YbIBcMAvzvmZogMks3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbvCGtATG8CgJuSvrdwra1zRtfjIwHwYDVR0j
BBgwFoAU2SEzoICqYva3l/rQq2pv0wdBcOEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QRnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBL
LzAvRDkyMTMzQTA4MEFBNjJGNkI3OTdGQUQwQUI2QTZGRDMwNzQxNzBFMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EOTIxMzNBMDgwQUE2MkY2Qjc5
N0ZBRDBBQjZBNkZEMzA3NDE3MEUxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Q
RnZUVWhCQlZ3aTQyRm1qMTFlRUhUWjFUS0FEdGdtNFozQThOR2hyRVBLLzAvMzEz
MzMxMmUzMTMwMzgyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NDMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAINs+TANBgkqhkiG9w0BAQsFAAOCAQEAkg7xefeF
I21KcMJG4ZVfO3QrSioEpbCnMBIY9ArDE/o6djR5hH5fVy1EKqlLLRwRZA6n5v9a
uskxcNduihRyytxTYesGuXNpD9WUPWOfi2m8MqPIVfq+EAAUbO7QmZ5WF2YamXjF
tX2IIzdhy7/RqD+xFzMIq4cKZYru3gkVxakGclB7J02KBNkwAUoD2bwsOLTRxvtM
o/19pHsz7eSYC/HDwuLb2AsSCQ/VPgfv3BQyK//a3jkjvPkgQLdFd7/lAtvgRIAO
HQUNhRc2yOBCAiVpJXj72yfEvHRLXCzh5KizICI6MMZ14ayyR36j7/tLwG0A9p1a
BMqUI9SzJj0RPg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:35:45 2025 by rpki-client