
$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
File: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (raw, json)
Hash identifier: A7XG+LPairTyQWGSOqGGz7Xt+NMlyl7JBukuSFX5SkA=
Subject key identifier: 2B:CC:06:14:73:98:A5:BA:6D:80:5B:2F:E1:30:47:27:17:FD:FC:2F
Certificate issuer: /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Certificate serial: 4A744D135206AB9813B70E06D94661894606728F
Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
Signing time: Fri 20 Feb 2026 11:56:52 +0000
ROA not before: Fri 20 Feb 2026 11:51:52 +0000
ROA not after: Fri 19 Feb 2027 11:56:52 +0000
asID: 265385
IP address blocks: 170.254.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 07:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:74:4d:13:52:06:ab:98:13:b7:0e:06:d9:46:61:89:46:06:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Validity
Not Before: Feb 20 11:51:52 2026 GMT
Not After : Feb 19 11:56:52 2027 GMT
Subject: CN=2BCC06147398A5BA6D805B2FE130472717FDFC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:4c:85:13:ef:9c:1e:9d:33:29:8b:0c:db:
74:b4:e0:61:f7:fb:95:c8:46:25:7f:50:f4:73:08:
d1:3f:b2:22:2f:da:7f:34:2a:00:3e:f2:d8:58:f7:
20:0f:ab:c3:ba:27:06:2d:81:4b:40:d8:5e:93:d0:
ce:07:c6:b3:49:6b:48:02:d2:7a:99:33:c9:69:ad:
8c:cf:74:ca:fb:4d:42:d0:28:57:c0:fb:b5:80:b8:
72:a6:db:1b:1d:5e:c4:01:48:a9:e2:ea:2a:90:f0:
b7:4b:f6:77:b3:72:54:b2:4a:e4:eb:55:6f:34:87:
5c:2a:2d:4f:11:01:9e:16:41:ef:c2:c2:0c:09:3e:
89:94:f8:a1:c9:fb:80:5e:c4:95:e4:ce:0a:9e:cd:
25:d6:71:c9:9d:25:6b:e2:5b:1c:d9:7f:34:8e:1c:
f2:ae:8d:6a:f9:04:6a:01:d6:13:31:e5:8e:cd:7b:
87:87:a1:c3:60:9b:eb:53:73:62:70:1e:13:a3:92:
c3:be:ed:6b:77:41:b1:23:ba:b8:90:49:9e:04:e0:
a7:fc:c5:5b:2d:91:77:6d:4d:5e:ce:cd:5d:52:42:
4f:39:24:28:0e:96:35:44:34:35:92:02:d2:c0:81:
45:2f:e6:a9:1d:c7:8f:df:ab:64:f3:c9:56:18:a7:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CC:06:14:73:98:A5:BA:6D:80:5B:2F:E1:30:47:27:17:FD:FC:2F
X509v3 Authority Key Identifier:
keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.248.0/22
Signature Algorithm: sha256WithRSAEncryption
13:4c:8f:c1:6f:c4:a4:4c:43:86:05:19:04:95:5c:30:27:15:
29:b1:40:dc:ae:dd:16:4a:07:25:d3:59:5a:ca:4d:44:0a:e4:
d6:7f:f1:2b:78:87:a1:71:d2:a7:71:d4:8d:4f:db:25:02:be:
f1:09:a8:86:8e:87:35:11:00:a7:13:40:e2:ed:f9:18:f1:da:
70:40:6f:40:86:1f:81:3c:db:9b:e1:a6:a7:4a:46:1a:fd:60:
44:40:b9:d0:57:99:9b:71:a1:67:ea:f2:54:e2:bc:12:ea:5a:
43:cd:77:1c:d3:99:5f:eb:41:da:dc:ed:b0:44:85:62:b2:02:
c1:f2:c6:45:1d:53:bf:8b:15:ed:1d:f0:de:8b:c3:0b:7c:5a:
4c:95:97:be:bd:b2:ba:ad:27:b6:cc:c0:9a:79:f6:34:06:86:
45:fd:1e:5f:85:20:f9:04:37:4f:83:59:e1:dc:d4:28:0f:99:
b4:15:c9:9b:30:6a:0d:ef:0e:da:0f:4d:10:e5:9c:b0:a7:ff:
ed:71:a7:c3:be:9b:de:a7:3b:0b:87:01:12:0b:f1:3f:e7:86:
e5:7f:85:db:43:25:dd:f4:3f:8b:0f:d5:dd:be:7c:81:48:58:
7a:35:0f:7d:c6:f8:d3:30:8c:31:8a:9a:ca:7d:c9:e9:f5:e1:
37:73:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:39:07 2026 by rpki-client