
$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa
File: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (raw, json)
Hash identifier: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=
Subject key identifier: CD:2E:A8:96:D2:B3:25:49:AC:B3:A5:AD:72:1F:B2:5A:39:25:E8:27
Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Certificate serial: 0D2FED826DC190A0A81C1A052BBE62831C75383E
Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa
Signing time: Wed 11 Jun 2025 17:26:23 +0000
ROA not before: Wed 11 Jun 2025 17:21:23 +0000
ROA not after: Wed 10 Jun 2026 17:26:23 +0000
asID: 263140
IP address blocks: 168.205.144.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2f:ed:82:6d:c1:90:a0:a8:1c:1a:05:2b:be:62:83:1c:75:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Validity
Not Before: Jun 11 17:21:23 2025 GMT
Not After : Jun 10 17:26:23 2026 GMT
Subject: CN=CD2EA896D2B32549ACB3A5AD721FB25A3925E827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:8c:dc:76:30:df:98:a7:54:57:54:d3:10:
84:b1:77:00:f6:a0:bd:e8:ad:5d:82:05:60:46:4a:
42:08:c1:a6:c9:d1:b7:e1:a9:6a:6f:70:62:5f:d7:
c7:25:b3:98:09:c8:9e:8f:f9:eb:75:ae:84:c9:2c:
7c:63:81:ed:2a:57:e4:84:d9:b6:2e:4f:70:d7:99:
b7:9b:f8:83:1e:7a:69:f4:15:88:63:1d:03:56:21:
61:e4:0c:db:9d:24:f1:46:ac:1d:0c:aa:e7:64:cc:
58:80:31:35:c8:7d:54:15:a3:e7:ca:8b:ad:66:9d:
97:4e:8e:90:50:67:79:71:db:d1:1b:5b:3a:11:8c:
04:07:03:0a:8e:83:4e:11:63:0c:51:48:66:88:e4:
f5:0a:3a:f2:a6:3d:e5:7b:ca:8d:56:55:93:42:be:
a6:cd:fb:ed:f4:6c:b6:ca:cc:0f:33:c9:0a:e5:25:
36:b1:2d:74:18:e9:63:36:3c:7b:55:f0:4e:15:5d:
5f:fc:8f:d0:b9:0e:0b:93:81:5e:6b:cc:3c:82:58:
90:03:ff:b2:66:8f:4e:a4:c3:e5:6a:f2:3f:ca:a6:
04:1e:62:83:9c:5c:d7:b8:43:bf:03:1d:08:9e:27:
04:69:a0:27:7c:b0:2d:24:ff:50:11:3d:07:1d:45:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:A8:96:D2:B3:25:49:AC:B3:A5:AD:72:1F:B2:5A:39:25:E8:27
X509v3 Authority Key Identifier:
keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:eb:72:69:ff:f5:37:ee:8f:9f:90:33:b7:97:28:52:89:ab:
78:2c:7e:f2:81:17:8c:6b:bb:66:9f:cf:17:07:17:df:30:23:
43:ff:c9:cb:2c:c6:04:94:90:c3:03:a9:dc:b3:74:b2:2b:d4:
24:30:a7:bb:fd:82:72:d0:99:2a:73:ac:9f:ec:79:4c:9c:4e:
2e:e3:41:71:9e:fe:b6:48:b7:fd:11:a5:2b:82:7c:52:13:dd:
f0:bb:8f:9a:82:80:0e:07:26:88:5c:83:6e:cc:76:d7:0f:3b:
45:00:02:39:ff:6e:55:ca:e8:70:7a:c9:20:85:a5:22:70:63:
e7:10:22:ca:b0:60:cd:70:ea:a9:20:78:08:a7:6e:16:e4:10:
64:5a:bf:21:ff:8a:62:9e:65:41:38:e9:8e:67:eb:9f:e7:bc:
13:d9:91:70:ad:da:8c:5d:43:32:d2:78:30:bd:9b:86:13:e4:
30:c7:fc:65:d0:1c:16:3b:d4:e8:64:42:bb:95:13:73:ad:8f:
a3:5c:c5:b1:0e:5b:7b:7d:6f:e9:ff:23:41:6a:1b:15:46:5b:
ad:e3:43:1d:0e:af:43:77:70:a3:0f:9c:b3:50:a6:e4:4d:ff:
6c:3f:76:d4:ef:39:7b:f2:c1:ec:0b:28:b3:cd:75:3a:89:a2:
c1:07:38:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDS/tgm3BkKCoHBoFK75igxx1OD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG
OEE2MjgxMDAeFw0yNTA2MTExNzIxMjNaFw0yNjA2MTAxNzI2MjNaMDMxMTAvBgNV
BAMTKENEMkVBODk2RDJCMzI1NDlBQ0IzQTVBRDcyMUZCMjVBMzkyNUU4MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEYzcdjDfmKdUV1TTEISxdwD2
oL3orV2CBWBGSkIIwabJ0bfhqWpvcGJf18cls5gJyJ6P+et1roTJLHxjge0qV+SE
2bYuT3DXmbeb+IMeemn0FYhjHQNWIWHkDNudJPFGrB0MqudkzFiAMTXIfVQVo+fK
i61mnZdOjpBQZ3lx29EbWzoRjAQHAwqOg04RYwxRSGaI5PUKOvKmPeV7yo1WVZNC
vqbN++30bLbKzA8zyQrlJTaxLXQY6WM2PHtV8E4VXV/8j9C5DguTgV5rzDyCWJAD
/7Jmj06kw+Vq8j/KpgQeYoOcXNe4Q78DHQieJwRpoCd8sC0k/1ARPQcdRaVxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzS6oltKzJUmss6Wtch+yWjkl6CcwHwYDVR0j
BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0
QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG
Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6VlIyOW5oa0ZBcmptM2JvRzZ4ckpDVlBRMzZiNURhZVZzeW40NFNadEFCLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMxMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNkDANBgkqhkiG9w0BAQsFAAOCAQEAXuty
af/1N+6Pn5Azt5coUomreCx+8oEXjGu7Zp/PFwcX3zAjQ//JyyzGBJSQwwOp3LN0
sivUJDCnu/2CctCZKnOsn+x5TJxOLuNBcZ7+tki3/RGlK4J8UhPd8LuPmoKADgcm
iFyDbsx21w87RQACOf9uVcrocHrJIIWlInBj5xAiyrBgzXDqqSB4CKduFuQQZFq/
If+KYp5lQTjpjmfrn+e8E9mRcK3ajF1DMtJ4ML2bhhPkMMf8ZdAcFjvU6GRCu5UT
c62Po1zFsQ5be31v6f8jQWobFUZbreNDHQ6vQ3dwow+cs1Cm5E3/bD921O85e/LB
7Asos811OomiwQc4iw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:24 2025 by rpki-client