
$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa
File: 3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa (raw, json)
Hash identifier: 1XdzFkrvfTWgM7nvhSHlkJ5oMGu8jeAVktdLvFWbDU4=
Subject key identifier: 88:B9:C2:CA:62:5B:E1:2B:13:88:C0:C5:B4:71:8E:0C:0D:6A:BE:6A
Certificate issuer: /CN=C6F2F168722913092426893B17EE2FFE4B78B63A
Certificate serial: 4369E0091AB1E5BC68CFBC67766AD67F76C36426
Authority key identifier: C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa
Signing time: Fri 27 Feb 2026 21:17:37 +0000
ROA not before: Fri 27 Feb 2026 21:12:37 +0000
ROA not after: Fri 26 Feb 2027 21:17:37 +0000
asID: 265178
IP address blocks: 167.249.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl
rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 21:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:69:e0:09:1a:b1:e5:bc:68:cf:bc:67:76:6a:d6:7f:76:c3:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F2F168722913092426893B17EE2FFE4B78B63A
Validity
Not Before: Feb 27 21:12:37 2026 GMT
Not After : Feb 26 21:17:37 2027 GMT
Subject: CN=88B9C2CA625BE12B1388C0C5B4718E0C0D6ABE6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:11:c4:0a:32:5d:64:04:ef:0b:fb:43:44:
62:58:a9:a3:63:74:03:11:c8:45:32:4a:74:47:07:
79:89:d8:8a:71:bb:88:d9:43:0c:e8:d6:be:10:67:
27:7b:27:0e:f0:a9:d1:35:5c:40:e9:97:dc:31:66:
f2:db:ac:34:4a:f4:99:22:e4:5b:42:a7:31:31:49:
7a:ba:25:33:60:ef:96:ff:9d:6d:b7:a8:97:55:2c:
e3:53:62:e5:76:53:2f:91:11:0a:63:2f:82:1e:de:
28:96:b7:99:86:c0:bf:5d:13:c6:8d:b8:a7:29:b2:
b9:f6:29:cc:73:58:85:10:93:90:08:32:63:7f:3c:
91:fb:9b:24:79:c6:74:06:95:53:73:33:04:16:26:
e6:8f:f2:84:58:7c:5e:cf:44:d7:a5:d7:00:56:d3:
a3:8c:32:79:e6:43:b5:83:b3:7d:ba:9f:2e:1b:22:
ff:eb:84:dc:d7:27:4c:13:ca:20:69:5a:fe:48:54:
93:17:a0:8f:9d:da:9c:75:50:d5:da:cc:19:68:4e:
94:a3:cc:d0:38:f3:b6:02:2b:d1:f3:0f:58:f1:f6:
33:b1:ae:d3:ab:41:ee:de:d1:d3:f6:16:18:41:0d:
34:94:8e:c0:49:4e:2b:0c:4d:81:83:3e:d9:b9:5e:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:C2:CA:62:5B:E1:2B:13:88:C0:C5:B4:71:8E:0C:0D:6A:BE:6A
X509v3 Authority Key Identifier:
keyid:C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32342d3234203d3e20323635313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:ef:00:2d:0f:ac:78:f0:0b:05:1e:f6:e1:36:9c:d7:1a:a3:
00:7a:0f:ea:a0:b4:2e:18:16:8f:b3:93:0b:53:fd:2e:de:5d:
b9:5f:ed:83:2c:bc:6c:59:92:7d:8a:5e:a1:8b:68:03:c8:da:
6b:91:f8:16:78:6e:68:48:c5:e0:cd:cd:04:27:6b:a0:5a:0e:
ce:ff:8f:5b:be:84:8e:b5:a1:f7:b8:3b:3a:da:c2:d0:5b:08:
98:c7:19:a4:73:b8:2b:b3:78:6e:c0:38:14:41:30:76:c2:d7:
7d:37:4c:ab:59:b2:2e:6f:37:19:5a:d8:c2:cb:54:48:44:4d:
ee:f8:d4:68:85:62:d9:9e:11:67:43:6c:79:83:23:03:a9:26:
0a:40:4b:24:99:a5:d8:d2:9a:7a:b2:2b:df:34:48:f4:65:20:
ef:79:a7:5a:db:50:ad:e5:37:4d:57:6b:62:66:92:6d:b9:09:
d6:f6:44:3e:41:28:9b:9d:68:e8:3c:29:fe:f8:30:81:5f:8a:
0e:6d:10:8d:be:3b:87:c7:bf:ca:8d:5c:c7:0e:40:60:4d:66:
1e:4f:09:9d:e4:86:74:73:9c:f7:20:78:83:ee:b8:f1:d4:1b:
71:0d:3a:82:1c:c7:74:4c:a9:0d:c3:d6:09:6e:bc:f7:a6:46:
1d:68:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:23:00 2026 by rpki-client