
$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3133312e302f32342d3234203d3e20323635313738.roa
File: 3136372e3234392e3133312e302f32342d3234203d3e20323635313738.roa (raw, json)
Hash identifier: 6W+t2U9iGPjmBOASSKwhdLONTzEzrR0Y94s57Wd4YCE=
Subject key identifier: 22:FA:D1:B5:43:64:42:98:F0:BF:8D:59:6C:50:C5:64:F3:1B:4B:A9
Certificate issuer: /CN=C6F2F168722913092426893B17EE2FFE4B78B63A
Certificate serial: 6F444E068BF436899CEAE7BD88E0BE5879181ACD
Authority key identifier: C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3133312e302f32342d3234203d3e20323635313738.roa
Signing time: Fri 27 Feb 2026 21:18:22 +0000
ROA not before: Fri 27 Feb 2026 21:13:22 +0000
ROA not after: Fri 26 Feb 2027 21:18:22 +0000
asID: 265178
IP address blocks: 167.249.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl
rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 21:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:44:4e:06:8b:f4:36:89:9c:ea:e7:bd:88:e0:be:58:79:18:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F2F168722913092426893B17EE2FFE4B78B63A
Validity
Not Before: Feb 27 21:13:22 2026 GMT
Not After : Feb 26 21:18:22 2027 GMT
Subject: CN=22FAD1B543644298F0BF8D596C50C564F31B4BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:d6:c9:49:5c:b7:3a:0d:92:b1:8b:23:84:
3f:64:06:dc:d9:98:5c:69:f0:f4:dc:71:eb:4c:bb:
3c:d0:19:84:63:ff:c1:e6:a3:3b:1b:2f:08:13:a8:
6c:e9:ee:ad:8c:64:93:60:fb:ee:83:e0:f2:b6:49:
d8:40:cf:23:3a:14:89:25:f7:54:1c:8f:1c:cb:fd:
21:8b:b9:44:2c:85:2b:e8:e8:eb:ae:4f:a1:ed:80:
c5:f8:b4:35:36:b7:8f:d2:29:7a:56:99:ac:02:4a:
c5:05:6f:16:41:c0:19:5a:5e:42:6e:87:c6:f9:58:
bf:18:06:f1:1a:bb:d6:8f:a3:10:f0:17:63:85:7e:
ff:75:44:42:75:79:62:64:e4:2f:74:d1:76:df:54:
99:6a:a2:62:4b:a4:97:c7:a0:d8:ea:bc:e2:d1:cf:
2e:36:f6:4a:c5:45:f6:54:bc:64:e9:c8:84:7b:d6:
b1:31:47:a1:14:3b:2e:9a:02:02:32:ba:fc:a5:dc:
a6:6f:a6:65:54:c3:77:75:21:11:8d:55:0c:21:3a:
e4:6e:9f:be:52:d2:22:99:2f:97:9f:08:69:dc:4c:
0e:05:51:e3:6f:98:da:15:a4:53:5c:97:fd:30:c0:
2b:74:bd:d1:a2:15:c7:f1:61:53:ab:92:5f:83:a0:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:D1:B5:43:64:42:98:F0:BF:8D:59:6C:50:C5:64:F3:1B:4B:A9
X509v3 Authority Key Identifier:
keyid:C6:F2:F1:68:72:29:13:09:24:26:89:3B:17:EE:2F:FE:4B:78:B6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/C6F2F168722913092426893B17EE2FFE4B78B63A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F2F168722913092426893B17EE2FFE4B78B63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3133312e302f32342d3234203d3e20323635313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:73:9e:bf:64:1e:9f:b6:25:9c:49:a5:cd:41:28:c5:df:cd:
35:86:04:fc:3f:6f:c5:20:81:37:8f:cc:ed:f5:cf:35:a7:c3:
8d:02:85:93:11:c7:14:03:86:83:e1:a5:d4:48:6e:8b:c9:61:
0b:e8:80:3a:59:a3:e6:b1:1a:e2:7e:2d:d4:85:68:bd:e4:d9:
5a:cb:e0:83:72:e1:73:be:01:3c:2b:f7:e2:9c:03:24:ec:bf:
12:76:54:bd:29:24:3f:34:bd:ff:11:07:94:1f:92:b3:34:f5:
5d:4f:9d:fc:4e:17:b4:ea:59:6a:4e:79:cf:f7:fb:13:e5:03:
a1:f5:c9:b8:c3:c7:c4:5d:62:c0:58:70:5d:07:52:3b:cf:83:
b9:fe:72:3a:54:f9:17:0d:ad:26:1d:c1:af:02:56:92:ea:66:
d5:50:2d:3d:c3:2f:8f:9f:ac:72:d9:06:ce:12:51:f2:6b:ca:
31:03:ae:26:60:5c:bc:74:64:4b:87:18:1c:15:d1:3b:ae:50:
ab:a9:76:3f:e8:a2:d9:5e:96:1b:fd:29:e0:b3:ec:56:27:50:
0f:2d:54:89:9b:c6:fd:9f:00:b5:65:c4:6e:f1:ff:5e:28:6c:
44:2b:69:61:6e:f8:f2:29:6a:1f:19:66:8b:f1:96:d6:70:b8:
1b:54:20:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb0ROBov0Nomc6ue9iOC+WHkYGs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGMkYxNjg3MjI5MTMwOTI0MjY4OTNCMTdFRTJGRkU0
Qjc4QjYzQTAeFw0yNjAyMjcyMTEzMjJaFw0yNzAyMjYyMTE4MjJaMDMxMTAvBgNV
BAMTKDIyRkFEMUI1NDM2NDQyOThGMEJGOEQ1OTZDNTBDNTY0RjMxQjRCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIktbJSVy3Og2SsYsjhD9kBtzZ
mFxp8PTccetMuzzQGYRj/8HmozsbLwgTqGzp7q2MZJNg++6D4PK2SdhAzyM6FIkl
91QcjxzL/SGLuUQshSvo6OuuT6HtgMX4tDU2t4/SKXpWmawCSsUFbxZBwBlaXkJu
h8b5WL8YBvEau9aPoxDwF2OFfv91REJ1eWJk5C900XbfVJlqomJLpJfHoNjqvOLR
zy429krFRfZUvGTpyIR71rExR6EUOy6aAgIyuvyl3KZvpmVUw3d1IRGNVQwhOuRu
n75S0iKZL5efCGncTA4FUeNvmNoVpFNcl/0wwCt0vdGiFcfxYVOrkl+DoB8JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIvrRtUNkQpjwv41ZbFDFZPMbS6kwHwYDVR0j
BBgwFoAUxvLxaHIpEwkkJok7F+4v/kt4tjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JHclZpaDlCU1J3eUwyVWZlNW1UN3RYaXNhdzFjQWpNWFdqTHVVeGc2
Y20vMC9DNkYyRjE2ODcyMjkxMzA5MjQyNjg5M0IxN0VFMkZGRTRCNzhCNjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2RjJGMTY4NzIyOTEzMDky
NDI2ODkzQjE3RUUyRkZFNEI3OEI2M0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSR3JWaWg5QlNSd3lMMlVmZTVtVDd0WGlzYXcxY0FqTVhXakx1VXhnNmNtLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf5gzANBgkqhkiG9w0BAQsFAAOCAQEAHXOe
v2Qen7YlnEmlzUEoxd/NNYYE/D9vxSCBN4/M7fXPNafDjQKFkxHHFAOGg+Gl1Ehu
i8lhC+iAOlmj5rEa4n4t1IVoveTZWsvgg3Lhc74BPCv34pwDJOy/EnZUvSkkPzS9
/xEHlB+SszT1XU+d/E4XtOpZak55z/f7E+UDofXJuMPHxF1iwFhwXQdSO8+Duf5y
OlT5Fw2tJh3BrwJWkupm1VAtPcMvj5+sctkGzhJR8mvKMQOuJmBcvHRkS4cYHBXR
O65Qq6l2P+ii2V6WG/0p4LPsVidQDy1UiZvG/Z8AtWXEbvH/XihsRCtpYW748ilq
Hxlmi/GW1nC4G1QgXA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:23:00 2026 by rpki-client