
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa
File: 3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier: 3JufDtTXRYdgxr3b7jvn9odRz/90NmNP4Ml5zup5JL4=
Subject key identifier: BA:AD:F7:22:5B:AB:3D:41:EB:9D:AC:11:98:18:96:71:5E:27:4C:DB
Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial: 532AB956297DC2296EA04C3D42B9B5888658B9AE
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa
Signing time: Fri 20 Feb 2026 12:33:01 +0000
ROA not before: Fri 20 Feb 2026 12:28:01 +0000
ROA not after: Fri 19 Feb 2027 12:33:01 +0000
asID: 273490
IP address blocks: 177.222.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 09:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2a:b9:56:29:7d:c2:29:6e:a0:4c:3d:42:b9:b5:88:86:58:b9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Validity
Not Before: Feb 20 12:28:01 2026 GMT
Not After : Feb 19 12:33:01 2027 GMT
Subject: CN=BAADF7225BAB3D41EB9DAC11981896715E274CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:b6:80:1f:0e:d9:d8:f8:74:1a:04:79:09:
2c:c5:c6:21:a2:6c:1a:83:cb:50:5a:16:6b:54:0b:
da:64:ab:6c:fb:78:8d:ac:6b:14:26:6b:27:c6:32:
e5:4a:ee:ac:15:a6:9e:41:a8:35:e1:6c:00:19:bd:
c9:86:bc:72:64:6a:b7:93:09:1c:95:90:d8:ed:5d:
9a:1f:13:97:76:a4:77:9d:bc:88:e5:f2:58:7f:45:
16:a1:c4:eb:94:6d:94:27:c5:a6:41:a1:d9:8d:5f:
35:57:b9:65:2a:3e:76:93:ec:d5:ac:9a:59:dc:da:
e0:65:be:e8:36:b4:b5:38:83:25:ef:37:45:06:80:
f3:24:0d:27:f0:20:60:24:b8:06:24:e7:02:f1:d2:
82:c3:70:9e:cd:b7:bf:ed:28:a2:af:d1:c4:9e:2d:
02:e0:e3:c6:9d:92:ca:4d:85:06:6c:f6:65:5a:20:
79:c7:d2:b4:c9:48:e7:4f:4c:90:7e:16:25:a9:44:
07:46:c1:ed:42:03:6a:d7:2f:f9:ab:78:11:5f:27:
04:6f:54:44:bd:19:73:07:1e:4b:41:10:75:5e:34:
17:52:46:2a:b3:72:0b:75:33:7f:f8:77:af:5b:c5:
1b:c5:62:50:a0:77:ba:49:35:5e:63:5d:a8:8a:0f:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:F7:22:5B:AB:3D:41:EB:9D:AC:11:98:18:96:71:5E:27:4C:DB
X509v3 Authority Key Identifier:
keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.222.23.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ee:fc:13:15:4b:04:18:2f:40:5e:1b:40:a5:3a:d9:18:9e:
a8:ca:ea:e4:be:89:f8:f0:ed:86:a9:39:ff:10:1f:d7:70:aa:
69:1e:19:40:de:c2:6d:ba:52:00:58:ea:27:b4:9a:45:a2:c9:
a2:8f:39:d7:99:b8:ad:93:03:1b:8d:21:de:3a:e4:eb:b0:af:
ca:f4:33:28:e1:0c:14:6f:c6:96:52:7c:58:da:eb:12:d3:74:
60:45:30:1c:37:21:2f:47:a3:4f:29:71:99:a8:c3:00:a5:5e:
8e:d2:d1:35:5b:b0:9c:d5:09:18:e9:41:99:e6:1c:f2:f1:5a:
d0:43:1c:57:63:17:cf:2e:c2:3f:54:53:cc:f2:41:08:ef:bd:
e5:21:a3:37:0c:96:54:44:50:a6:0e:8d:31:92:55:cf:fb:6f:
d5:0d:b4:79:ce:90:91:61:47:19:28:25:c6:30:55:fb:ff:e7:
24:2a:5a:27:46:b4:92:aa:4a:81:92:38:3d:3e:3b:6c:27:44:
14:76:bb:1a:e0:2e:71:75:10:22:c4:cf:98:c7:c8:71:fd:9f:
6d:49:58:f1:ab:e9:f2:18:f2:18:b6:92:33:a2:20:42:17:92:
c7:cb:e1:ff:4f:c1:36:9c:49:7a:38:e5:e6:41:3e:bf:c0:b3:
ab:a8:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:02 2026 by rpki-client