
$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
File: 3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa (raw, json)
Hash identifier: EizirriPaFn6uB6uT4/lv3/GCq6+CleJ0/xcDLX8WYk=
Subject key identifier: 24:79:B6:4B:F3:14:3A:15:7B:ED:24:65:47:7F:AE:F7:A0:3B:A0:AB
Certificate issuer: /CN=9D382AC121626FCAD8CF3A3959C2979F23FCA68C
Certificate serial: 4255BE9F1E0ABC14A51918D2C722C4F6EADE289C
Authority key identifier: 9D:38:2A:C1:21:62:6F:CA:D8:CF:3A:39:59:C2:97:9F:23:FC:A6:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
Signing time: Sun 18 Jan 2026 17:40:12 +0000
ROA not before: Sun 18 Jan 2026 17:35:12 +0000
ROA not after: Sun 17 Jan 2027 17:40:12 +0000
asID: 263849
IP address blocks: 138.185.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.crl
rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Feb 2026 13:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:55:be:9f:1e:0a:bc:14:a5:19:18:d2:c7:22:c4:f6:ea:de:28:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D382AC121626FCAD8CF3A3959C2979F23FCA68C
Validity
Not Before: Jan 18 17:35:12 2026 GMT
Not After : Jan 17 17:40:12 2027 GMT
Subject: CN=2479B64BF3143A157BED2465477FAEF7A03BA0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:9b:85:99:08:eb:bf:bc:34:de:06:17:a1:
af:d9:fc:30:4f:07:2b:75:f7:13:fa:45:f7:0a:09:
d9:59:ff:03:db:12:1d:33:4c:a8:21:f4:9c:7c:83:
ac:26:73:09:99:93:c8:45:d5:af:41:83:c0:88:e1:
ca:8f:74:b4:97:1a:40:3a:03:80:81:4b:98:1f:3c:
fe:cb:60:f7:47:a9:28:64:e1:0b:d6:b4:dc:54:f4:
b5:59:66:24:70:6c:8a:00:b0:bb:d1:2f:b6:54:bb:
f5:1e:c5:b2:6b:28:6d:77:fc:7f:20:02:1a:ee:e9:
9d:51:a0:41:23:36:c3:65:16:9d:20:79:8f:37:66:
c5:be:6b:53:68:8b:55:f3:79:00:52:11:36:9a:38:
d1:d4:55:80:c0:0c:7a:e4:85:1f:7e:6d:3b:44:64:
b3:f7:9e:22:ef:19:0e:98:94:37:a5:37:21:8f:35:
21:92:4b:0a:95:f5:76:44:70:1e:34:af:02:e9:37:
ef:be:55:d1:75:e6:42:a3:16:45:ad:74:c8:2f:5c:
3e:ac:cc:c6:c5:b8:26:da:08:d1:f0:2f:72:d2:18:
19:b5:81:64:cd:8e:33:c5:b2:7e:18:c9:31:e7:e9:
9a:5f:a3:33:f7:07:b5:d7:3f:06:2e:cd:dc:41:33:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:B6:4B:F3:14:3A:15:7B:ED:24:65:47:7F:AE:F7:A0:3B:A0:AB
X509v3 Authority Key Identifier:
keyid:9D:38:2A:C1:21:62:6F:CA:D8:CF:3A:39:59:C2:97:9F:23:FC:A6:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:dc:55:74:c7:64:19:e4:f8:32:ef:76:c7:8c:ed:fe:72:48:
3e:65:d1:98:36:96:f4:31:38:93:14:b3:64:b5:b8:eb:33:d7:
d0:7d:3a:c7:fb:e9:1a:67:74:f3:9c:cf:8a:b1:e7:04:37:b5:
e8:bd:a5:80:8e:5e:46:2b:3e:31:a7:34:49:1b:eb:f1:6d:57:
e9:8c:7e:c5:da:a2:2e:80:9f:7b:91:1d:24:19:79:66:47:06:
91:50:db:74:dd:a9:7d:f9:f4:fb:81:ad:26:31:a7:12:2c:8c:
ed:e6:d8:97:89:7f:9a:2e:fc:69:27:c5:24:5d:94:7e:93:88:
f3:43:b4:29:47:2e:53:f5:02:b5:b6:50:69:5e:44:1f:55:32:
70:74:40:3e:e5:e7:4e:54:6b:b7:e1:5b:e5:62:ae:b2:1d:e6:
6a:fa:9b:ca:7c:37:76:f9:59:ef:5b:7b:a4:cc:f1:df:cd:a4:
95:d9:74:23:fe:ed:d0:d9:65:23:be:05:71:8b:13:79:f1:28:
7f:fa:04:8c:a7:6a:8f:b5:4c:f7:11:8e:fc:21:13:d3:cc:63:
0f:66:bc:1e:5b:22:5e:c6:cd:9f:72:1e:b7:c1:6b:e3:c9:50:
2b:2c:33:7c:33:be:6c:8b:6c:68:2c:9d:06:8b:64:98:46:7f:
29:0d:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:28 2026 by rpki-client