
$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
File: 3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa (raw, json)
Hash identifier: wX+U3HR42ArlYhSzt/YRtRNSJRNa88RnjjLxYjeDpGQ=
Subject key identifier: 63:1E:F0:A4:EB:E5:EB:39:5E:23:4E:CD:16:F4:4B:58:5A:78:AC:D4
Certificate issuer: /CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
Certificate serial: 1BABA0C9634558293EEA8ED13307893E0A36C26B
Authority key identifier: F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
Signing time: Mon 06 Apr 2026 19:18:48 +0000
ROA not before: Mon 06 Apr 2026 19:13:48 +0000
ROA not after: Mon 05 Apr 2027 19:18:48 +0000
asID: 264293
IP address blocks: 138.121.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl
rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 09:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ab:a0:c9:63:45:58:29:3e:ea:8e:d1:33:07:89:3e:0a:36:c2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
Validity
Not Before: Apr 6 19:13:48 2026 GMT
Not After : Apr 5 19:18:48 2027 GMT
Subject: CN=631EF0A4EBE5EB395E234ECD16F44B585A78ACD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:d2:1f:88:25:7a:88:73:02:98:8d:8e:4f:
5b:94:27:e4:67:df:9e:17:ba:06:f2:d6:dd:fc:4c:
48:d7:5f:20:ba:69:78:ea:cc:6c:e5:6c:c7:7c:99:
74:db:45:85:df:c9:f5:0e:71:5f:2b:1d:bd:b6:5e:
7e:2c:f6:b9:36:5f:6d:34:23:cf:93:1f:8c:2e:a7:
b5:3b:6e:fc:45:62:61:4b:d2:e2:41:65:9b:d1:62:
2a:2e:d7:65:8e:6d:55:84:47:9b:0b:12:d9:e8:4e:
8c:d6:a9:d6:6a:d7:f8:e5:2a:89:ac:ed:00:63:7d:
2f:0f:38:34:6c:32:3d:af:ce:3f:cd:6d:7e:90:8e:
84:e8:d8:3c:31:cb:af:d7:11:fe:d2:2d:5e:47:f2:
c6:0b:d3:f4:74:50:bd:22:08:3d:23:b8:a9:ea:04:
8a:87:58:9d:65:3b:b0:9d:75:8e:58:50:2d:54:1b:
9f:2a:6c:1d:f3:55:78:ac:ab:c2:7d:94:7c:ce:74:
5d:3e:4c:6f:29:37:6a:d1:19:8b:4b:d5:13:dd:ae:
27:ce:69:59:8f:72:de:e7:51:c9:03:b6:6b:22:e8:
41:8e:62:94:82:95:14:79:09:47:a3:c2:bf:86:e1:
81:7f:d7:2a:60:5b:ae:59:45:d3:0f:24:d1:61:4c:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1E:F0:A4:EB:E5:EB:39:5E:23:4E:CD:16:F4:4B:58:5A:78:AC:D4
X509v3 Authority Key Identifier:
keyid:F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.120.0/23
Signature Algorithm: sha256WithRSAEncryption
05:39:3b:19:71:82:a3:8a:99:52:88:c4:0b:77:6f:6d:6b:1f:
bc:a3:4f:10:ec:f1:bd:53:3c:88:c1:a9:35:d0:c2:ad:ad:97:
49:8c:86:7b:f9:4a:49:78:fe:80:44:e3:25:c3:d8:4f:ff:08:
81:bd:f4:f2:ec:04:dc:fd:17:6e:64:81:84:4a:1b:85:84:5e:
2f:e6:8e:04:91:51:c4:e6:66:27:ed:25:d8:97:84:e8:f4:53:
62:72:60:b4:35:1d:81:66:a7:5f:57:96:50:f7:3e:ce:6e:bf:
b0:37:b1:e0:7b:a5:b1:4c:cd:7e:8f:69:25:98:ef:5a:b1:21:
9d:3e:fd:46:e0:97:e9:b1:76:dc:d3:41:a9:3c:ad:3f:fa:8f:
f3:bf:2f:df:a3:40:1d:d2:69:0f:16:ff:bd:bb:e9:d2:d5:f9:
e3:7c:a6:80:c0:64:5c:23:e7:53:26:3b:b6:14:a4:e1:81:49:
a4:c8:79:06:9f:15:90:d3:a1:cd:cc:ad:c7:35:6e:53:68:af:
fd:3c:62:ab:71:a0:46:1b:ff:3c:26:65:a3:fe:45:d7:0a:da:
3f:75:b7:fa:b3:96:1e:e8:3b:bf:3e:15:57:4e:fe:f5:9e:df:
10:9d:d7:69:e1:90:62:de:9f:19:3b:95:4e:0e:b4:de:d9:74:
16:3d:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:09:57 2026 by rpki-client