
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3230342e33322e302f32322d3234203d3e203532353733.roa
File: 3133382e3230342e33322e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier: Q5DEoPiAj1AWQgoJVEvAetLn4Rq9piVDJzp7J4e9v98=
Subject key identifier: E1:E4:C7:0E:C1:77:24:E3:73:E2:E8:62:B8:20:CA:1D:84:50:AE:E7
Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial: 4C709356CF5A9D80756E8A8BCA013124AFDEE00B
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3230342e33322e302f32322d3234203d3e203532353733.roa
Signing time: Thu 20 Mar 2025 13:51:41 +0000
ROA not before: Thu 20 Mar 2025 13:46:41 +0000
ROA not after: Thu 19 Mar 2026 13:51:41 +0000
asID: 52573
IP address blocks: 138.204.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 05:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:70:93:56:cf:5a:9d:80:75:6e:8a:8b:ca:01:31:24:af:de:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Validity
Not Before: Mar 20 13:46:41 2025 GMT
Not After : Mar 19 13:51:41 2026 GMT
Subject: CN=E1E4C70EC17724E373E2E862B820CA1D8450AEE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:7f:23:20:f3:d2:67:c5:81:1c:f0:b0:03:
d3:be:c7:b1:e3:75:6c:8f:40:cc:95:2e:57:ea:89:
4c:71:5f:e1:64:6d:0b:c2:b4:e5:62:46:ab:b7:da:
e6:bd:ee:0c:7d:bf:0f:ae:9b:5c:b0:5c:12:38:44:
b6:41:34:b9:91:0b:6f:1c:0b:44:74:fb:02:ee:64:
f7:7a:b9:08:ac:51:4b:39:7b:de:21:16:e9:c6:bc:
f4:a1:7d:00:21:a5:26:59:7d:d8:43:cb:14:bd:ae:
2c:7b:f6:62:45:4c:64:23:ed:14:52:6a:0a:0c:ed:
9e:70:ab:2c:f1:c0:32:84:7b:98:b0:fe:0c:23:2a:
a3:c2:dd:1e:35:43:5c:8d:32:85:3e:ba:31:00:34:
f8:ac:37:ce:f9:b7:e0:31:3b:01:c5:a1:12:d3:52:
d0:7a:b4:ed:11:5d:74:fe:0f:00:b7:e1:46:ee:a7:
28:b8:79:4a:2e:e5:9e:c3:b9:0a:aa:ba:37:4f:b0:
b4:6e:1c:43:53:1f:1b:a3:2c:33:ee:82:75:70:d0:
70:e3:dd:5b:7e:b5:bf:a7:21:93:0a:37:58:88:94:
20:b3:ca:10:05:23:bb:22:58:12:af:b4:c8:a3:b0:
a0:3f:2d:fe:25:56:d5:dc:7b:43:db:66:9b:6e:96:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:C7:0E:C1:77:24:E3:73:E2:E8:62:B8:20:CA:1D:84:50:AE:E7
X509v3 Authority Key Identifier:
keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3230342e33322e302f32322d3234203d3e203532353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:8c:c6:7a:03:2e:ff:9e:2d:9e:d9:7f:31:56:98:27:6f:9d:
18:2c:d2:cc:04:e7:26:34:d9:e9:a3:7b:24:e9:d8:aa:44:0d:
b7:4f:be:7c:dd:cf:10:81:d5:7a:d7:92:1f:57:a7:f7:32:9b:
af:b7:12:b3:ac:f5:27:79:19:e0:71:29:a1:9d:7e:3a:a9:82:
f3:0a:1c:b3:89:ef:54:cf:4e:db:0d:ee:37:bb:6f:48:2d:65:
f8:9c:b8:23:c5:2f:60:33:72:06:a1:36:2a:07:dc:fa:0f:6c:
20:d0:e5:b8:62:81:ca:64:c1:55:5f:76:c2:f7:67:ed:ea:43:
b9:b0:af:4e:84:fe:57:b4:af:1e:fd:e3:04:9e:35:40:88:5b:
f7:06:e6:c1:e0:93:aa:7f:9b:31:13:fb:98:79:86:8d:7b:7e:
03:15:a4:a1:07:86:dd:79:da:73:1d:67:5f:23:85:c0:32:ee:
c3:51:cb:d7:37:ec:29:d6:71:06:81:73:fe:63:c8:e3:3c:f5:
83:80:e0:98:30:56:39:f1:93:f9:b2:a6:12:6d:77:18:ef:88:
67:c8:35:ae:16:2a:5a:a5:4d:76:35:42:ea:63:72:e8:9c:ba:
5d:85:df:2a:8e:15:d1:c8:ec:28:5a:6a:c4:9c:bc:bd:da:26:
8e:8a:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:58 2025 by rpki-client