
$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa
File: 3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa (raw, json)
Hash identifier: 9xXWxU6vXhRrBW5GiOh4X9FD0Ojg30ai0Zf3ychWvvs=
Subject key identifier: AA:9E:D2:CD:92:13:57:5B:2D:F9:A9:49:2B:9A:0B:B8:7B:F0:7E:A4
Certificate issuer: /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial: 2D42F6C799CD132BD51B5395E18251EA37E777A7
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa
Signing time: Wed 24 Jun 2026 11:31:33 +0000
ROA not before: Wed 24 Jun 2026 11:26:33 +0000
ROA not after: Wed 23 Jun 2027 11:31:33 +0000
asID: 269705
IP address blocks: 131.255.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 01:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:f6:c7:99:cd:13:2b:d5:1b:53:95:e1:82:51:ea:37:e7:77:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
Validity
Not Before: Jun 24 11:26:33 2026 GMT
Not After : Jun 23 11:31:33 2027 GMT
Subject: CN=AA9ED2CD9213575B2DF9A9492B9A0BB87BF07EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:05:49:a7:74:00:d1:cc:c0:12:e5:88:89:
cc:ea:6a:51:e5:22:08:fc:cf:7a:e1:fb:f6:62:72:
13:54:49:cb:ab:a6:e8:7e:ef:ba:5d:b5:3c:c6:44:
bf:a9:fd:2d:15:b4:da:bd:ab:31:01:e4:9c:43:80:
e4:24:5c:98:a3:38:1d:06:e8:d1:5c:3e:c0:7a:d0:
d4:a3:35:f2:d8:7b:c2:a6:76:08:49:ed:3e:e5:98:
39:68:6c:a1:87:18:e3:02:f1:17:69:6d:47:ae:38:
6f:79:1a:b4:f8:8b:d5:67:ad:93:54:18:d7:dd:d6:
a0:79:71:16:e1:7b:fb:00:d3:e9:70:27:bd:4d:8d:
73:58:49:dc:aa:b7:16:a4:b1:bf:59:8b:44:a9:72:
07:0f:b0:86:3f:c5:bb:dd:0b:0d:1b:9c:6e:6a:0e:
69:f8:90:3c:c2:20:d4:84:0b:3d:2b:66:5c:70:01:
bf:49:1c:e7:f9:c9:bf:c4:8f:37:7a:64:f1:49:84:
c9:1a:cc:7b:f3:db:62:b2:0d:9a:9a:2c:29:e3:99:
2d:3f:7e:07:92:72:19:da:b6:0c:ef:9e:df:e4:2f:
67:28:35:b0:28:34:c1:69:31:71:d3:e5:a5:50:db:
6a:95:f6:d7:a2:e4:a1:07:fa:2a:1b:c9:a2:73:d6:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:D2:CD:92:13:57:5B:2D:F9:A9:49:2B:9A:0B:B8:7B:F0:7E:A4
X509v3 Authority Key Identifier:
keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:c8:d0:3a:90:12:83:fb:0d:49:43:96:dd:1d:33:a5:a5:48:
f3:80:fc:2f:02:b7:41:33:a0:4b:a1:21:2c:b8:a0:83:bb:fe:
1a:43:e4:9b:1a:10:6d:06:70:b8:89:7e:33:7e:f0:d8:c6:f5:
e0:c7:3a:1a:8e:2c:fc:c9:ba:ac:ae:72:e9:7b:7e:c8:79:ea:
79:38:a4:36:8c:6c:81:a7:6a:49:6f:87:d8:68:d6:26:6e:2c:
f2:25:9f:08:6a:7c:01:5b:3f:e3:87:7d:ce:28:0c:c5:33:a0:
25:ae:a8:e4:c7:39:d7:cd:d4:0f:86:13:3e:27:37:42:5c:93:
74:b0:86:bf:f8:c8:d0:ad:57:cc:cf:9f:a9:9b:d4:7e:e9:47:
83:8e:f9:31:bc:26:2e:89:1a:db:6f:de:f8:d0:b1:08:76:78:
8d:df:1d:5c:7d:ca:fb:db:8a:9f:d5:de:b0:68:18:37:fc:94:
ca:6f:a3:c2:1a:d5:d0:b2:b3:b2:42:32:26:c9:a6:aa:4e:20:
b8:50:42:30:ab:c4:04:78:0a:62:ed:3c:25:e2:9c:a9:de:57:
c9:7b:65:47:4c:6b:2c:56:73:17:91:3a:3c:e9:5a:da:95:ac:
55:c9:c9:c8:64:57:7d:67:d5:b1:62:e0:c4:70:e4:e5:83:72:
37:59:ee:5f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULUL2x5nNEyvVG1OV4YJR6jfnd6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE3QTNDNDYzMDhENDY5MjE1M0I5OTRCNzJFNTE1OTky
MjVCNDk3OTAeFw0yNjA2MjQxMTI2MzNaFw0yNzA2MjMxMTMxMzNaMDMxMTAvBgNV
BAMTKEFBOUVEMkNEOTIxMzU3NUIyREY5QTk0OTJCOUEwQkI4N0JGMDdFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGKAVJp3QA0czAEuWIiczqalHl
Igj8z3rh+/ZichNUScurpuh+77pdtTzGRL+p/S0VtNq9qzEB5JxDgOQkXJijOB0G
6NFcPsB60NSjNfLYe8KmdghJ7T7lmDlobKGHGOMC8RdpbUeuOG95GrT4i9VnrZNU
GNfd1qB5cRbhe/sA0+lwJ71NjXNYSdyqtxaksb9Zi0SpcgcPsIY/xbvdCw0bnG5q
Dmn4kDzCINSECz0rZlxwAb9JHOf5yb/Ejzd6ZPFJhMkazHvz22KyDZqaLCnjmS0/
fgeSchnatgzvnt/kL2coNbAoNMFpMXHT5aVQ22qV9tei5KEH+iobyaJz1kSDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqp7SzZITV1st+alJK5oLuHvwfqQwHwYDVR0j
BBgwFoAUQXo8RjCNRpIVO5lLcuUVmSJbSXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1
ZTcvMC80MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxN0EzQzQ2MzA4RDQ2OTIx
NTNCOTk0QjcyRTUxNTk5MjI1QjQ5NzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJLM0NpTWc4d3BydDRrZFlYWUxkV3huaERBaEYzTmQ5OW9ab1plQU5odWU3LzAv
MzEzMzMxMmUzMjM1MzUyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzOTM3MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/2DANBgkqhkiG9w0BAQsFAAOCAQEAosjQ
OpASg/sNSUOW3R0zpaVI84D8LwK3QTOgS6EhLLigg7v+GkPkmxoQbQZwuIl+M37w
2Mb14Mc6Go4s/Mm6rK5y6Xt+yHnqeTikNoxsgadqSW+H2GjWJm4s8iWfCGp8AVs/
44d9zigMxTOgJa6o5Mc5183UD4YTPic3QlyTdLCGv/jI0K1XzM+fqZvUfulHg475
MbwmLoka22/e+NCxCHZ4jd8dXH3K+9uKn9XesGgYN/yUym+jwhrV0LKzskIyJsmm
qk4guFBCMKvEBHgKYu08JeKcqd5XyXtlR0xrLFZzF5E6POla2pWsVcnJyGRXfWfV
sWLgxHDk5YNyN1nuXw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:15:02 2026 by rpki-client