
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
File: 3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier: Xu3SUA799ohRH2Ow5hFzzjlr5CMdLFUbeciIfTtfOa4=
Subject key identifier: 52:C6:2D:B9:6E:39:55:DC:AD:D5:A1:82:24:14:70:0D:0D:5D:D8:FE
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 0CBB55EDB2590741EF3FC75AE9605543CB714DC6
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:12:02 +0000
ROA not before: Tue 22 Sep 2026 17:07:02 +0000
ROA not after: Tue 21 Sep 2027 17:12:02 +0000
asID: 52721
IP address blocks: 138.185.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 18:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bb:55:ed:b2:59:07:41:ef:3f:c7:5a:e9:60:55:43:cb:71:4d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:07:02 2026 GMT
Not After : Sep 21 17:12:02 2027 GMT
Subject: CN=52C62DB96E3955DCADD5A1822414700D0D5DD8FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:7e:f6:fb:18:f1:cd:a4:ea:80:0a:32:37:
a7:c9:40:de:01:f4:40:37:a1:6d:32:d9:54:80:22:
63:c3:66:bb:93:7d:23:bf:2d:ae:29:36:75:f6:7b:
5b:30:3b:5a:7f:87:8d:87:03:f4:c2:79:63:a8:78:
49:f4:fc:b3:a3:f6:65:ce:c9:29:c7:07:ec:49:26:
cd:9c:23:31:de:0a:5b:3c:4c:57:5b:1f:34:ad:1c:
b3:e9:37:b8:83:f0:69:9b:ce:5f:e3:d1:e8:ec:51:
2c:12:7c:1d:4c:42:4e:1c:01:d4:63:f9:b3:97:fc:
b6:99:20:27:0b:4d:b7:0c:11:ca:48:01:74:5a:c3:
56:02:a9:f8:eb:f0:62:fc:c5:d3:47:b6:17:b7:95:
fd:b9:04:72:52:95:6a:2f:20:2f:6e:95:f0:86:ee:
0a:e5:6f:36:cc:96:ac:62:c6:a6:0c:33:57:a1:15:
64:96:6a:e8:3c:06:7a:a6:8f:c6:b9:38:b0:97:df:
f7:8b:6f:a8:38:ed:55:f5:b1:55:5d:de:d3:71:8d:
83:51:2d:eb:78:62:be:aa:c9:a8:5c:39:1f:48:f1:
a6:e6:b1:1d:da:13:e1:dc:d1:ec:e1:c3:a8:52:47:
ab:e3:f0:c0:8c:5f:16:41:dc:c3:1a:5e:19:8e:85:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C6:2D:B9:6E:39:55:DC:AD:D5:A1:82:24:14:70:0D:0D:5D:D8:FE
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.108.0/22
Signature Algorithm: sha256WithRSAEncryption
20:f8:e9:4a:f4:ea:35:f6:09:64:23:fd:cc:b9:3f:71:da:d1:
a4:94:f7:e7:f5:f0:3a:58:6f:39:98:30:28:51:00:1d:a9:af:
0b:c2:02:e2:79:e7:bf:e8:52:fe:c5:52:12:26:bb:6c:b0:62:
10:04:3a:95:5c:b9:e5:db:4f:4c:1c:14:08:3a:0f:72:15:15:
14:cd:f3:2f:c6:20:10:1a:88:cd:22:84:6b:af:84:58:53:33:
cf:4a:4f:28:4a:1f:79:11:eb:05:1c:43:28:18:d0:35:fd:15:
71:84:58:b7:72:ce:67:1c:f8:de:71:9b:89:a1:3d:f2:e7:3e:
19:00:7f:42:dc:4f:4d:47:2d:1b:71:b0:7c:5d:f5:13:22:0c:
00:fb:3d:41:15:3a:98:c1:86:69:fa:31:18:0e:ff:ee:7d:e4:
fe:33:54:05:db:2c:17:16:85:5c:07:48:e1:de:0d:80:46:34:
b4:c7:f5:25:85:ec:f2:3c:58:d1:e0:de:57:c0:15:0c:f1:32:
60:1c:49:b7:b7:d6:eb:d8:c9:2a:e1:c5:cc:53:d5:a1:f5:cc:
52:46:cb:27:19:37:3a:c7:90:04:71:a5:f2:e1:74:96:98:3f:
fc:12:5e:75:1c:51:c4:29:a1:e4:b6:20:f9:21:c1:d8:cd:e5:
bc:5f:2f:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDLtV7bJZB0HvP8da6WBVQ8txTcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2Rjk5Rjk2ODI3MDZDODBEODU5Q0I3RkUxRTQwQjA3
RUJCMDk5ODAeFw0yNjA5MjIxNzA3MDJaFw0yNzA5MjExNzEyMDJaMDMxMTAvBgNV
BAMTKDUyQzYyREI5NkUzOTU1RENBREQ1QTE4MjI0MTQ3MDBEMEQ1REQ4RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvn72+xjxzaTqgAoyN6fJQN4B
9EA3oW0y2VSAImPDZruTfSO/La4pNnX2e1swO1p/h42HA/TCeWOoeEn0/LOj9mXO
ySnHB+xJJs2cIzHeCls8TFdbHzStHLPpN7iD8Gmbzl/j0ejsUSwSfB1MQk4cAdRj
+bOX/LaZICcLTbcMEcpIAXRaw1YCqfjr8GL8xdNHthe3lf25BHJSlWovIC9ulfCG
7grlbzbMlqxixqYMM1ehFWSWaug8Bnqmj8a5OLCX3/eLb6g47VX1sVVd3tNxjYNR
Let4Yr6qyahcOR9I8abmsR3aE+Hc0ezhw6hSR6vj8MCMXxZB3MMaXhmOhQGjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUsYtuW45Vdyt1aGCJBRwDQ1d2P4wHwYDVR0j
BBgwFoAUzW+Z+WgnBsgNhZy3/h5AsH67CZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ
cWUvMC9DRDZGOTlGOTY4MjcwNkM4MEQ4NTlDQjdGRTFFNDBCMDdFQkIwOTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkY5OUY5NjgyNzA2Qzgw
RDg1OUNCN0ZFMUU0MEIwN0VCQjA5OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv
MzEzMzM4MmUzMTM4MzUyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuWwwDQYJKoZIhvcNAQELBQADggEBACD46Ur0
6jX2CWQj/cy5P3Ha0aSU9+f18DpYbzmYMChRAB2prwvCAuJ557/oUv7FUhImu2yw
YhAEOpVcueXbT0wcFAg6D3IVFRTN8y/GIBAaiM0ihGuvhFhTM89KTyhKH3kR6wUc
QygY0DX9FXGEWLdyzmcc+N5xm4mhPfLnPhkAf0LcT01HLRtxsHxd9RMiDAD7PUEV
OpjBhmn6MRgO/+595P4zVAXbLBcWhVwHSOHeDYBGNLTH9SWF7PI8WNHg3lfAFQzx
MmAcSbe31uvYySrhxcxT1aH1zFJGyycZNzrHkARxpfLhdJaYP/wSXnUcUcQpoeS2
IPkhwdjN5bxfLy4=
-----END CERTIFICATE-----
Generated at Fri Oct 16 10:44:35 2026 by rpki-client