
$ rpki-client -vvf rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa
File: 3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa (raw, json)
Hash identifier: ZkKjU24O7gDCvJxnYnohl88S+Y5jtnQzFb577U0opJs=
Subject key identifier: BE:64:B0:93:D8:DD:FD:C6:23:39:BD:55:CA:6F:1A:66:38:42:B6:D6
Certificate issuer: /CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
Certificate serial: 13534E5BE6A83CF05A34AEA7F9273DACA501CA20
Authority key identifier: 15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa
Signing time: Wed 01 Jul 2026 13:57:56 +0000
ROA not before: Wed 01 Jul 2026 13:52:56 +0000
ROA not after: Wed 30 Jun 2027 13:57:56 +0000
asID: 263589
IP address blocks: 168.205.20.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl
rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 06:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:53:4e:5b:e6:a8:3c:f0:5a:34:ae:a7:f9:27:3d:ac:a5:01:ca:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
Validity
Not Before: Jul 1 13:52:56 2026 GMT
Not After : Jun 30 13:57:56 2027 GMT
Subject: CN=BE64B093D8DDFDC62339BD55CA6F1A663842B6D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:6e:a2:06:c0:e1:72:57:47:0f:f3:2c:7d:
d9:85:63:ee:47:27:fe:74:cd:0b:b6:a3:f8:f4:64:
46:90:55:80:53:d6:e2:05:85:3b:cf:99:26:7b:9e:
aa:bf:93:91:5a:e5:29:20:72:10:56:c0:c1:89:5b:
c0:0e:32:90:15:cb:65:b0:7c:ca:03:ba:31:23:15:
04:7f:d8:4a:f8:6d:4e:49:89:e4:c5:10:1e:05:2a:
d9:33:cb:25:25:89:dd:2c:18:31:74:7f:c9:b5:d9:
5e:e6:fb:2b:69:9b:f0:73:11:d2:63:20:c5:ba:a6:
f6:8d:1e:ac:1a:99:28:a2:3d:b0:9c:13:38:e4:8c:
f3:d9:61:20:47:98:07:a9:e1:a6:4a:c1:8b:3a:a0:
61:5f:da:f9:39:1c:9b:f2:47:e8:b6:1b:51:58:c7:
40:4f:d5:77:36:3c:41:07:d4:af:38:b9:9f:3b:94:
d3:1a:2f:d8:8b:5d:3b:22:8a:45:45:77:a0:f4:87:
24:79:ea:f1:9f:1d:a2:ad:0c:6b:6c:04:73:db:2b:
f1:7d:2f:63:df:68:c9:cf:6f:aa:c1:3f:5c:18:96:
62:f2:d0:1e:3d:10:f2:f0:0e:a9:26:6e:28:17:fe:
e3:60:05:79:b8:22:c4:4a:cf:97:ad:96:d0:e6:d1:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:B0:93:D8:DD:FD:C6:23:39:BD:55:CA:6F:1A:66:38:42:B6:D6
X509v3 Authority Key Identifier:
keyid:15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:70:45:0a:61:2e:3a:d3:78:cb:16:97:a0:b8:8b:6f:1d:10:
56:da:3e:de:ce:30:e6:79:ba:1a:69:bf:3d:3f:53:90:62:4f:
d7:c6:3a:28:0b:6d:ed:ff:c7:dd:3d:94:ec:5c:62:f8:27:4e:
55:a8:dd:08:7c:77:5e:80:74:6e:d0:09:d0:83:2a:00:90:29:
3f:51:d9:46:55:e9:f1:b0:b5:69:68:94:ce:e5:1c:a4:49:d3:
03:6a:d0:d1:8a:4a:7b:c1:0c:e6:9a:e8:b6:05:62:15:25:a9:
b3:ab:df:cc:e1:f9:e4:40:6b:d9:a7:a9:4b:99:e8:23:e8:7d:
57:0e:c2:ac:45:fa:83:74:b9:b7:1e:04:b4:97:00:ad:94:d3:
fe:e6:2b:fc:b2:6b:a3:1b:70:29:64:07:fd:b1:0c:df:0f:c6:
e4:83:d0:97:6d:b5:31:c1:ee:71:77:95:cd:d4:36:d8:5c:19:
f3:45:e9:a7:5b:c3:fa:93:11:14:41:2b:04:9a:23:3a:90:63:
2b:6c:c6:2a:70:40:8f:c3:d5:80:d4:73:a1:f0:b3:dd:d8:8b:
48:14:62:b3:66:71:d1:3d:c4:4c:e6:a9:f5:f7:b1:33:44:0b:
c2:0c:fc:c4:bb:46:2d:9c:d2:a2:ad:70:6a:7e:b4:7a:b7:3b:
c9:75:c7:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE1NOW+aoPPBaNK6n+Sc9rKUByiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyQkQ5M0U2REVFNDVFRDAyOUM4OERFQUM2NzM5NzY2
NThFOUE5MTAeFw0yNjA3MDExMzUyNTZaFw0yNzA2MzAxMzU3NTZaMDMxMTAvBgNV
BAMTKEJFNjRCMDkzRDhEREZEQzYyMzM5QkQ1NUNBNkYxQTY2Mzg0MkI2RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsI26iBsDhcldHD/MsfdmFY+5H
J/50zQu2o/j0ZEaQVYBT1uIFhTvPmSZ7nqq/k5Fa5SkgchBWwMGJW8AOMpAVy2Ww
fMoDujEjFQR/2Er4bU5JieTFEB4FKtkzyyUlid0sGDF0f8m12V7m+ytpm/BzEdJj
IMW6pvaNHqwamSiiPbCcEzjkjPPZYSBHmAep4aZKwYs6oGFf2vk5HJvyR+i2G1FY
x0BP1Xc2PEEH1K84uZ87lNMaL9iLXTsiikVFd6D0hyR56vGfHaKtDGtsBHPbK/F9
L2PfaMnPb6rBP1wYlmLy0B49EPLwDqkmbigX/uNgBXm4IsRKz5etltDm0SI7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvmSwk9jd/cYjOb1Vym8aZjhCttYwHwYDVR0j
BBgwFoAUFSvZPm3uRe0CnIjerGc5dmWOmpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRpR2ttM0IyRmg5aUhIMWZKWUR6eThpaFhrclVHQnh3RTgzR1IzZlJW
NDcvMC8xNTJCRDkzRTZERUU0NUVEMDI5Qzg4REVBQzY3Mzk3NjY1OEU5QTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MkJEOTNFNkRFRTQ1RUQw
MjlDODhERUFDNjczOTc2NjU4RTlBOTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkaUdrbTNCMkZoOWlISDFmSllEenk4aWhYa3JVR0J4d0U4M0dSM2ZSVjQ3LzAv
MzEzNjM4MmUzMjMwMzUyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKozRQwDQYJKoZIhvcNAQELBQADggEBAAxwRQph
LjrTeMsWl6C4i28dEFbaPt7OMOZ5uhppvz0/U5BiT9fGOigLbe3/x909lOxcYvgn
TlWo3Qh8d16AdG7QCdCDKgCQKT9R2UZV6fGwtWlolM7lHKRJ0wNq0NGKSnvBDOaa
6LYFYhUlqbOr38zh+eRAa9mnqUuZ6CPofVcOwqxF+oN0ubceBLSXAK2U0/7mK/yy
a6MbcClkB/2xDN8PxuSD0JdttTHB7nF3lc3UNthcGfNF6adbw/qTERRBKwSaIzqQ
YytsxipwQI/D1YDUc6Hws93Yi0gUYrNmcdE9xEzmqfX3sTNEC8IM/MS7Ri2c0qKt
cGp+tHq3O8l1xyg=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:07 2026 by rpki-client