
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
File: 3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: 4w0j16oYUYa2jht3b3zZkZv3c1Gs8v8V6uSUqkiGufY=
Subject key identifier: F1:BA:E5:2C:FC:7C:78:EB:C9:38:D8:87:4C:43:C5:50:8B:3D:98:87
Certificate issuer: /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial: 4CD5D42CE23549DA5DEAFAB3CF33C755413F03DD
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
Signing time: Wed 29 Apr 2026 14:34:56 +0000
ROA not before: Wed 29 Apr 2026 14:29:56 +0000
ROA not after: Wed 28 Apr 2027 14:34:56 +0000
asID: 53153
IP address blocks: 138.204.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 07 May 2026 14:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d5:d4:2c:e2:35:49:da:5d:ea:fa:b3:cf:33:c7:55:41:3f:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Validity
Not Before: Apr 29 14:29:56 2026 GMT
Not After : Apr 28 14:34:56 2027 GMT
Subject: CN=F1BAE52CFC7C78EBC938D8874C43C5508B3D9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:d3:c6:55:de:86:69:c6:f2:43:0d:1c:e9:
e4:a6:3e:9c:b4:58:1c:81:96:71:68:28:96:63:e7:
3f:c0:d6:b1:f3:eb:0b:5f:a9:3d:84:dc:d2:12:a5:
1d:72:7f:ab:b8:fe:d4:dc:1b:2b:b4:c7:c3:e6:0e:
45:13:76:cf:13:bd:71:ed:1b:2f:e8:95:56:b1:0c:
de:80:8b:d6:c1:5d:d0:db:90:3d:94:f1:3f:83:b6:
e4:8c:52:60:56:78:c4:d3:f4:db:21:f2:51:7d:f4:
4d:a0:9a:58:09:de:a2:fc:31:ca:99:f1:21:c4:a7:
13:2b:63:d4:ec:63:c0:c8:90:5c:e0:bd:a3:c8:24:
8a:bc:dd:f9:98:34:ed:b4:ee:d7:5f:f4:1e:4a:c5:
ae:2b:49:52:07:78:8f:06:17:5a:10:aa:fd:15:9a:
3e:12:04:42:a2:8f:34:80:47:87:30:c1:70:6f:13:
b5:a1:63:80:bc:11:9f:17:82:ed:4c:26:64:59:bd:
4d:99:c9:08:6a:d6:1c:9c:28:58:83:5e:d7:23:d0:
a7:a1:e0:f4:8a:26:f5:2c:4b:ac:af:26:08:6c:8f:
7a:70:c5:fb:1c:21:6f:d2:25:4b:2a:60:76:f5:4d:
46:0b:c8:1d:f4:93:86:5c:c7:2b:dc:1c:be:fb:ba:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:E5:2C:FC:7C:78:EB:C9:38:D8:87:4C:43:C5:50:8B:3D:98:87
X509v3 Authority Key Identifier:
keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.220.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:76:fb:c9:3d:e3:82:de:db:a5:62:d4:41:34:05:71:d8:9a:
18:49:a5:f2:03:e0:22:fe:e6:4c:5a:d6:d9:a1:dd:88:7b:fd:
c7:a1:30:28:c3:a8:3f:04:07:28:10:e7:da:7b:29:b5:22:8d:
f9:1d:cf:63:6f:43:d8:e2:e8:a8:be:f1:87:ec:ca:c2:9b:c5:
8b:80:cb:22:b3:84:b6:2c:00:f0:e1:38:8c:41:0f:1d:e1:2c:
9f:cb:23:58:f2:68:41:6d:49:75:0e:3f:43:42:8a:44:93:4a:
93:71:59:a6:2d:cf:83:1d:a7:60:48:b1:47:10:91:be:4d:de:
e1:e7:2d:18:02:b1:1f:51:6f:1e:f6:29:16:14:2f:98:25:4f:
c1:32:54:22:9d:46:77:01:55:66:e3:79:9f:10:8c:5f:08:95:
ea:61:89:52:9a:a8:1b:53:cc:97:bf:01:cd:10:16:d7:dc:18:
4e:d9:92:34:b9:9d:5d:09:02:c6:27:5c:0d:84:e9:41:ce:ef:
e2:f8:f4:1e:17:3e:a4:03:a8:df:c7:16:c2:18:94:20:42:a4:
6c:4a:3d:b4:ba:e5:37:0b:40:e9:33:a5:a7:70:9a:fc:44:0d:
7a:36:da:9d:c3:22:94:c7:0b:57:a9:74:21:52:ab:6b:3c:b4:
12:7f:c7:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTNXULOI1Sdpd6vqzzzPHVUE/A90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFGOTY5OTg5MjJFQTIxRkExMDEzMzcwRUFCODQ4MEU1
RURCOUY1QzAeFw0yNjA0MjkxNDI5NTZaFw0yNzA0MjgxNDM0NTZaMDMxMTAvBgNV
BAMTKEYxQkFFNTJDRkM3Qzc4RUJDOTM4RDg4NzRDNDNDNTUwOEIzRDk4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjNPGVd6GacbyQw0c6eSmPpy0
WByBlnFoKJZj5z/A1rHz6wtfqT2E3NISpR1yf6u4/tTcGyu0x8PmDkUTds8TvXHt
Gy/olVaxDN6Ai9bBXdDbkD2U8T+DtuSMUmBWeMTT9Nsh8lF99E2gmlgJ3qL8McqZ
8SHEpxMrY9TsY8DIkFzgvaPIJIq83fmYNO207tdf9B5Kxa4rSVIHeI8GF1oQqv0V
mj4SBEKijzSAR4cwwXBvE7WhY4C8EZ8Xgu1MJmRZvU2ZyQhq1hycKFiDXtcj0Keh
4PSKJvUsS6yvJghsj3pwxfscIW/SJUsqYHb1TUYLyB30k4ZcxyvcHL77umnRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8brlLPx8eOvJONiHTEPFUIs9mIcwHwYDVR0j
BBgwFoAUgflpmJIuoh+hATNw6rhIDl7bn1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC84MUY5Njk5ODkyMkVBMjFGQTEwMTMzNzBFQUI4NDgwRTVFREI5RjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxRjk2OTk4OTIyRUEyMUZB
MTAxMzM3MEVBQjg0ODBFNUVEQjlGNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKzNwwDQYJKoZIhvcNAQELBQADggEBAMt2+8k9
44Le26Vi1EE0BXHYmhhJpfID4CL+5kxa1tmh3Yh7/cehMCjDqD8EBygQ59p7KbUi
jfkdz2NvQ9ji6Ki+8YfsysKbxYuAyyKzhLYsAPDhOIxBDx3hLJ/LI1jyaEFtSXUO
P0NCikSTSpNxWaYtz4Mdp2BIsUcQkb5N3uHnLRgCsR9Rbx72KRYUL5glT8EyVCKd
RncBVWbjeZ8QjF8IlephiVKaqBtTzJe/Ac0QFtfcGE7ZkjS5nV0JAsYnXA2E6UHO
7+L49B4XPqQDqN/HFsIYlCBCpGxKPbS65TcLQOkzpadwmvxEDXo22p3DIpTHC1ep
dCFSq2s8tBJ/x2Y=
-----END CERTIFICATE-----
Generated at Thu May 7 00:51:17 2026 by rpki-client