
$ rpki-client -vvvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
File: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (raw, json)
Hash identifier: O82PiKdF1gUPCyrGtYkmyjcXYRuPKQYjkqJN0ZWDbDw=
Subject key identifier: FF:E3:77:04:C9:8B:36:D3:E4:61:A7:18:1F:41:7B:8C:EA:C2:39:27
Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial: 4396B08779DC94B94868D3821BB82964E6EBFDED
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
Signing time: Thu 20 Aug 2026 21:06:22 +0000
ROA not before: Thu 20 Aug 2026 21:01:22 +0000
ROA not after: Thu 19 Aug 2027 21:06:22 +0000
asID: 264517
IP address blocks: 138.117.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 20:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:96:b0:87:79:dc:94:b9:48:68:d3:82:1b:b8:29:64:e6:eb:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Validity
Not Before: Aug 20 21:01:22 2026 GMT
Not After : Aug 19 21:06:22 2027 GMT
Subject: CN=FFE37704C98B36D3E461A7181F417B8CEAC23927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:cc:bb:06:a4:e0:1d:cd:6d:c3:59:7b:6c:
21:8c:c0:f9:10:c0:02:1e:4d:16:5d:f2:79:1a:6f:
11:1b:5f:ac:46:86:fe:13:08:09:10:c7:2e:06:52:
b0:94:0b:47:15:6e:2b:a9:24:c6:f9:73:66:e2:fb:
25:1f:16:19:1c:60:8f:46:89:34:ee:62:0c:bb:68:
7a:57:47:1d:95:df:5e:11:50:e4:f6:c5:3d:19:41:
49:c8:e8:52:6b:35:38:8a:a2:4a:fc:98:a3:21:a3:
27:cb:33:48:f3:2d:cc:26:ee:a1:be:49:4e:ae:c9:
8f:cc:69:04:03:1d:34:48:79:1d:ec:55:0e:74:69:
c2:58:cf:95:c3:7f:aa:90:91:c2:ac:e3:a4:0e:e8:
d0:13:5f:82:33:68:c6:c1:2e:71:fb:71:cf:2b:b7:
87:68:e3:04:bb:14:3f:55:36:fa:fb:dd:e3:af:97:
b5:df:7a:6c:2c:fd:13:ad:05:d3:18:56:74:1f:d3:
99:86:85:0d:a2:77:f3:1f:8e:82:91:f7:e5:67:69:
56:3c:f1:b7:8e:95:57:50:55:8c:66:dd:3a:fc:c0:
71:ae:54:34:11:f0:85:ce:73:ca:69:10:07:2e:81:
00:ec:f8:52:53:29:16:e9:c4:0e:70:00:54:ca:c8:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:77:04:C9:8B:36:D3:E4:61:A7:18:1F:41:7B:8C:EA:C2:39:27
X509v3 Authority Key Identifier:
keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:23:3a:ad:c7:e8:b1:52:2b:10:39:33:c8:57:f0:63:5c:af:
4f:71:0b:a6:47:3d:28:9d:30:6c:bc:60:02:68:9f:1a:7c:dc:
d2:84:21:e8:4b:62:5b:79:61:f1:0c:2f:04:77:f5:8f:f4:7e:
05:5f:3a:1c:a4:62:6a:87:9b:f0:47:3a:6d:20:2b:3a:77:2b:
7d:97:d8:fd:f7:4d:a2:af:21:c2:79:89:e2:9e:41:f3:21:ff:
01:86:b0:f9:71:f6:4a:11:e8:90:7e:f3:fc:1e:24:27:dc:01:
3c:af:a0:5b:1a:5a:e1:58:f9:c0:b8:1a:6c:e7:f6:ba:71:c0:
4c:64:b8:2b:45:b1:3f:af:c5:b4:3a:10:a7:17:e5:f0:33:a5:
7b:83:1c:f8:ab:eb:57:9a:9c:42:56:cf:8d:93:81:83:f8:03:
12:3b:c4:55:34:54:2c:b0:f0:1c:58:cc:e3:61:e7:f4:e1:66:
0e:20:e0:22:67:4b:c4:1e:76:46:b4:60:74:23:db:93:b7:16:
b4:19:33:4d:4e:d7:28:56:e4:ef:fc:34:ea:d6:5e:81:da:70:
4e:4b:5e:53:ea:59:dc:84:8d:dc:33:57:ab:19:c4:cf:7d:a4:
b7:2d:70:2b:32:f0:ae:fc:05:22:f9:e0:0f:b9:52:8b:24:e1:
9b:22:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:40:07 2026 by rpki-client