
$ rpki-client -vvf rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/3230312e33332e38342e302f32332d3234203d3e20323734333431.roa
File: 3230312e33332e38342e302f32332d3234203d3e20323734333431.roa (raw, json)
Hash identifier: 95qIQvYnJfjKbrID4RzZJKv3odmiEq00ghYPv5iZw7k=
Subject key identifier: D4:A5:83:02:24:71:75:4D:EF:2A:2F:5E:B9:DD:1C:65:2F:4B:64:EC
Certificate issuer: /CN=42CF8AF950150224F27B677F4A1AD4BA306A610F
Certificate serial: 0DB86960456CAE93410B2EBCDD151EA0CC3E928B
Authority key identifier: 42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/3230312e33332e38342e302f32332d3234203d3e20323734333431.roa
Signing time: Wed 20 May 2026 12:04:43 +0000
ROA not before: Wed 20 May 2026 11:59:43 +0000
ROA not after: Wed 19 May 2027 12:04:43 +0000
asID: 274341
IP address blocks: 201.33.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl
rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 09:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b8:69:60:45:6c:ae:93:41:0b:2e:bc:dd:15:1e:a0:cc:3e:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CF8AF950150224F27B677F4A1AD4BA306A610F
Validity
Not Before: May 20 11:59:43 2026 GMT
Not After : May 19 12:04:43 2027 GMT
Subject: CN=D4A583022471754DEF2A2F5EB9DD1C652F4B64EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:8b:f6:ac:f6:ef:a1:0e:59:c9:82:cd:ad:
8f:f8:17:7d:c5:02:e2:de:70:f0:f7:35:a7:84:cc:
c6:28:b9:74:cc:04:b6:63:31:9a:c1:8b:7d:8e:ab:
68:9a:94:87:17:5c:45:44:5d:e7:32:8c:a0:77:92:
5e:c8:e4:37:17:b2:d0:f5:3f:fe:f7:ec:ba:37:d3:
d4:22:cc:71:5c:65:9c:ce:17:82:ea:53:5a:4c:26:
c1:1d:88:f9:91:d9:55:ca:1f:ed:c2:68:96:9f:d9:
60:9c:fe:b3:63:da:99:65:2e:36:f5:c6:d4:08:6a:
f8:77:02:fc:36:4e:b6:9e:a5:05:d9:73:27:89:6c:
42:e3:61:6f:64:ab:4d:5b:69:ec:ec:8d:dc:c8:3e:
88:f1:dc:6e:c8:c3:16:8c:76:2c:ed:4b:3f:c4:1b:
03:4e:ea:c7:b7:53:ef:5a:38:f3:c9:bb:6c:eb:ca:
67:c8:ec:27:d3:6b:10:5f:8a:8d:42:f5:aa:07:8c:
3e:d9:06:59:49:47:c8:44:29:26:45:44:60:fe:2a:
ac:ef:54:64:ab:88:e5:e2:fe:18:dd:94:e8:20:ef:
fc:5d:a9:4d:30:2f:4c:99:74:e3:de:a3:1c:a8:80:
8a:f6:44:1c:a6:02:4f:84:6f:69:0c:e7:55:05:c9:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A5:83:02:24:71:75:4D:EF:2A:2F:5E:B9:DD:1C:65:2F:4B:64:EC
X509v3 Authority Key Identifier:
keyid:42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/3230312e33332e38342e302f32332d3234203d3e20323734333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.33.84.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e2:2e:03:48:8f:99:16:f9:57:26:41:c7:1f:40:f3:5a:d2:
11:0d:ee:09:8b:73:4b:45:a0:8c:57:05:75:90:2e:4f:3d:dd:
c9:ce:8e:22:ed:60:9e:b0:c5:c6:e3:9f:4a:40:3d:3b:f7:12:
f3:c1:96:14:1a:b1:31:c1:1a:0e:49:1e:5b:ff:ae:eb:6a:86:
2e:16:8e:5a:31:8c:13:65:d2:00:22:e3:5e:28:3d:c3:0c:5a:
7e:44:44:25:49:da:52:de:cf:4d:c6:f4:9b:7c:5e:97:4d:4f:
c9:f9:8f:a7:b2:67:2d:3e:4d:d9:0c:be:41:df:a5:6b:6d:99:
04:b0:ad:3b:4e:14:1e:45:51:9f:e5:7e:43:6b:85:1b:34:8d:
db:71:65:74:3a:01:c2:b8:86:db:21:3e:92:c4:52:13:31:63:
10:d0:59:69:89:f6:b1:af:c6:57:9b:56:5e:ca:49:13:4f:e6:
1e:7f:c7:5e:cf:fb:e6:0a:c2:3e:a4:fb:a2:ae:e3:f7:fe:ea:
6f:c2:20:22:5d:e3:f9:73:1a:03:08:24:cb:ca:df:04:9e:82:
08:46:ae:62:cb:e9:8e:65:f3:50:15:71:77:47:ca:27:89:dd:
0c:34:19:33:d8:21:24:89:e4:0e:7f:96:36:8f:e6:25:c6:a4:
6d:1b:31:26
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDbhpYEVsrpNBCy683RUeoMw+koswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDRjhBRjk1MDE1MDIyNEYyN0I2NzdGNEExQUQ0QkEz
MDZBNjEwRjAeFw0yNjA1MjAxMTU5NDNaFw0yNzA1MTkxMjA0NDNaMDMxMTAvBgNV
BAMTKEQ0QTU4MzAyMjQ3MTc1NERFRjJBMkY1RUI5REQxQzY1MkY0QjY0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzG4v2rPbvoQ5ZyYLNrY/4F33F
AuLecPD3NaeEzMYouXTMBLZjMZrBi32Oq2ialIcXXEVEXecyjKB3kl7I5DcXstD1
P/737Lo309QizHFcZZzOF4LqU1pMJsEdiPmR2VXKH+3CaJaf2WCc/rNj2pllLjb1
xtQIavh3Avw2TraepQXZcyeJbELjYW9kq01baezsjdzIPojx3G7IwxaMdiztSz/E
GwNO6se3U+9aOPPJu2zrymfI7CfTaxBfio1C9aoHjD7ZBllJR8hEKSZFRGD+Kqzv
VGSriOXi/hjdlOgg7/xdqU0wL0yZdOPeoxyogIr2RBymAk+Eb2kM51UFyfBnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1KWDAiRxdU3vKi9eud0cZS9LZOwwHwYDVR0j
BBgwFoAUQs+K+VAVAiTye2d/ShrUujBqYQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25G
dUwvMC80MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0Y4QUY5NTAxNTAyMjRG
MjdCNjc3RjRBMUFENEJBMzA2QTYxMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHcHZkQUoxUUs5V2RTNU13dFdtOVlqQ0tQbVFtbjVpeU03dXp3RGNuRnVMLzAv
MzIzMDMxMmUzMzMzMmUzODM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM0
MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBySFUMA0GCSqGSIb3DQEBCwUAA4IBAQBg4i4DSI+Z
FvlXJkHHH0DzWtIRDe4Ji3NLRaCMVwV1kC5PPd3Jzo4i7WCesMXG459KQD079xLz
wZYUGrExwRoOSR5b/67raoYuFo5aMYwTZdIAIuNeKD3DDFp+REQlSdpS3s9NxvSb
fF6XTU/J+Y+nsmctPk3ZDL5B36VrbZkEsK07ThQeRVGf5X5Da4UbNI3bcWV0OgHC
uIbbIT6SxFITMWMQ0Flpifaxr8ZXm1ZeykkTT+Yef8dez/vmCsI+pPuiruP3/upv
wiAiXeP5cxoDCCTLyt8EnoIIRq5iy+mOZfNQFXF3R8onid0MNBkz2CEkieQOf5Y2
j+YlxqRtGzEm
-----END CERTIFICATE-----
Generated at Sun May 24 14:05:40 2026 by rpki-client