
$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3133382e35392e3130342e302f32322d3233203d3e20323632373536.roa
File: 3133382e35392e3130342e302f32322d3233203d3e20323632373536.roa (raw, json)
Hash identifier: xkN73P1HhugRxgRcoB/tJhB8+SpMj/Rdt5WX2ieHcZw=
Subject key identifier: AF:7A:DC:8D:B4:DD:69:AF:03:BA:00:E1:9C:74:3A:3C:A8:B1:AE:22
Certificate issuer: /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial: 7056F0A3E5B53C022B082B66CDDBC1EA603976A9
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3133382e35392e3130342e302f32322d3233203d3e20323632373536.roa
Signing time: Mon 17 Aug 2026 17:48:33 +0000
ROA not before: Mon 17 Aug 2026 17:43:33 +0000
ROA not after: Mon 16 Aug 2027 17:48:33 +0000
asID: 262756
IP address blocks: 138.59.104.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:56:f0:a3:e5:b5:3c:02:2b:08:2b:66:cd:db:c1:ea:60:39:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
Validity
Not Before: Aug 17 17:43:33 2026 GMT
Not After : Aug 16 17:48:33 2027 GMT
Subject: CN=AF7ADC8DB4DD69AF03BA00E19C743A3CA8B1AE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:55:02:98:cb:06:43:98:59:d4:c6:4b:73:
35:95:60:7a:4b:b0:29:2e:53:b5:70:6c:37:32:08:
c7:9d:60:84:33:fa:f6:b2:0f:73:e7:c8:09:88:0b:
f5:48:09:2a:dd:3d:22:0c:27:2d:bb:4a:64:3f:1f:
ff:60:c0:94:e8:9d:89:96:f5:d5:c8:4e:dc:c9:07:
25:6c:b1:5e:2e:a9:02:02:bb:21:43:55:80:4e:02:
6c:d5:1f:49:15:89:62:c3:8f:22:8e:db:51:59:a6:
4a:a9:e2:51:ff:41:35:a3:48:cb:9b:84:af:1d:9a:
e2:48:6a:e4:b5:e5:23:60:64:98:7c:76:ff:b8:27:
dd:dc:34:75:ed:ac:31:84:89:7f:21:8d:34:1b:5c:
c4:33:3f:a7:26:74:54:d1:77:31:b9:d6:d7:0e:17:
6e:69:64:a9:b1:e9:e8:77:bc:bf:83:54:09:ac:b6:
23:e2:48:c5:b6:fd:03:8d:32:52:c8:cf:44:f5:15:
ad:de:80:bc:a5:2e:3c:84:20:84:e7:7e:06:ca:2c:
18:18:26:86:4b:f8:e1:63:bb:96:9f:19:aa:79:66:
8f:7a:11:a9:55:12:d6:e5:fd:38:6f:44:80:b4:01:
65:26:fb:80:5d:9b:bc:fe:d0:9f:4b:47:7b:68:13:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:DC:8D:B4:DD:69:AF:03:BA:00:E1:9C:74:3A:3C:A8:B1:AE:22
X509v3 Authority Key Identifier:
keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3133382e35392e3130342e302f32322d3233203d3e20323632373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.104.0/22
Signature Algorithm: sha256WithRSAEncryption
05:cd:1b:b2:e4:d0:3c:dc:5f:70:2a:55:7e:77:60:ce:58:b2:
a8:1c:c7:63:97:9b:59:03:80:31:ab:99:ec:9e:23:bf:a4:a6:
8f:1d:cc:1a:18:2c:cb:e9:c0:80:6f:52:29:18:6c:ee:70:af:
46:0a:37:ff:e1:e8:6a:bf:a8:7e:44:3a:ea:52:71:2d:ec:d8:
7d:da:35:2c:f5:9a:e2:be:ee:97:3a:a9:0e:d2:8f:4c:bd:de:
04:76:8c:44:54:29:08:74:61:42:b2:96:ed:cb:30:26:8e:06:
da:09:da:f9:18:d2:b5:63:12:37:7f:28:97:e7:4b:d3:db:0c:
b4:97:55:d4:63:41:a5:b5:89:5e:46:98:9f:a8:df:d0:b8:13:
b4:6c:fa:4f:ff:8d:ec:3c:3e:cf:d0:6d:96:50:e6:4c:50:53:
b6:9a:38:16:c8:f4:88:5c:8d:db:73:f7:5c:33:b8:a4:6f:cb:
21:8d:72:4a:17:16:5a:b4:9a:6d:67:27:e1:a7:f4:76:53:f4:
e9:d8:65:61:8f:99:df:e2:10:8b:95:d8:05:37:7a:90:b3:b9:
69:d4:da:3b:50:84:f9:e0:d8:17:0e:a6:9c:e7:96:b5:6b:82:
63:ae:64:e2:98:5a:7b:16:77:c5:f0:29:f2:f0:a8:29:d7:0e:
75:46:5b:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcFbwo+W1PAIrCCtmzdvB6mA5dqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyMDY1NzUwOEQ5MDYwQzNDNkU5Mzk0Mjc4ODNBNDcx
RjREQTM0RjAeFw0yNjA4MTcxNzQzMzNaFw0yNzA4MTYxNzQ4MzNaMDMxMTAvBgNV
BAMTKEFGN0FEQzhEQjRERDY5QUYwM0JBMDBFMTlDNzQzQTNDQThCMUFFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfeVUCmMsGQ5hZ1MZLczWVYHpL
sCkuU7VwbDcyCMedYIQz+vayD3PnyAmIC/VICSrdPSIMJy27SmQ/H/9gwJTonYmW
9dXITtzJByVssV4uqQICuyFDVYBOAmzVH0kViWLDjyKO21FZpkqp4lH/QTWjSMub
hK8dmuJIauS15SNgZJh8dv+4J93cNHXtrDGEiX8hjTQbXMQzP6cmdFTRdzG51tcO
F25pZKmx6eh3vL+DVAmstiPiSMW2/QONMlLIz0T1Fa3egLylLjyEIITnfgbKLBgY
JoZL+OFju5afGap5Zo96EalVEtbl/ThvRIC0AWUm+4Bdm7z+0J9LR3toE7XHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr3rcjbTdaa8DugDhnHQ6PKixriIwHwYDVR0j
BBgwFoAUmSBldQjZBgw8bpOUJ4g6Rx9No08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGtmTExzaE5BOEtCVjFtaUpNZ2p2OTV2Z2ZrdmE4V3pndktVNEFvaGM3
WWovMi85OTIwNjU3NTA4RDkwNjBDM0M2RTkzOTQyNzg4M0E0NzFGNERBMzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MjA2NTc1MDhEOTA2MEMz
QzZFOTM5NDI3ODgzQTQ3MUY0REEzNEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRrZkxMc2hOQThLQlYxbWlKTWdqdjk1dmdma3ZhOFd6Z3ZLVTRBb2hjN1lqLzIv
MzEzMzM4MmUzNTM5MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKO2gwDQYJKoZIhvcNAQELBQADggEBAAXNG7Lk
0DzcX3AqVX53YM5Ysqgcx2OXm1kDgDGrmeyeI7+kpo8dzBoYLMvpwIBvUikYbO5w
r0YKN//h6Gq/qH5EOupScS3s2H3aNSz1muK+7pc6qQ7Sj0y93gR2jERUKQh0YUKy
lu3LMCaOBtoJ2vkY0rVjEjd/KJfnS9PbDLSXVdRjQaW1iV5GmJ+o39C4E7Rs+k//
jew8Ps/QbZZQ5kxQU7aaOBbI9Ihcjdtz91wzuKRvyyGNckoXFlq0mm1nJ+Gn9HZT
9OnYZWGPmd/iEIuV2AU3epCzuWnU2jtQhPng2BcOppznlrVrgmOuZOKYWnsWd8Xw
KfLwqCnXDnVGW4A=
-----END CERTIFICATE-----
Generated at Mon Aug 24 03:08:40 2026 by rpki-client