
$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa
File: 3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa (raw, json)
Hash identifier: 6RufVOjRX9HbX1SWIijClFVumnoC1HpgfqscqiyTnM4=
Subject key identifier: 40:3F:C8:7C:78:4A:15:84:DF:19:3D:6B:44:F5:16:E6:49:0C:86:FF
Certificate issuer: /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial: 142DBC42F35F4E604141D2088141E38167065AD6
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa
Signing time: Mon 17 Aug 2026 17:48:32 +0000
ROA not before: Mon 17 Aug 2026 17:43:32 +0000
ROA not after: Mon 16 Aug 2027 17:48:32 +0000
asID: 14868
IP address blocks: 200.195.128.0/18 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2d:bc:42:f3:5f:4e:60:41:41:d2:08:81:41:e3:81:67:06:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
Validity
Not Before: Aug 17 17:43:32 2026 GMT
Not After : Aug 16 17:48:32 2027 GMT
Subject: CN=403FC87C784A1584DF193D6B44F516E6490C86FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:ed:c7:9f:0a:0c:00:12:d9:a5:88:b1:02:
4b:6d:dd:6c:45:47:6f:eb:b9:2f:2b:5e:d8:cf:94:
5c:bd:aa:ef:1a:98:68:f8:fb:91:91:96:18:c4:75:
b2:da:7b:5b:00:9c:18:64:3c:81:36:d1:a6:62:44:
ec:1b:c8:ef:45:8b:87:31:39:ef:91:8b:18:ae:66:
f7:05:94:3c:39:61:5b:4e:38:0e:00:bb:a4:f6:9d:
97:3f:9b:1e:d9:fd:e1:42:4f:11:79:c6:c3:76:e1:
8b:f6:0f:50:af:43:09:7a:13:97:06:6d:d5:fe:99:
cf:ef:fa:1a:b2:03:d2:2e:4f:24:ce:3a:b0:97:d2:
ab:cd:23:35:28:ce:06:52:55:0a:fa:6b:93:82:a0:
54:73:0d:5e:1b:9a:87:96:58:ea:47:2b:ce:a5:db:
2f:42:c3:7f:11:cf:92:e4:54:27:a2:4c:02:10:e8:
d6:85:29:63:ed:4e:1b:2c:70:f6:7c:08:95:d9:13:
01:a7:10:f2:72:e2:ab:34:47:f6:66:8c:7f:6c:1d:
04:e7:0c:59:22:9f:45:75:e4:7a:78:ff:b9:bc:02:
25:43:46:6e:02:28:0b:1b:d5:e8:83:b2:8c:67:55:
bd:39:b6:2a:1c:d3:64:89:af:79:6a:de:19:04:97:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:C8:7C:78:4A:15:84:DF:19:3D:6B:44:F5:16:E6:49:0C:86:FF
X509v3 Authority Key Identifier:
keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.195.128.0/18
Signature Algorithm: sha256WithRSAEncryption
54:48:e0:a0:02:8d:cb:2d:89:14:5d:04:f5:9a:de:6c:f5:a0:
a0:e9:e7:09:db:8b:0b:a8:1c:27:21:9b:fa:93:89:7e:35:35:
8c:e3:cc:17:23:79:62:76:7f:96:68:ef:9a:97:c3:8a:33:e3:
10:b1:d0:0d:99:89:5d:47:f8:b0:88:96:cc:0b:88:32:2f:9c:
08:92:b7:1a:7c:70:97:74:d4:14:56:92:5b:63:7c:f9:55:1d:
c2:16:d5:5f:1d:6d:91:8a:68:69:b6:48:8d:77:82:6e:6e:65:
31:38:44:51:ae:2d:bf:b8:57:96:94:9b:13:96:2c:15:fe:a7:
58:bd:b9:ad:b7:b6:78:37:ac:91:8f:e0:b9:f8:f7:89:39:a3:
76:66:09:30:d6:41:7d:b6:7b:e6:cc:6c:ca:82:4f:94:df:6e:
d5:1f:00:5c:1e:f6:81:d4:89:a1:6e:13:4f:65:5b:a4:68:88:
7e:de:6f:7d:a7:07:70:d3:2f:8c:9f:f3:fd:fe:5f:3c:61:e1:
3e:e2:c8:4f:ba:78:81:7a:ce:da:6c:ea:f8:57:74:45:55:99:
b2:c7:2c:3f:cc:7c:51:00:0a:36:48:2f:33:0d:2f:5b:d2:a9:
3d:54:d8:85:5b:f2:d9:ac:29:2c:b3:3f:49:2c:97:7e:db:c8:
c6:f0:76:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFC28QvNfTmBBQdIIgUHjgWcGWtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyMDY1NzUwOEQ5MDYwQzNDNkU5Mzk0Mjc4ODNBNDcx
RjREQTM0RjAeFw0yNjA4MTcxNzQzMzJaFw0yNzA4MTYxNzQ4MzJaMDMxMTAvBgNV
BAMTKDQwM0ZDODdDNzg0QTE1ODRERjE5M0Q2QjQ0RjUxNkU2NDkwQzg2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQv+3HnwoMABLZpYixAktt3WxF
R2/ruS8rXtjPlFy9qu8amGj4+5GRlhjEdbLae1sAnBhkPIE20aZiROwbyO9Fi4cx
Oe+RixiuZvcFlDw5YVtOOA4Au6T2nZc/mx7Z/eFCTxF5xsN24Yv2D1CvQwl6E5cG
bdX+mc/v+hqyA9IuTyTOOrCX0qvNIzUozgZSVQr6a5OCoFRzDV4bmoeWWOpHK86l
2y9Cw38Rz5LkVCeiTAIQ6NaFKWPtThsscPZ8CJXZEwGnEPJy4qs0R/ZmjH9sHQTn
DFkin0V15Hp4/7m8AiVDRm4CKAsb1eiDsoxnVb05tioc02SJr3lq3hkEl1jLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQD/IfHhKFYTfGT1rRPUW5kkMhv8wHwYDVR0j
BBgwFoAUmSBldQjZBgw8bpOUJ4g6Rx9No08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGtmTExzaE5BOEtCVjFtaUpNZ2p2OTV2Z2ZrdmE4V3pndktVNEFvaGM3
WWovMi85OTIwNjU3NTA4RDkwNjBDM0M2RTkzOTQyNzg4M0E0NzFGNERBMzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MjA2NTc1MDhEOTA2MEMz
QzZFOTM5NDI3ODgzQTQ3MUY0REEzNEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRrZkxMc2hOQThLQlYxbWlKTWdqdjk1dmdma3ZhOFd6Z3ZLVTRBb2hjN1lqLzIv
MzIzMDMwMmUzMTM5MzUyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzEyMDNkM2UyMDMx
MzQzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIw4AwDQYJKoZIhvcNAQELBQADggEBAFRI4KAC
jcstiRRdBPWa3mz1oKDp5wnbiwuoHCchm/qTiX41NYzjzBcjeWJ2f5Zo75qXw4oz
4xCx0A2ZiV1H+LCIlswLiDIvnAiStxp8cJd01BRWkltjfPlVHcIW1V8dbZGKaGm2
SI13gm5uZTE4RFGuLb+4V5aUmxOWLBX+p1i9ua23tng3rJGP4Ln494k5o3ZmCTDW
QX22e+bMbMqCT5TfbtUfAFwe9oHUiaFuE09lW6RoiH7eb32nB3DTL4yf8/3+Xzxh
4T7iyE+6eIF6ztps6vhXdEVVmbLHLD/MfFEACjZILzMNL1vSqT1U2IVb8tmsKSyz
P0ksl37byMbwdlU=
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:35 2026 by rpki-client