
$ rpki-client -vvvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
File: 3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa (raw, json)
Hash identifier: TOhH4J5bIHzWLmgDvlBbW6TBn5b8wuPjvwm/ZEm4jqs=
Subject key identifier: D7:80:EA:58:34:ED:F2:B8:C4:AC:3B:68:61:B4:A2:D8:3A:3B:C5:F9
Certificate issuer: /CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
Certificate serial: 6D75E22565418918DF82471DD2F883B3589BB689
Authority key identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
Signing time: Tue 11 Aug 2026 16:19:04 +0000
ROA not before: Tue 11 Aug 2026 16:14:04 +0000
ROA not after: Tue 10 Aug 2027 16:19:04 +0000
asID: 264323
IP address blocks: 138.121.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl
rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 19:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:75:e2:25:65:41:89:18:df:82:47:1d:d2:f8:83:b3:58:9b:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
Validity
Not Before: Aug 11 16:14:04 2026 GMT
Not After : Aug 10 16:19:04 2027 GMT
Subject: CN=D780EA5834EDF2B8C4AC3B6861B4A2D83A3BC5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:ac:82:32:48:c3:b8:88:be:21:65:3e:fc:
de:1d:3f:44:a1:53:a0:1b:7b:0f:1a:c0:e9:62:db:
91:94:3b:15:76:52:10:4d:b4:54:e5:9b:5b:69:c0:
0a:14:36:50:1b:0b:59:f0:76:9c:17:eb:ef:dd:e4:
09:e5:a6:bb:db:5e:e7:cf:09:44:32:2c:30:f1:28:
93:0c:4d:63:d9:dd:d2:3f:8d:0b:5b:c0:53:02:40:
19:b7:2b:ed:99:84:e9:09:80:cc:86:f1:31:ff:24:
d9:c8:b1:e3:bb:24:17:66:e0:a0:e3:90:ef:a6:a4:
4e:c1:ac:a3:90:b7:b3:d2:a0:e4:8e:60:73:13:6d:
04:24:99:26:ea:d7:1f:91:f9:d5:9e:ea:a8:c1:b0:
48:c1:ff:63:9a:34:3f:1c:6b:93:ce:d1:7e:b8:a7:
38:4f:66:6e:c5:e9:52:18:64:0a:29:c8:06:9f:36:
f0:8d:3c:97:ad:9b:05:d2:1e:0a:40:c9:9f:b3:a5:
85:73:97:d6:8f:9a:eb:9f:63:5a:8d:f6:b0:28:5a:
f6:7b:62:24:e7:24:c4:f4:e0:36:23:dd:38:b4:7c:
0f:ba:54:7d:dc:54:23:49:2f:48:02:89:4e:a0:8c:
3a:b6:91:5f:95:1e:c9:3d:51:0f:41:cf:3d:51:93:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:EA:58:34:ED:F2:B8:C4:AC:3B:68:61:B4:A2:D8:3A:3B:C5:F9
X509v3 Authority Key Identifier:
keyid:C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.244.0/22
Signature Algorithm: sha256WithRSAEncryption
60:97:20:c4:35:56:d6:30:81:95:99:77:72:5c:0d:12:14:ab:
b5:9a:04:4f:f3:8b:e1:18:47:a9:3a:4a:35:5f:f4:3c:0a:93:
b1:4b:67:a5:7e:2e:1d:08:0c:71:ee:ff:20:ad:98:8c:6f:97:
e0:50:4f:d7:51:b2:ed:37:6f:dc:56:31:f1:a0:d9:ea:07:de:
4c:9b:6e:60:15:dc:24:a4:f5:d7:8b:9c:28:1c:68:1b:9d:a7:
03:80:fa:36:64:ec:08:1e:84:b4:3a:c8:22:51:94:09:ec:c7:
40:54:44:ee:1b:f9:c7:c9:01:71:d9:33:e5:20:fd:1a:22:5c:
85:d5:36:08:ab:23:33:28:41:a1:64:8d:c7:99:4d:e2:d1:20:
86:18:d1:dd:48:b3:da:83:e7:05:6c:a0:4e:38:4b:08:15:05:
84:22:ad:9b:a0:bf:37:0e:4e:fc:c8:13:ef:d8:49:55:74:79:
a3:e5:51:87:10:6d:9d:16:08:46:ae:fe:1b:6b:f2:a8:66:3b:
9c:a0:f3:5d:14:68:7f:9d:46:4c:bc:fc:22:62:10:e8:4c:4a:
60:07:90:5e:45:20:e0:49:88:fc:59:82:e2:86:17:68:ea:5d:
a0:fc:81:03:2a:d3:91:eb:34:b3:2a:66:90:fa:55:89:67:0c:
60:9e:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:42:00 2026 by rpki-client