
$ rpki-client -vvvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3234203d3e20323730393434.roa
File: 3133382e302e3130392e302f32342d3234203d3e20323730393434.roa (raw, json)
Hash identifier: giWLnw1ryY9Fr7XBO+yYMxs6MEVvRWoCcCo1nrPp0kQ=
Subject key identifier: 3E:4B:EB:A3:E5:F2:30:5C:84:73:20:14:DD:B2:C3:84:49:0F:26:CB
Certificate issuer: /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
Certificate serial: 527D1CA88870988DCD70F46DF9511DC1493B2EB6
Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3234203d3e20323730393434.roa
Signing time: Wed 12 Aug 2026 13:11:10 +0000
ROA not before: Wed 12 Aug 2026 13:06:10 +0000
ROA not after: Wed 11 Aug 2027 13:11:10 +0000
asID: 270944
IP address blocks: 138.0.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl
rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 13:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7d:1c:a8:88:70:98:8d:cd:70:f4:6d:f9:51:1d:c1:49:3b:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
Validity
Not Before: Aug 12 13:06:10 2026 GMT
Not After : Aug 11 13:11:10 2027 GMT
Subject: CN=3E4BEBA3E5F2305C84732014DDB2C384490F26CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:fa:2f:f1:89:6e:40:5e:ac:ed:3a:e0:66:
d0:9d:b7:03:07:83:aa:b1:b4:60:14:b9:e4:16:3a:
6b:70:83:bb:42:39:60:ee:80:23:94:55:c8:f1:b5:
b9:1a:43:c4:2e:7a:6f:b9:f6:f3:7d:8c:dc:49:f1:
23:aa:04:77:ec:fd:4a:8b:4e:56:c1:5f:f9:0f:5a:
68:2e:95:b1:d7:65:04:1d:a4:a8:6c:ca:45:ee:52:
f8:67:e6:7a:6e:c4:b8:05:e4:e3:93:e0:28:49:b1:
22:7d:8a:aa:4d:1c:f6:0f:2f:f0:f8:6d:b0:c6:8e:
c9:14:3d:c4:eb:d3:79:23:51:bd:49:ea:13:c1:46:
30:41:55:d4:19:60:24:31:67:b4:e8:9f:d0:3a:e6:
5f:81:ad:45:23:a3:0c:bf:73:28:0d:01:12:d0:82:
83:c7:fa:00:05:b3:49:b9:db:3a:41:aa:11:16:3d:
f0:50:fb:20:0c:ad:bc:e7:57:9d:2e:2c:88:0b:0b:
de:bc:69:7a:04:00:84:6f:e8:d1:3c:70:e8:97:01:
33:2a:87:46:78:f0:78:42:fe:43:89:36:5d:63:24:
54:f4:fa:d8:49:41:55:9c:af:eb:6e:27:71:8e:a9:
25:84:c8:a1:e9:48:e6:77:09:90:c2:9c:c8:fb:27:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:EB:A3:E5:F2:30:5C:84:73:20:14:DD:B2:C3:84:49:0F:26:CB
X509v3 Authority Key Identifier:
keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3234203d3e20323730393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:98:39:92:6c:32:be:77:08:0a:00:0c:1c:e4:9c:8b:f2:1c:
40:78:53:a8:6a:0a:2d:89:5a:d1:f2:5c:f1:17:a3:70:35:13:
d7:07:f7:14:cf:0c:9b:6c:fe:61:b5:e0:3a:3d:75:3a:bc:0f:
36:b5:2a:0f:d0:96:78:15:a4:36:60:b2:b2:e2:58:e1:bd:b0:
12:3c:d5:96:c2:86:7c:9e:17:42:58:a8:7d:41:f3:fe:52:27:
a6:08:10:1f:6d:b6:a2:44:d6:f5:8e:e1:1c:99:c6:8b:cf:5e:
8e:3d:89:25:30:93:36:b1:76:10:7d:20:7e:60:70:e9:48:e9:
dc:a4:7c:5b:f7:54:71:24:16:c1:db:71:74:94:cb:64:7f:aa:
39:0a:31:43:77:ff:46:46:9e:4a:55:a6:03:b7:52:ee:ff:88:
82:bd:17:e5:f5:a3:4a:40:a8:b7:05:f1:d5:02:ff:e4:2e:7f:
d5:2b:ef:a0:93:6c:06:b7:69:11:dc:26:34:91:37:ff:ff:1e:
5a:45:8e:c5:b8:4c:d8:cf:14:55:57:98:d7:ca:0c:2d:bc:d4:
5f:e6:fd:42:80:e4:09:3e:e3:8c:80:7f:f2:c5:5f:5c:95:36:
6e:09:a6:c9:47:e9:22:31:73:02:5a:59:63:bb:d3:9e:e8:b7:
0e:d6:5c:9b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUn0cqIhwmI3NcPRt+VEdwUk7LrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1MzgwNkU2N0M2NjFFQjA3NkY1RkJBMjUwNkZBNTE4
QUZENTdCODAeFw0yNjA4MTIxMzA2MTBaFw0yNzA4MTExMzExMTBaMDMxMTAvBgNV
BAMTKDNFNEJFQkEzRTVGMjMwNUM4NDczMjAxNEREQjJDMzg0NDkwRjI2Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMfov8YluQF6s7TrgZtCdtwMH
g6qxtGAUueQWOmtwg7tCOWDugCOUVcjxtbkaQ8Quem+59vN9jNxJ8SOqBHfs/UqL
TlbBX/kPWmgulbHXZQQdpKhsykXuUvhn5npuxLgF5OOT4ChJsSJ9iqpNHPYPL/D4
bbDGjskUPcTr03kjUb1J6hPBRjBBVdQZYCQxZ7Ton9A65l+BrUUjowy/cygNARLQ
goPH+gAFs0m52zpBqhEWPfBQ+yAMrbznV50uLIgLC968aXoEAIRv6NE8cOiXATMq
h0Z48HhC/kOJNl1jJFT0+thJQVWcr+tuJ3GOqSWEyKHpSOZ3CZDCnMj7J2vfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPkvro+XyMFyEcyAU3bLDhEkPJsswHwYDVR0j
BBgwFoAUhVOAbmfGYesHb1+6JQb6UYr9V7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1JaNEJkVHg0alVYa29wMXZlOWIzR1JjSDRjbWlZQjZMSkNGM1JFREpR
Sm0vMC84NTUzODA2RTY3QzY2MUVCMDc2RjVGQkEyNTA2RkE1MThBRkQ1N0I4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NTM4MDZFNjdDNjYxRUIw
NzZGNUZCQTI1MDZGQTUxOEFGRDU3QjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdSWjRCZFR4NGpVWGtvcDF2ZTliM0dSY0g0Y21pWUI2TEpDRjNSRURKUUptLzAv
MzEzMzM4MmUzMDJlMzEzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigBtMA0GCSqGSIb3DQEBCwUAA4IBAQBNmDmSbDK+
dwgKAAwc5JyL8hxAeFOoagotiVrR8lzxF6NwNRPXB/cUzwybbP5hteA6PXU6vA82
tSoP0JZ4FaQ2YLKy4ljhvbASPNWWwoZ8nhdCWKh9QfP+UiemCBAfbbaiRNb1juEc
mcaLz16OPYklMJM2sXYQfSB+YHDpSOncpHxb91RxJBbB23F0lMtkf6o5CjFDd/9G
Rp5KVaYDt1Lu/4iCvRfl9aNKQKi3BfHVAv/kLn/VK++gk2wGt2kR3CY0kTf//x5a
RY7FuEzYzxRVV5jXygwtvNRf5v1CgOQJPuOMgH/yxV9clTZuCabJR+kiMXMCWllj
u9Oe6LcO1lyb
-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:55 2026 by rpki-client