
$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
File: 3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier: NGixxQ5l7MyGDeYPfpObFBTQUrUD1eigKjrGnOHmNL4=
Subject key identifier: 3E:33:FE:BB:63:6F:06:C0:02:80:7F:3E:DD:45:B8:F6:26:CA:68:FF
Certificate issuer: /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial: 253AD817730F720FC0AF0437AF47E6ACD9469FAF
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
Signing time: Tue 06 Oct 2026 20:37:08 +0000
ROA not before: Tue 06 Oct 2026 20:32:08 +0000
ROA not after: Tue 05 Oct 2027 20:37:08 +0000
asID: 272228
IP address blocks: 189.126.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 15:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3a:d8:17:73:0f:72:0f:c0:af:04:37:af:47:e6:ac:d9:46:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
Validity
Not Before: Oct 6 20:32:08 2026 GMT
Not After : Oct 5 20:37:08 2027 GMT
Subject: CN=3E33FEBB636F06C002807F3EDD45B8F626CA68FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:f9:89:15:cd:02:36:dc:15:96:d8:6a:4a:
a1:b1:7e:5e:50:6f:50:84:e9:6a:bd:8e:af:be:d3:
73:f8:61:c8:4e:dc:77:4c:60:b1:17:db:aa:39:34:
a7:80:78:21:d7:b8:f4:7a:a8:51:62:10:00:30:00:
ef:71:25:4a:3a:b0:71:16:29:0e:a3:a7:62:77:40:
99:88:d3:a6:ee:56:3b:4f:ca:8e:82:c9:6f:6c:97:
b5:b3:d1:3f:17:20:2b:a6:db:2e:52:90:b5:e7:a6:
bf:1c:83:a9:55:f9:fa:c7:ad:59:cd:c5:d8:6d:77:
20:3d:4b:d1:e5:36:16:4e:f7:79:5b:c2:17:f6:2d:
be:bb:34:7d:e2:78:e7:9c:29:39:0a:96:9c:f1:27:
69:e2:d5:11:bb:e1:51:cc:5c:37:8b:3f:38:cb:b2:
43:5f:78:65:5f:7a:06:eb:42:63:ec:ca:02:fa:bc:
ea:cc:3b:44:de:e7:7d:94:47:9b:9b:7f:90:85:4c:
64:70:c7:3b:00:6e:62:6f:76:44:23:95:fb:d8:d3:
a7:6c:f4:1d:13:f0:37:35:26:a1:a4:19:7f:f0:c1:
9c:f6:35:b1:1e:a9:ea:13:6e:9a:38:4c:b5:cd:ce:
4b:50:f9:0e:cd:f1:2d:0b:ee:90:fe:d0:81:0a:20:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:FE:BB:63:6F:06:C0:02:80:7F:3E:DD:45:B8:F6:26:CA:68:FF
X509v3 Authority Key Identifier:
keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.130.0/24
Signature Algorithm: sha256WithRSAEncryption
63:61:2d:33:00:2d:ec:4b:ec:db:90:55:c3:54:fd:31:b7:db:
c3:85:77:10:1b:63:79:71:a5:da:6e:2f:3c:f0:c4:71:fe:ed:
a8:5f:19:95:08:88:ec:81:33:42:1b:68:50:2f:6f:1f:d0:c5:
52:75:18:19:5a:5c:18:2b:5e:46:c6:ab:1b:13:54:ab:aa:a0:
7c:e9:66:14:d7:c3:e7:fd:94:1e:1c:98:05:79:ba:39:28:da:
b0:99:e2:2c:35:a4:5c:c3:b7:c0:15:9b:b0:f4:7f:98:9f:ff:
3d:42:25:24:56:b5:9f:f0:11:16:ef:6c:34:c7:38:5d:c0:b0:
de:f2:da:fe:43:03:30:1e:29:b6:17:86:cf:64:13:f9:2b:77:
bc:fa:a9:d2:30:52:3a:ec:33:93:93:db:f4:ff:9d:b4:a9:33:
71:f5:ea:1f:88:d3:34:29:32:97:1a:b5:c6:c7:6a:ed:ab:f1:
fa:ea:a4:c9:0f:bb:8a:56:3f:ab:a7:2a:27:ef:c0:0c:a4:92:
6e:66:29:d5:79:79:83:a9:1d:34:d9:97:44:1e:66:24:be:25:
f1:a7:21:49:d1:df:d0:50:f5:e0:de:68:77:2e:2d:07:57:08:
2c:22:66:16:d1:3f:c7:8d:c6:b1:c5:a3:74:ef:68:3b:6a:7c:
9c:02:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:29:03 2026 by rpki-client