
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3234203d3e203238313834.roa
File: 3138392e38392e36382e302f32332d3234203d3e203238313834.roa (raw, json)
Hash identifier: j4kYg506EBElUyoQqfX1KjCL79F3wXfASwTxsFIfw4E=
Subject key identifier: 9F:37:32:16:44:2C:E3:F8:C6:B4:36:8B:2C:BE:5B:72:09:41:1C:A1
Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial: 318BCD0784C7170A8A39C76ABDD46A40E6CF37ED
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3234203d3e203238313834.roa
Signing time: Thu 29 Jan 2026 12:08:32 +0000
ROA not before: Thu 29 Jan 2026 12:03:32 +0000
ROA not after: Thu 28 Jan 2027 12:08:32 +0000
asID: 28184
IP address blocks: 189.89.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 13:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8b:cd:07:84:c7:17:0a:8a:39:c7:6a:bd:d4:6a:40:e6:cf:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Validity
Not Before: Jan 29 12:03:32 2026 GMT
Not After : Jan 28 12:08:32 2027 GMT
Subject: CN=9F373216442CE3F8C6B4368B2CBE5B7209411CA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:78:4b:0d:02:dd:1d:3e:9b:08:f9:c0:cf:
2c:ef:bf:4d:e0:06:0c:ad:b7:0d:cb:23:45:79:6d:
3f:f9:a0:e8:18:92:19:83:b5:1b:6b:97:50:10:19:
05:45:62:7e:78:cf:05:15:41:86:eb:32:ba:fe:a9:
c7:71:7b:ab:56:8e:87:bb:ce:0d:ea:db:4d:e3:48:
86:d7:3c:66:ff:85:73:7f:3f:61:92:53:04:47:79:
74:d4:63:4b:f0:c6:70:a7:32:b6:e2:6a:8d:14:ac:
0a:aa:db:0d:e5:b3:e3:92:dc:fa:1f:96:0a:47:fd:
0d:b2:d4:90:a5:70:b5:cf:8a:d4:b1:a8:3c:a6:ec:
c7:08:42:e5:25:93:de:92:f5:3d:d8:7b:d8:b0:bd:
47:9d:e2:8d:d3:cc:3e:08:af:5c:46:eb:32:6d:db:
54:f6:ae:01:90:cd:b3:58:78:ac:b6:3a:99:41:91:
48:eb:8b:57:df:63:ca:e9:ca:0e:f7:fe:86:f6:91:
5f:b7:86:66:7f:bd:88:d4:a9:91:a1:15:84:59:da:
24:6b:59:9a:4e:dd:5a:80:1d:4f:3c:5b:9c:ed:eb:
4e:02:e0:de:f9:2c:db:3e:56:df:99:93:2d:10:8d:
2b:a6:df:9a:68:22:dd:46:73:9b:fe:c7:4f:a9:a7:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:37:32:16:44:2C:E3:F8:C6:B4:36:8B:2C:BE:5B:72:09:41:1C:A1
X509v3 Authority Key Identifier:
keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.68.0/23
Signature Algorithm: sha256WithRSAEncryption
44:bf:26:34:13:d9:29:ec:4a:14:b5:51:5a:1c:a8:dd:4f:07:
51:23:8b:ba:44:44:5a:93:11:08:d2:10:e7:51:59:15:ec:e5:
a6:90:e6:64:4b:61:49:0a:73:8c:c9:18:87:e9:89:25:0d:3a:
53:dc:1c:f8:83:b3:83:1b:45:55:b8:c3:73:ab:03:3a:b9:b2:
7b:a8:32:99:b1:a3:bf:42:56:8e:d1:64:ee:2d:cd:fd:29:1f:
e2:e2:4a:5c:53:ff:15:92:b9:30:72:26:c7:7b:57:6f:8e:a2:
ac:08:06:78:d0:a7:08:ec:eb:60:56:eb:2f:b5:04:0d:d5:2f:
40:d5:54:d8:f2:17:cd:0d:5b:fb:eb:da:dc:12:7c:16:d5:d9:
04:d0:5f:d1:81:23:c5:c6:76:78:a0:fc:eb:9b:43:13:6f:23:
62:db:4a:cc:53:15:af:a3:59:c1:f0:62:1a:f9:7b:aa:d0:2f:
07:97:d3:a2:54:d1:71:e1:fe:10:a3:7b:b9:53:8b:18:35:87:
00:3e:15:7a:85:1e:e0:cb:14:cc:34:b9:74:6d:41:a0:63:54:
0b:12:ab:52:2e:d3:e1:60:80:c6:04:60:d2:48:8f:d2:23:70:
d5:3e:44:f2:4a:45:a2:53:4a:23:d7:b9:fc:f3:ed:23:c3:e4:
5b:3d:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:56 2026 by rpki-client