
$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
File: 3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier: iVJno2DRUNvYOw0fi3CRClqrNAAnWQhLIERSk2jcYG0=
Subject key identifier: 43:BE:9B:63:B4:13:36:D1:4D:1F:07:F3:84:66:CE:F1:65:2B:C8:AE
Certificate issuer: /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial: 16BE147A26F039E4C0EF8BE64A3C91B7B05E9BE1
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
Signing time: Fri 15 Aug 2025 14:51:27 +0000
ROA not before: Fri 15 Aug 2025 14:46:27 +0000
ROA not after: Fri 14 Aug 2026 14:51:27 +0000
asID: 263920
IP address blocks: 138.185.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:be:14:7a:26:f0:39:e4:c0:ef:8b:e6:4a:3c:91:b7:b0:5e:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Validity
Not Before: Aug 15 14:46:27 2025 GMT
Not After : Aug 14 14:51:27 2026 GMT
Subject: CN=43BE9B63B41336D14D1F07F38466CEF1652BC8AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:65:fc:75:18:df:2e:82:e9:9e:af:c6:23:
27:c9:7d:2c:a9:46:2d:2f:88:c1:c0:37:44:f0:38:
30:be:5d:ce:15:d8:da:ae:9b:d7:2a:9a:f1:2b:7f:
0d:6b:40:7e:11:32:6d:27:ee:4b:32:63:24:10:c2:
59:58:6d:f1:0e:a4:c7:94:28:d1:df:b4:b4:fe:66:
52:0f:f9:6f:22:00:42:d5:bb:58:5a:fc:f0:e1:99:
cc:7c:5d:14:28:4e:89:63:8c:fc:85:62:a5:33:56:
6a:42:f1:09:9d:46:bc:aa:88:80:55:91:cd:1e:f3:
f5:07:ed:d1:cb:33:c7:4d:74:14:41:ed:7b:d2:34:
ca:41:ea:38:e0:52:7f:04:7c:d8:2c:4b:f7:9d:54:
9a:6e:ea:85:ef:93:48:70:1d:80:d4:0e:96:e7:96:
48:34:4b:77:e1:79:bc:5e:ed:5b:e1:c9:a9:f6:e2:
38:c7:ac:9c:24:15:2f:f3:0d:a0:42:74:39:9a:1e:
4b:b0:ed:88:c1:cd:43:7f:55:0b:51:d9:27:09:f7:
be:2d:36:a3:82:f2:ec:c6:05:f1:44:5a:02:4a:bc:
88:6d:d5:2f:d0:3b:e5:0f:8b:f4:c2:72:ec:c2:57:
bb:3a:4f:22:cd:35:c8:2d:89:e8:a6:69:90:c3:ab:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:9B:63:B4:13:36:D1:4D:1F:07:F3:84:66:CE:F1:65:2B:C8:AE
X509v3 Authority Key Identifier:
keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:00:ba:dd:cd:24:c1:f5:2e:ba:61:11:4f:3d:b4:d9:1e:7d:
98:14:04:bf:23:44:03:5f:b5:19:ac:f5:59:67:14:b4:d7:e1:
b5:74:7a:b1:ff:f6:d5:08:f6:94:b9:43:1b:ee:71:a0:ed:c4:
24:43:23:2e:51:d5:bb:ac:20:c1:28:07:69:50:e1:35:dd:a4:
c9:f5:cf:9a:71:31:25:ee:ca:6c:8f:3b:6a:4d:c1:06:d8:ed:
fb:c3:48:3e:b4:b1:6e:e8:88:50:30:3d:3c:86:b0:92:d3:c9:
e9:c0:89:c5:f8:f9:48:98:5f:0b:61:c8:84:2e:bb:83:7d:ff:
97:a3:cd:f6:a2:fa:3f:58:1a:64:1e:6a:49:5b:d2:34:4c:a3:
28:48:30:09:68:2b:81:7f:db:20:f7:90:0b:77:37:af:48:07:
97:90:d1:92:ed:ee:8f:c2:c9:ac:43:fc:7b:26:7d:fa:85:9a:
bd:d2:df:a2:22:f5:29:e6:70:dc:1b:9f:c0:bc:6c:31:e4:3e:
9d:6e:68:16:9b:e0:40:c1:b8:86:b7:37:96:9f:25:70:8a:39:
f3:4f:d0:1c:6a:36:c5:8c:03:05:f3:86:07:40:77:22:6f:77:
bf:07:a0:27:ab:04:b1:6f:d9:2d:3b:17:76:52:a1:e6:59:d1:
aa:3a:8f:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFr4UeibwOeTA74vmSjyRt7Bem+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OEE2OEIyQjBDQUE5OEQyRUUzRUU2ODczRjYwQkU5
RTMzQkQ0QjAeFw0yNTA4MTUxNDQ2MjdaFw0yNjA4MTQxNDUxMjdaMDMxMTAvBgNV
BAMTKDQzQkU5QjYzQjQxMzM2RDE0RDFGMDdGMzg0NjZDRUYxNjUyQkM4QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPWX8dRjfLoLpnq/GIyfJfSyp
Ri0viMHAN0TwODC+Xc4V2Nqum9cqmvErfw1rQH4RMm0n7ksyYyQQwllYbfEOpMeU
KNHftLT+ZlIP+W8iAELVu1ha/PDhmcx8XRQoToljjPyFYqUzVmpC8QmdRryqiIBV
kc0e8/UH7dHLM8dNdBRB7XvSNMpB6jjgUn8EfNgsS/edVJpu6oXvk0hwHYDUDpbn
lkg0S3fhebxe7Vvhyan24jjHrJwkFS/zDaBCdDmaHkuw7YjBzUN/VQtR2ScJ974t
NqOC8uzGBfFEWgJKvIht1S/QO+UPi/TCcuzCV7s6TyLNNcgtieimaZDDq3wrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQ76bY7QTNtFNHwfzhGbO8WUryK4wHwYDVR0j
BBgwFoAUyGimiysMqpjS7j7mhz9gvp4zvUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9DODY4QTY4QjJCMENBQTk4RDJFRTNFRTY4NzNGNjBCRTlFMzNCRDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4NjhBNjhCMkIwQ0FBOThE
MkVFM0VFNjg3M0Y2MEJFOUUzM0JENEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq58zANBgkqhkiG9w0BAQsFAAOCAQEAGwC6
3c0kwfUuumERTz202R59mBQEvyNEA1+1Gaz1WWcUtNfhtXR6sf/21Qj2lLlDG+5x
oO3EJEMjLlHVu6wgwSgHaVDhNd2kyfXPmnExJe7KbI87ak3BBtjt+8NIPrSxbuiI
UDA9PIawktPJ6cCJxfj5SJhfC2HIhC67g33/l6PN9qL6P1gaZB5qSVvSNEyjKEgw
CWgrgX/bIPeQC3c3r0gHl5DRku3uj8LJrEP8eyZ9+oWavdLfoiL1KeZw3BufwLxs
MeQ+nW5oFpvgQMG4hrc3lp8lcIo580/QHGo2xYwDBfOGB0B3Im93vwegJ6sEsW/Z
LTsXdlKh5lnRqjqPSQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:59 2025 by rpki-client