
$ rpki-client -vvvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa
File: 3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa (raw, json)
Hash identifier: AWbT+tKGf4DwO87f4FJU4hPJfomXl0AmArbZSH7dIJw=
Subject key identifier: 21:B5:53:C4:B8:B1:C8:B8:3B:85:E9:A0:B6:23:C6:EB:30:D5:DD:2B
Certificate issuer: /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial: 1B17245BA687899968A6CE9D0A19447C5BB17521
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa
Signing time: Sat 08 Aug 2026 11:27:20 +0000
ROA not before: Sat 08 Aug 2026 11:22:20 +0000
ROA not after: Sat 07 Aug 2027 11:27:20 +0000
asID: 53140
IP address blocks: 187.120.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 16:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:17:24:5b:a6:87:89:99:68:a6:ce:9d:0a:19:44:7c:5b:b1:75:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Validity
Not Before: Aug 8 11:22:20 2026 GMT
Not After : Aug 7 11:27:20 2027 GMT
Subject: CN=21B553C4B8B1C8B83B85E9A0B623C6EB30D5DD2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7d:ae:76:7e:cd:7a:b0:e2:79:d7:ab:23:4b:
32:4f:ec:bc:ba:73:f1:85:70:ab:03:3c:e8:c7:68:
ef:44:5b:c3:f8:1c:df:ab:d0:cd:89:22:1b:27:81:
32:bd:fb:9c:21:29:7a:68:82:3d:36:d0:4b:b1:46:
86:dc:41:7c:35:a8:6b:45:b5:27:70:0f:d5:67:e9:
72:d7:da:96:ae:af:3e:3b:79:b1:ed:b7:e6:a2:c0:
be:e5:7f:20:df:3c:e5:23:21:04:43:1e:a1:2d:fb:
e7:fb:fa:41:d8:cc:a3:52:7c:d0:3e:6d:8d:a8:e5:
9e:63:03:fe:78:e1:f7:6b:63:39:d3:a8:69:13:ec:
b5:b6:9d:b8:c0:c9:aa:58:63:22:96:03:f1:5f:c4:
6c:da:a2:13:f4:66:46:17:bb:9a:54:40:5d:14:91:
b6:8a:ed:69:f9:4e:7a:a3:e0:d1:e3:8f:69:45:14:
19:35:a1:c4:4d:97:c8:7b:d9:74:06:de:a1:13:da:
6b:e5:19:37:ad:20:ac:f9:f2:67:58:3f:ac:e5:7f:
9e:59:33:7c:b6:74:f5:3d:2e:45:60:48:50:04:57:
e0:46:d8:44:9c:7c:5b:ab:be:34:f4:34:d9:1f:dc:
f3:fe:15:63:c4:e1:17:b0:da:68:df:5d:55:6e:44:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:53:C4:B8:B1:C8:B8:3B:85:E9:A0:B6:23:C6:EB:30:D5:DD:2B
X509v3 Authority Key Identifier:
keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.120.200.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:30:79:16:fe:77:17:75:96:0a:b0:08:7a:81:f6:ce:27:aa:
af:5c:a9:9d:64:49:59:2b:4c:a6:27:cd:8c:7b:41:90:4a:d6:
c8:9d:3e:16:82:62:ce:e7:1f:bb:ff:03:13:d6:2d:c7:9f:d1:
e9:5d:0d:71:d4:10:2e:7e:18:90:58:bb:c5:72:41:5d:eb:4b:
28:bb:02:a8:b1:fa:cd:6d:6d:ec:3d:c5:bd:01:ba:3d:e2:5e:
6c:4c:d5:43:c2:c6:c9:e2:2f:57:0a:43:82:4e:e1:69:87:ce:
d6:1b:d9:e6:c8:ad:b4:b0:86:76:f3:b6:20:2c:43:fd:4d:ba:
1d:f9:8f:3a:ad:e8:4c:c9:de:07:7d:9a:13:aa:90:cb:44:45:
ec:b6:01:8b:82:49:aa:30:f8:0d:62:93:5c:af:3d:27:35:a4:
01:d6:ca:2f:8b:2c:24:2c:a6:43:d5:b1:e9:aa:21:42:b1:f9:
16:93:2d:be:8a:4a:5d:be:02:af:7a:a9:ba:44:50:ec:83:51:
7a:bb:93:e0:d7:d7:91:7f:87:39:45:f1:6b:af:c9:33:3c:0a:
50:b5:0c:33:58:f7:af:96:b6:d7:02:26:a3:5b:3e:20:01:f1:
5b:82:98:c7:be:00:9a:87:20:0d:d7:5d:96:bf:47:40:8d:02:
07:6f:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:39:27 2026 by rpki-client