
$ rpki-client -vvvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa
File: 3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier: TwYdX4jM3QedEWS6osCRBbCbeoc4jXMPI4WEAcNci1c=
Subject key identifier: 00:F7:B3:E2:B4:FA:44:67:B0:3E:BE:89:BC:63:1D:4E:13:D1:C5:5C
Certificate issuer: /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial: 5EFA4A553381E86D099EC7333042D47C6B4BD664
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa
Signing time: Mon 10 Aug 2026 14:34:26 +0000
ROA not before: Mon 10 Aug 2026 14:29:26 +0000
ROA not after: Mon 09 Aug 2027 14:34:26 +0000
asID: 263569
IP address blocks: 138.118.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 12:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fa:4a:55:33:81:e8:6d:09:9e:c7:33:30:42:d4:7c:6b:4b:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Validity
Not Before: Aug 10 14:29:26 2026 GMT
Not After : Aug 9 14:34:26 2027 GMT
Subject: CN=00F7B3E2B4FA4467B03EBE89BC631D4E13D1C55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:2e:6e:1c:69:10:d1:b3:e7:a7:53:80:df:
6f:40:2a:8d:7a:7b:38:a4:c0:9b:e8:0b:f3:8d:d3:
99:52:77:ae:94:69:a0:a4:03:cf:51:a0:ae:18:04:
da:0f:c4:94:27:c1:98:4b:74:39:5d:12:08:9a:46:
2c:fb:8d:52:01:3d:95:fe:7c:75:68:e6:65:67:3e:
17:de:6c:ae:5d:07:3b:ae:54:37:9a:85:04:a9:f1:
1f:6e:d0:76:08:86:7b:7c:9d:4d:45:27:c6:d9:4f:
03:df:e3:df:aa:aa:7e:57:1b:f0:06:28:e3:6f:c7:
bd:8e:e5:ca:44:4e:25:8b:69:f5:0b:27:b9:72:56:
69:8a:06:f0:9c:46:b0:14:24:30:fd:e1:24:d6:fc:
42:45:f5:92:00:7f:73:43:17:a9:0d:c3:f0:97:69:
8c:0e:4f:d3:20:b0:b4:17:00:d4:45:2f:9e:f3:65:
68:60:80:50:d1:4e:dd:8b:12:8a:2b:ec:6d:87:f0:
30:70:95:99:46:7b:b3:01:f0:d8:47:ae:f1:d3:f2:
9b:b8:bf:cc:ed:ba:5f:f0:97:a1:c0:a4:dc:de:f8:
6d:f4:9c:20:75:50:dc:c7:27:bd:ad:42:e5:00:4f:
50:2e:32:ed:2e:f8:f2:0b:24:f2:5c:15:4b:58:49:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F7:B3:E2:B4:FA:44:67:B0:3E:BE:89:BC:63:1D:4E:13:D1:C5:5C
X509v3 Authority Key Identifier:
keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.168.0/22
Signature Algorithm: sha256WithRSAEncryption
65:0d:4c:d7:5e:35:c7:e7:05:4b:36:a5:4c:da:57:89:5b:13:
5e:20:de:da:33:64:8f:dd:ea:d5:e6:98:14:48:44:e4:f0:bb:
54:f0:5e:37:18:64:0e:f4:ad:65:16:f8:5e:5b:b2:86:17:93:
71:a0:84:49:81:dc:2b:be:83:d6:2f:ee:07:12:cb:9a:2f:d0:
44:e9:d6:de:1b:9f:63:0d:21:5e:b2:84:42:31:f2:36:75:89:
bf:7e:28:f1:7e:08:59:fe:e4:bc:62:69:9e:19:c7:2c:41:21:
91:03:da:0f:d2:f8:da:92:a1:9d:b8:08:e6:28:91:43:3e:f6:
ec:f6:4b:5f:7b:a0:67:88:bc:bb:b6:49:1a:da:18:cc:a0:2d:
f6:4e:98:78:5e:20:84:e6:50:21:7f:09:42:45:88:e1:f7:d0:
af:b5:7f:57:e9:cb:dd:af:a1:f6:a9:e9:e0:24:b4:e0:53:54:
c2:8b:f6:c3:4c:2e:60:2f:8e:7e:4c:55:e6:8a:cc:29:06:cb:
a7:ce:8d:af:d0:3e:a1:f2:0a:74:eb:06:ef:1f:9b:20:e6:10:
13:12:07:02:8c:74:f6:3c:01:35:4e:92:41:f7:b1:c8:6a:13:
30:e6:86:8c:32:36:b6:40:58:c1:e9:77:f1:bd:93:c9:bf:42:
75:fe:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:54:53 2026 by rpki-client