
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa (raw, json)
Hash identifier: /6a7zbAYHHIAtcdcfbAPtN/3MyIrg87anpncb5vwH/w=
Subject key identifier: D0:63:EF:73:04:80:FF:C3:6E:3B:02:43:1B:D3:97:52:0F:BD:07:81
Certificate issuer: /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial: 7B9E59DE98943C2951E9B68ACC50F4B6659F81B8
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
Signing time: Wed 01 Oct 2025 17:59:34 +0000
ROA not before: Wed 01 Oct 2025 17:54:34 +0000
ROA not after: Wed 30 Sep 2026 17:59:34 +0000
asID: 263940
IP address blocks: 138.185.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 13:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9e:59:de:98:94:3c:29:51:e9:b6:8a:cc:50:f4:b6:65:9f:81:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Validity
Not Before: Oct 1 17:54:34 2025 GMT
Not After : Sep 30 17:59:34 2026 GMT
Subject: CN=D063EF730480FFC36E3B02431BD397520FBD0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:d7:cb:0a:49:be:80:82:d1:3e:15:44:42:
5b:d3:a6:2c:13:f2:b7:ef:13:a5:58:4f:63:04:a3:
f4:cc:6b:39:e4:87:e6:7b:49:c9:6a:5a:e8:41:ac:
66:00:d4:72:ab:88:d8:b8:bb:b9:1a:78:97:6e:0f:
f3:1d:e8:2e:46:8d:3a:36:45:ad:a1:ef:51:c6:5c:
bb:14:8e:be:27:23:a8:1b:e9:46:5c:3c:80:e8:f1:
aa:33:c5:db:ae:17:74:8b:70:cf:dd:46:42:d7:eb:
57:97:9f:ff:98:ac:f1:bc:34:13:06:76:3b:7f:81:
a5:8b:fe:79:20:57:1a:29:d4:d4:6c:fa:b1:70:3f:
c0:80:68:24:6e:ae:61:ed:33:78:f3:a4:58:be:81:
a8:69:c2:9b:28:12:86:c0:34:69:00:ba:8c:27:76:
5a:78:67:82:a9:39:6a:3f:d6:82:5c:ca:3e:1a:67:
e4:6b:a5:5c:55:49:e6:e7:53:df:85:f8:70:a2:fb:
94:5a:e1:c0:23:e4:3e:10:0a:6f:27:e6:67:00:15:
52:21:47:13:6a:af:73:c3:57:51:30:8c:39:c6:a5:
8c:0a:7a:19:ad:a7:b7:65:39:5f:f1:d9:26:ca:f6:
48:c4:ed:7a:8d:20:7e:55:66:22:0d:67:32:3d:bf:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:EF:73:04:80:FF:C3:6E:3B:02:43:1B:D3:97:52:0F:BD:07:81
X509v3 Authority Key Identifier:
keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:22:e3:ae:29:99:59:b9:a1:37:3e:bb:08:2c:da:bc:03:3c:
fc:81:5a:dd:3d:60:d3:f2:b1:a5:b7:6f:c8:8f:84:2b:44:96:
17:a9:4a:23:61:f5:f7:e1:b3:48:f0:e9:60:d8:d9:f6:0d:b5:
99:f0:31:c7:3f:7f:80:71:d1:4e:18:24:df:e9:8a:7a:67:b9:
12:b1:10:8d:62:ab:c4:cb:9d:40:4f:42:c8:71:9e:54:07:64:
35:8a:b0:44:d3:8c:c7:f8:eb:e2:72:6e:e0:45:b2:10:40:61:
e3:36:b4:e6:e1:83:72:f1:ff:0a:3f:44:ca:17:fd:93:4e:80:
4f:2f:b7:91:60:94:08:88:be:07:e4:44:3f:09:e4:ad:15:19:
55:84:68:d0:fa:55:49:b0:2f:69:d0:eb:cd:6e:a8:bf:2e:d8:
dc:26:01:dd:7e:dc:5d:a1:f5:85:ec:a7:e0:42:0d:97:68:f9:
96:31:e9:e1:cf:3d:4f:e8:89:3d:d0:85:33:59:07:90:35:cb:
70:ce:5d:78:46:3a:e7:8a:4c:2a:3d:37:cf:6e:62:05:19:32:
dd:f9:7c:3b:bd:c7:03:d3:b5:1b:6e:2f:e2:b0:02:61:c4:79:
1d:35:10:ab:a8:68:7d:71:da:89:65:8b:a3:4f:b4:08:eb:8f:
95:70:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:51 2025 by rpki-client