
$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235312e302f32342d3234203d3e20323632333933.roa
File: 3133382e3132312e3235312e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier: rxFRoawfLjX2wLgyRC1b485LUc9jhz8jbBJRADCOG2w=
Subject key identifier: FE:39:01:D2:2A:C9:DA:B7:96:72:1B:CD:ED:27:83:B0:69:1C:BE:BA
Certificate issuer: /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial: 48D490F54CDAAD0D04D8C2D1E6A2E532DA4AACF7
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235312e302f32342d3234203d3e20323632333933.roa
Signing time: Sat 28 Feb 2026 15:57:25 +0000
ROA not before: Sat 28 Feb 2026 15:52:25 +0000
ROA not after: Sat 27 Feb 2027 15:57:25 +0000
asID: 262393
IP address blocks: 138.121.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 12:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d4:90:f5:4c:da:ad:0d:04:d8:c2:d1:e6:a2:e5:32:da:4a:ac:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Validity
Not Before: Feb 28 15:52:25 2026 GMT
Not After : Feb 27 15:57:25 2027 GMT
Subject: CN=FE3901D22AC9DAB796721BCDED2783B0691CBEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:d4:52:42:17:37:03:b3:ec:40:94:38:ce:
d3:26:34:9a:ad:7c:e7:58:99:3f:02:1d:45:d9:4f:
d2:10:d1:2e:a0:37:c4:b8:81:f2:1a:df:35:55:98:
c9:94:2b:0f:2d:f2:ae:7c:e7:75:1e:2f:bd:b3:ec:
7c:2d:50:ec:f7:ff:bd:bc:38:21:27:d8:f6:cf:8d:
7f:ff:9f:3d:21:c2:60:b3:43:c9:c0:c9:93:41:0d:
54:20:6b:df:95:4e:1e:15:e5:22:e1:77:7c:11:d2:
9f:5a:42:64:b1:7f:aa:ed:af:8e:a6:ce:b2:2d:c0:
1f:96:29:78:12:86:29:09:4e:33:f9:b3:c0:36:f9:
29:fc:db:71:c3:ea:e4:5c:56:96:a9:e3:03:dc:7c:
08:47:9c:54:95:a0:11:b5:14:9c:19:91:04:17:d7:
ff:d3:82:52:e8:66:3b:fc:bd:c9:a8:5a:38:5e:87:
15:e9:42:5f:34:a7:a0:ea:77:25:bd:ba:a0:d1:14:
49:92:f3:43:3f:81:51:d4:5e:b5:f4:79:76:7d:c3:
df:ef:ec:2d:fa:8b:cd:42:51:07:91:bc:c1:10:24:
98:94:77:4f:86:74:ae:a9:0d:ac:f2:42:fa:66:3a:
34:c7:eb:e5:ca:79:3b:42:40:81:71:5c:e0:4b:e5:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:01:D2:2A:C9:DA:B7:96:72:1B:CD:ED:27:83:B0:69:1C:BE:BA
X509v3 Authority Key Identifier:
keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235312e302f32342d3234203d3e20323632333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.251.0/24
Signature Algorithm: sha256WithRSAEncryption
11:62:01:ed:ba:bd:69:d7:f7:01:0f:c9:6e:79:42:59:fe:69:
28:38:21:07:71:13:6d:06:c4:ee:f4:59:88:39:bf:48:cd:dc:
08:f5:05:39:53:67:bf:6d:0f:7a:9e:c7:d8:52:0f:45:60:69:
f7:78:12:13:06:f0:f1:6c:a3:69:ca:1f:37:41:84:4e:56:79:
12:00:3b:b0:b1:3b:5e:97:2a:81:72:94:3a:43:26:82:d4:8a:
cc:05:ba:ab:18:ad:79:b3:73:f0:5a:27:5b:ec:64:96:69:61:
36:3d:55:41:00:c6:e5:48:38:22:17:8b:31:d2:0a:7b:15:cd:
4b:b0:25:f1:f0:b1:33:5b:05:f8:8c:f4:f6:21:d2:68:c9:75:
c5:8a:3d:ca:88:c0:44:f7:7e:b9:dd:d2:86:51:82:37:bf:33:
f6:ed:1b:1b:10:88:43:aa:92:19:53:bd:a8:6a:32:59:4e:cd:
70:51:63:62:d8:76:c5:d4:c4:34:4c:9b:24:18:0b:88:e9:0f:
3d:af:e5:8b:e7:67:c2:c0:04:7e:52:09:a1:4f:3a:39:79:0f:
fa:0c:d2:b3:4e:74:5c:ac:4a:e5:75:ea:06:63:29:8b:8f:1d:
27:a7:32:9b:b2:87:52:c7:e4:92:1b:62:a3:4b:77:a2:c1:0f:
6a:59:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:56:32 2026 by rpki-client