
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3232203d3e203533313533.roa
File: 3133382e3230342e3232302e302f32322d3232203d3e203533313533.roa (raw, json)
Hash identifier: xuAPN0zXuZWChAWzamo5GWXrIJKrKaeowaBdz/DQQLI=
Subject key identifier: 5E:4A:8E:87:40:66:49:67:99:4F:2C:C3:86:89:88:9C:1C:4D:03:A5
Certificate issuer: /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial: 0A15D519DFF7BA1120C5DAC87E5585A7B118EEB4
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3232203d3e203533313533.roa
Signing time: Mon 25 May 2026 14:12:19 +0000
ROA not before: Mon 25 May 2026 14:07:19 +0000
ROA not after: Mon 24 May 2027 14:12:19 +0000
asID: 53153
IP address blocks: 138.204.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 20:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:15:d5:19:df:f7:ba:11:20:c5:da:c8:7e:55:85:a7:b1:18:ee:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Validity
Not Before: May 25 14:07:19 2026 GMT
Not After : May 24 14:12:19 2027 GMT
Subject: CN=5E4A8E8740664967994F2CC38689889C1C4D03A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:c1:64:bb:34:83:1c:08:3d:1f:a8:1b:51:
9f:8f:c0:05:55:90:2f:cd:e1:77:76:fe:e2:86:cf:
43:ca:56:6a:33:44:94:6b:c0:21:8f:9a:8c:5c:86:
be:98:a4:a7:bf:26:47:f4:70:e3:fa:dd:c5:ab:46:
60:86:1c:6e:98:38:1d:cb:93:cc:0e:aa:6f:5c:13:
09:40:38:7c:fe:03:15:48:32:2e:67:a9:a3:59:3e:
a3:22:aa:0e:f1:7e:f4:73:cb:5f:eb:96:92:d0:c7:
8e:34:cd:6a:2e:1c:fa:9c:7b:8c:24:67:78:24:fd:
54:ae:63:81:a4:f9:fb:f6:6b:f2:ce:d1:cf:1c:4d:
1c:69:d5:69:75:1a:da:15:d8:d2:fe:f9:a6:78:f9:
73:8a:56:a5:ba:b6:69:82:0e:ae:e6:71:9c:bc:3a:
95:5d:01:c0:6e:b4:81:f2:73:d5:e8:37:fd:9e:47:
b0:7d:a7:ae:5d:e9:01:2d:ba:7c:9e:b9:ed:40:43:
6f:27:a9:09:20:83:8c:73:96:cc:6a:95:5a:61:70:
43:47:26:f0:59:0f:78:74:6d:10:47:99:1b:4b:25:
68:57:62:68:46:9f:38:f4:ea:02:8e:98:98:c6:af:
63:0e:7c:f9:a9:fb:63:fc:eb:ca:05:84:70:12:a7:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:8E:87:40:66:49:67:99:4F:2C:C3:86:89:88:9C:1C:4D:03:A5
X509v3 Authority Key Identifier:
keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3232203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.220.0/22
Signature Algorithm: sha256WithRSAEncryption
08:11:23:10:e4:87:b2:15:dd:01:24:ff:e2:96:6e:1a:38:a9:
50:48:43:17:bb:ef:8a:79:a0:27:22:a9:93:69:a0:cc:0b:0c:
02:a1:70:c8:f9:17:71:f0:52:45:30:17:a1:7a:3c:f0:04:8e:
ef:7d:36:01:1a:cf:dd:92:fd:99:72:9a:da:6a:ef:3d:52:c7:
d9:6f:42:31:2e:51:02:dd:cd:d5:c4:bc:6c:06:57:7b:e0:3e:
f5:22:00:d3:f9:81:73:92:a1:1b:d3:a0:d0:70:a3:80:10:d9:
25:4e:63:85:e3:90:23:67:96:45:1b:4a:f6:58:5e:76:af:ba:
d3:a3:eb:0d:30:2a:54:e5:f7:8a:57:4a:3c:73:1f:e5:57:81:
6b:56:e6:ef:44:97:9c:ed:44:fa:e4:0b:09:81:64:c3:0b:ff:
83:ce:3d:c8:40:6f:83:99:8c:b2:4f:8f:47:ed:2c:3c:ec:06:
e2:64:af:01:33:dc:27:2c:4c:32:c1:08:67:cb:eb:e9:ef:54:
8a:c7:e9:6c:ba:67:7b:f7:32:ac:fe:df:10:63:c6:95:d4:7b:
1a:3c:6a:ee:77:cc:7d:dc:da:76:38:69:dc:93:e9:42:6d:b5:
f0:3a:23:da:ac:b6:dd:9e:83:b0:7d:22:0d:63:8e:54:06:65:
65:f3:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:03:03 2026 by rpki-client