
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
File: 3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: Gg2R92dMv7OLIRKMlNNDEL/pc5zuQzsVAaj8fa8KQ+k=
Subject key identifier: 79:1D:A5:99:3D:2E:BF:55:30:63:00:26:D4:3A:EE:21:63:BF:D1:8C
Certificate issuer: /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial: 292182677960CE81301FF57A0A35BF5981F04CE4
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
Signing time: Mon 25 May 2026 14:12:19 +0000
ROA not before: Mon 25 May 2026 14:07:19 +0000
ROA not after: Mon 24 May 2027 14:12:19 +0000
asID: 53153
IP address blocks: 138.204.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 20:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:21:82:67:79:60:ce:81:30:1f:f5:7a:0a:35:bf:59:81:f0:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Validity
Not Before: May 25 14:07:19 2026 GMT
Not After : May 24 14:12:19 2027 GMT
Subject: CN=791DA5993D2EBF5530630026D43AEE2163BFD18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:72:3c:a5:1b:83:03:f8:24:b2:c2:d6:22:
16:61:89:49:4e:63:42:15:54:ba:c2:da:fa:9c:ba:
94:15:a7:2a:31:2f:04:9a:6f:cb:03:69:08:38:60:
0f:d6:c9:b9:9f:16:42:b6:88:6e:f7:95:dd:d6:f6:
c7:35:6c:2d:28:46:27:a2:80:3a:44:68:70:81:d8:
a3:38:5b:bb:1f:c4:ca:39:a7:77:b7:42:a8:53:bb:
aa:f4:ef:5c:e4:3e:92:e6:f8:b5:44:a1:c1:43:12:
f6:8e:7d:ef:be:f5:70:ca:77:99:03:b7:8c:81:dc:
c0:d2:bc:43:a4:f7:a1:8a:90:4e:83:f5:fc:dc:53:
fa:14:47:4a:05:53:13:b8:9b:46:ba:dc:3f:0d:5c:
a6:93:7d:76:c7:20:9b:49:87:a9:e5:67:7a:a0:de:
5f:62:44:e7:82:9e:36:5f:d4:9a:ab:6f:bf:28:4f:
17:80:b1:b3:9e:24:8f:1f:24:91:78:0c:4a:ea:ce:
bc:70:b1:ba:c1:97:a2:46:28:77:e1:54:52:97:1a:
7e:a8:24:54:a7:3a:52:b4:a1:8b:1b:c6:25:8b:7b:
c9:d2:72:64:9c:a5:82:9c:64:c0:be:12:b0:db:16:
09:7a:7d:e6:46:92:38:95:86:95:a3:bd:0f:17:62:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:A5:99:3D:2E:BF:55:30:63:00:26:D4:3A:EE:21:63:BF:D1:8C
X509v3 Authority Key Identifier:
keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.221.0/24
Signature Algorithm: sha256WithRSAEncryption
36:36:03:ea:dc:d6:b8:88:72:4e:d9:08:cf:1a:ee:17:99:c2:
8d:92:1c:a8:99:f3:8e:4d:fb:20:f1:8c:65:1e:38:ca:e7:1f:
68:6e:04:39:5f:3e:ab:25:a5:8e:29:16:ea:25:93:04:c1:e4:
53:c7:bb:9d:ff:22:98:38:77:bc:ce:de:ce:3b:b1:fc:af:7b:
b1:e1:3f:17:65:e5:fa:30:72:5f:08:5f:e6:85:63:18:b1:0f:
d3:af:69:50:81:c2:e7:4c:0e:6c:ac:e1:df:d6:63:02:c7:51:
7d:16:ad:ff:a8:08:95:52:3d:a8:c2:d5:2d:9f:ae:01:87:a0:
c7:6e:38:10:4d:b0:98:75:cf:4a:93:f5:dd:48:f0:c0:62:8e:
11:c1:64:a8:f1:83:27:4c:86:33:77:23:53:16:da:82:98:b7:
b1:50:76:1b:80:23:0b:8b:e3:1f:c5:bd:20:08:83:75:4b:b4:
dd:2f:2c:97:a5:8f:11:1d:ed:f7:04:81:1d:0f:4f:97:87:86:
fa:6b:59:37:a7:c6:6b:c1:89:be:9d:a7:a7:72:f4:a7:c0:c0:
12:90:f3:52:1c:ac:84:9d:ed:12:da:8a:ea:e2:16:31:89:4d:
f1:fe:61:9f:57:cf:29:c2:65:20:e5:80:dc:41:5e:67:b0:f9:
8f:dc:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:53:02 2026 by rpki-client