
$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3332203d3e203238323034.roa
File: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (raw, json)
Hash identifier: mDfQLK61XcBdcZJh8AKS28XE2sEJ3Uz/m7Pd8PTtlc4=
Subject key identifier: CB:47:69:77:57:B0:FC:D8:3A:E5:C3:41:2D:DC:9B:98:67:C0:E0:F5
Certificate issuer: /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial: 316F5C71BA805195FDDB33B6811FA4FF589A874A
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3332203d3e203238323034.roa
Signing time: Thu 09 Oct 2025 14:32:40 +0000
ROA not before: Thu 09 Oct 2025 14:27:40 +0000
ROA not after: Thu 08 Oct 2026 14:32:40 +0000
asID: 28204
IP address blocks: 189.91.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 16:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6f:5c:71:ba:80:51:95:fd:db:33:b6:81:1f:a4:ff:58:9a:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
Validity
Not Before: Oct 9 14:27:40 2025 GMT
Not After : Oct 8 14:32:40 2026 GMT
Subject: CN=CB47697757B0FCD83AE5C3412DDC9B9867C0E0F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:a7:58:55:19:6b:ad:80:79:dc:74:62:9f:
95:ec:3d:80:89:5a:c1:7c:45:7b:9c:39:d4:5e:d3:
be:c2:f0:25:c3:a1:33:3e:75:ee:3d:91:8d:e3:3b:
ed:f7:dc:a9:0f:f3:a4:7d:ab:bf:c1:be:44:77:69:
17:58:a6:61:13:e6:d2:35:72:e9:7d:b8:83:8a:11:
e9:15:0e:53:91:df:8c:91:ec:83:6a:9f:7c:2d:6d:
c2:01:d5:5f:85:f3:5f:bf:df:d7:d3:a3:38:b7:03:
48:6d:52:44:61:15:72:a1:a7:29:3d:7a:5e:5f:59:
3b:c7:65:f1:2c:7e:2c:a1:9a:5b:9b:71:23:5e:d2:
0d:9d:76:08:6a:10:2d:50:1d:d5:80:60:e9:18:df:
48:a1:6c:58:91:26:68:ec:86:0d:ed:69:5a:f1:fd:
a5:fa:a0:77:85:13:bf:8f:f7:1c:ac:4c:e0:64:bf:
90:9b:8f:15:84:a4:4e:5d:41:8b:9a:e5:e1:80:95:
5a:db:f4:d5:4d:7f:70:13:5f:e3:cb:10:22:a9:75:
99:7e:03:9d:5a:4d:47:e7:63:e7:c5:0d:fd:97:8d:
ea:8a:5d:76:16:c2:d0:84:26:be:0c:8f:22:66:94:
ed:ff:62:a3:d5:67:c5:b5:5e:1d:8e:39:1b:0d:b4:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:69:77:57:B0:FC:D8:3A:E5:C3:41:2D:DC:9B:98:67:C0:E0:F5
X509v3 Authority Key Identifier:
keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3332203d3e203238323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.91.48.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:39:0a:1d:02:a3:4b:6f:ed:2d:52:44:f5:87:a9:56:6f:df:
cb:37:90:c3:90:da:49:79:9d:3c:d6:55:ea:e9:72:48:7d:fd:
88:56:df:63:35:8a:28:ce:79:21:c2:bc:fc:99:e7:06:29:8c:
0e:92:a3:99:38:ab:25:6f:e1:59:69:ec:b8:af:28:67:df:09:
4c:99:eb:2b:5b:48:a0:4c:67:0d:52:08:3c:91:8f:da:8c:58:
44:bb:d8:9f:5c:40:a2:fb:93:1e:25:58:d3:05:7d:d9:44:5c:
d0:6c:7b:d2:e1:34:8a:dc:95:ef:a5:62:a1:76:30:cd:a6:89:
72:34:02:eb:fc:88:7d:9a:1c:c6:4f:08:50:fc:3c:b9:61:33:
25:00:ea:5b:71:7f:22:61:93:0e:78:db:e9:07:d3:0f:f3:84:
23:23:bd:6c:6f:7d:42:2c:93:3f:47:48:70:d6:04:ac:61:20:
36:85:5b:dd:a5:39:3d:7a:d3:da:01:e2:c9:dc:b1:58:c7:b5:
5e:14:9e:ed:52:4e:ec:24:d6:51:6d:1d:24:10:e9:f3:f7:b5:
ba:6e:53:78:a5:71:98:c0:34:0d:c6:77:de:de:af:3a:fe:db:
1d:66:5d:ec:3e:cf:45:62:09:e0:bb:d4:0a:f3:e7:92:31:a5:
a7:7d:0f:05
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMW9ccbqAUZX92zO2gR+k/1iah0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD
NkFFMjlCRTAeFw0yNTEwMDkxNDI3NDBaFw0yNjEwMDgxNDMyNDBaMDMxMTAvBgNV
BAMTKENCNDc2OTc3NTdCMEZDRDgzQUU1QzM0MTJEREM5Qjk4NjdDMEUwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCKdYVRlrrYB53HRin5XsPYCJ
WsF8RXucOdRe077C8CXDoTM+de49kY3jO+333KkP86R9q7/BvkR3aRdYpmET5tI1
cul9uIOKEekVDlOR34yR7INqn3wtbcIB1V+F81+/39fTozi3A0htUkRhFXKhpyk9
el5fWTvHZfEsfiyhmlubcSNe0g2ddghqEC1QHdWAYOkY30ihbFiRJmjshg3taVrx
/aX6oHeFE7+P9xysTOBkv5CbjxWEpE5dQYua5eGAlVrb9NVNf3ATX+PLECKpdZl+
A51aTUfnY+fFDf2XjeqKXXYWwtCEJr4MjyJmlO3/YqPVZ8W1Xh2OORsNtCFLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUy0dpd1ew/Ng65cNBLdybmGfA4PUwHwYDVR0j
BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN
RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz
Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Q2tod3lUTkh3TEIxWUxuaU1mTU44dFJhazZUUUxZM2t0NkpwV0RQTUZoLzAv
MzEzODM5MmUzOTMxMmUzNDM4MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODMy
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL1bMDANBgkqhkiG9w0BAQsFAAOCAQEAHzkKHQKjS2/t
LVJE9YepVm/fyzeQw5DaSXmdPNZV6ulySH39iFbfYzWKKM55IcK8/JnnBimMDpKj
mTirJW/hWWnsuK8oZ98JTJnrK1tIoExnDVIIPJGP2oxYRLvYn1xAovuTHiVY0wV9
2URc0Gx70uE0ityV76VioXYwzaaJcjQC6/yIfZocxk8IUPw8uWEzJQDqW3F/ImGT
Dnjb6QfTD/OEIyO9bG99QiyTP0dIcNYErGEgNoVb3aU5PXrT2gHiydyxWMe1XhSe
7VJO7CTWUW0dJBDp8/e1um5TeKVxmMA0DcZ33t6vOv7bHWZd7D7PRWIJ4LvUCvPn
kjGlp30PBQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:27:49 2025 by rpki-client