
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34322e302f32332d3233203d3e20323634313230.roa
File: 3133382e39372e34322e302f32332d3233203d3e20323634313230.roa (raw, json)
Hash identifier: A+NL2pRnuAneBSvey73zd9f5JeNP+MDIvBaJ+QKc2uA=
Subject key identifier: 5E:39:18:34:6C:24:F4:EC:D0:83:FC:9C:98:2C:80:57:8E:2D:F3:26
Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial: 2DD8A35A85010E983391DD88179BE06F505E3249
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34322e302f32332d3233203d3e20323634313230.roa
Signing time: Mon 02 Mar 2026 15:40:36 +0000
ROA not before: Mon 02 Mar 2026 15:35:36 +0000
ROA not after: Mon 01 Mar 2027 15:40:36 +0000
asID: 264120
IP address blocks: 138.97.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d8:a3:5a:85:01:0e:98:33:91:dd:88:17:9b:e0:6f:50:5e:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Validity
Not Before: Mar 2 15:35:36 2026 GMT
Not After : Mar 1 15:40:36 2027 GMT
Subject: CN=5E3918346C24F4ECD083FC9C982C80578E2DF326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:e2:c3:bf:71:a3:53:13:db:9b:2f:7b:9c:
98:98:9e:92:8c:06:1f:67:bb:04:8a:55:14:03:12:
07:3f:82:22:96:05:78:b2:ef:dd:38:f3:f7:aa:56:
26:d3:12:8e:8c:f6:2f:3c:32:46:40:42:56:89:4c:
f2:aa:da:00:b1:87:84:60:3a:7f:fd:2f:31:6b:bd:
9c:c2:72:70:89:18:6a:4e:94:d6:2a:6a:4d:8a:69:
45:8d:e9:b3:67:26:12:03:82:66:0a:7a:07:c2:5b:
d6:fe:89:2f:8b:30:d5:56:8f:26:a9:31:4a:e2:73:
28:bf:49:86:ed:6a:fe:d4:d8:c1:65:0e:92:04:16:
e2:65:59:95:1a:4b:c0:47:4d:e7:d9:a4:9b:c1:43:
5e:2b:f1:53:60:25:09:5a:8f:d8:16:ad:3b:0e:e7:
cb:74:a3:01:b8:40:43:7b:56:2e:9e:db:29:ce:cf:
d6:ed:dc:78:42:c7:99:4f:04:05:7b:21:b9:30:31:
d5:f1:e7:c5:1d:0c:e7:eb:66:a4:b7:00:57:67:ed:
99:dd:80:a1:a9:2c:ee:f8:48:76:4b:42:a2:a1:7e:
7d:62:5f:aa:50:db:ea:1d:9d:2c:c0:61:d7:77:fa:
52:a2:39:dd:2f:d4:b5:77:04:35:44:4a:86:74:f0:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:39:18:34:6C:24:F4:EC:D0:83:FC:9C:98:2C:80:57:8E:2D:F3:26
X509v3 Authority Key Identifier:
keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34322e302f32332d3233203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:1b:cb:8a:27:df:f1:6c:a2:1c:86:24:83:9f:61:ac:60:56:
6a:db:af:ad:fc:e7:bf:ee:f5:2b:6d:88:9e:30:87:d8:96:4c:
51:9c:c9:d5:b2:12:3c:7e:ad:4b:4f:ed:88:cc:dd:b8:88:c6:
ed:b0:75:d2:d9:b0:ab:b3:36:0c:ae:be:f1:cb:20:27:97:ac:
98:b2:2a:e3:9d:eb:23:a4:58:82:b4:7f:e9:af:83:fb:62:25:
cf:f7:ba:1b:06:0f:fc:70:35:78:f4:73:85:6d:32:25:e1:90:
3d:57:90:1f:eb:4f:e0:29:20:f6:9a:b8:64:5c:11:b8:cf:5b:
fb:0a:73:7e:be:06:3f:22:fc:40:e5:b1:46:97:ec:87:a6:91:
8d:96:80:d0:97:95:28:de:22:75:75:86:8c:3e:4d:d4:d0:47:
3e:46:fd:0c:85:6b:1f:10:2b:e0:db:72:eb:09:d9:80:fc:c8:
6d:dd:05:36:3e:59:69:0d:47:f2:df:0f:29:e3:46:54:db:93:
13:82:d9:0c:26:87:48:be:2e:13:fe:bd:11:3c:67:c1:39:8d:
97:76:6e:24:7e:5c:1e:9b:a8:3b:fe:51:aa:dd:3e:a1:33:08:
85:8b:6a:56:cd:c8:cd:cd:d0:1d:cf:0c:29:db:79:07:88:d7:
83:bc:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:32 2026 by rpki-client