
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
File: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier: I1BErZdub5B9JkEuijpnkXOArIXRlPDq+e51nCX2ebU=
Subject key identifier: 26:E2:DA:28:DE:AF:79:BD:04:3E:00:AC:63:68:0A:12:EA:DC:E0:A0
Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial: 1FA062917494F9273C4A7B2C73B63BFD4E7EB124
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
Signing time: Wed 25 Feb 2026 12:25:17 +0000
ROA not before: Wed 25 Feb 2026 12:20:17 +0000
ROA not after: Wed 24 Feb 2027 12:25:17 +0000
asID: 263424
IP address blocks: 138.121.216.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a0:62:91:74:94:f9:27:3c:4a:7b:2c:73:b6:3b:fd:4e:7e:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Validity
Not Before: Feb 25 12:20:17 2026 GMT
Not After : Feb 24 12:25:17 2027 GMT
Subject: CN=26E2DA28DEAF79BD043E00AC63680A12EADCE0A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:12:b5:98:26:18:3d:0d:e9:21:2c:d0:94:
0e:98:2e:bd:48:f1:d0:01:69:c0:54:74:6a:31:23:
90:52:03:40:e0:1a:bf:86:31:f7:f6:8d:09:98:89:
5b:a6:e9:29:c8:da:b1:ed:fd:da:99:43:1f:80:7e:
bf:2b:58:49:5a:7b:9d:6e:93:b6:30:bb:fc:f4:68:
41:14:5c:c6:47:21:64:db:02:72:2b:ba:82:6b:53:
7f:ac:9a:25:fb:07:db:45:66:2e:2d:ec:4f:65:ba:
44:66:2a:63:26:74:e0:c9:27:01:0f:18:52:76:05:
ee:37:ca:ba:76:0b:40:e3:81:d8:91:7c:2d:2c:19:
3c:d7:3c:d0:bf:18:74:68:da:b6:ac:cb:b5:94:c0:
fe:70:fe:5d:56:fb:61:65:d4:bf:ac:65:6e:85:c5:
a6:a5:df:5b:b5:58:5d:da:63:34:8f:50:83:ac:e5:
6b:e0:79:60:5a:53:03:16:86:b1:98:17:2f:c0:ca:
e9:cb:84:68:26:44:23:3b:53:e2:df:b4:f5:c4:d9:
65:48:0d:50:40:da:b7:11:75:02:e2:e0:74:66:05:
23:00:9e:9d:3a:d8:30:a7:6b:c3:d9:e4:d1:37:bf:
7f:bd:21:1f:cb:6e:0e:31:a9:3b:b4:b3:d2:e2:4e:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E2:DA:28:DE:AF:79:BD:04:3E:00:AC:63:68:0A:12:EA:DC:E0:A0
X509v3 Authority Key Identifier:
keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.216.0/22
Signature Algorithm: sha256WithRSAEncryption
15:57:97:2b:43:15:71:5c:8c:fd:c3:9c:88:81:84:50:ce:00:
c6:be:4d:37:e9:99:21:66:21:70:d3:59:7b:3e:94:12:ce:03:
10:a3:6d:8a:9b:3d:83:c0:87:18:17:d8:7a:a6:07:1b:09:ac:
fd:d8:45:df:e7:45:ef:b5:83:e4:db:bb:ed:2a:c8:cd:d3:25:
55:0a:da:f1:f9:a0:11:25:61:2d:0c:ab:00:51:8c:37:9c:f9:
22:d0:80:0f:0e:95:84:4e:af:48:8a:96:6b:6a:3e:67:af:ae:
5a:cb:85:f4:ef:c0:37:54:59:f1:94:39:ef:83:20:a3:ab:ce:
73:14:ee:5b:09:5a:6f:a2:b5:91:52:c6:98:5a:c1:9a:a0:4e:
69:b9:0a:67:06:d2:c5:a8:3b:2b:f1:7c:51:8c:9b:e6:a0:d0:
57:97:d8:3d:90:8c:a6:b1:1b:56:a2:02:19:26:1e:01:32:4e:
eb:a3:9d:ed:14:77:c8:21:25:0d:8f:06:c3:49:21:d9:18:d0:
12:5f:4b:cb:d8:b3:82:cd:c8:0f:2a:b6:b1:5c:9b:63:5c:c1:
49:a3:d5:d3:bb:87:76:7b:96:eb:fd:88:af:58:75:9b:33:40:
50:87:7f:5b:e0:1e:7f:83:d9:02:28:20:51:72:f7:c8:10:7a:
38:54:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:59:50 2026 by rpki-client