
$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
File: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier: DhWML9LbNA2RRgnB1Kuj0sl9O7DJQowUJBfIgbd8raM=
Subject key identifier: 3A:E3:CD:BA:11:12:1A:F3:1A:F2:18:84:EB:1D:85:F0:BE:9E:A7:3C
Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Certificate serial: 36C14BCBD613B17FA451F4F7AE058C55EA88E433
Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
Signing time: Tue 28 Oct 2025 12:17:38 +0000
ROA not before: Tue 28 Oct 2025 12:12:38 +0000
ROA not after: Tue 27 Oct 2026 12:17:38 +0000
asID: 262754
IP address blocks: 186.219.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl
rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 05:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c1:4b:cb:d6:13:b1:7f:a4:51:f4:f7:ae:05:8c:55:ea:88:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Validity
Not Before: Oct 28 12:12:38 2025 GMT
Not After : Oct 27 12:17:38 2026 GMT
Subject: CN=3AE3CDBA11121AF31AF21884EB1D85F0BE9EA73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:39:79:91:ae:7a:63:aa:0c:1d:9b:b6:77:
2f:85:61:e5:bd:72:a4:70:62:2f:92:77:ab:28:a7:
30:d7:c0:c2:63:1e:5a:b8:9e:7f:40:6a:d9:40:10:
7e:bb:2a:37:81:99:10:0c:48:53:2c:c2:77:25:24:
d2:6c:c9:04:f1:4a:a6:90:cb:4c:42:1b:5c:e0:7e:
fa:09:3c:92:aa:22:35:79:f4:6b:e5:7d:53:83:60:
a3:26:6b:b3:5f:63:18:d2:a4:19:86:22:b5:d0:9e:
27:b6:8d:b3:72:71:11:17:05:e3:21:5b:9f:8d:af:
8d:1a:ee:e3:92:b9:d5:c3:b8:c5:35:18:12:28:59:
b4:b3:1e:8f:53:15:8e:4d:53:97:05:34:e8:64:d8:
44:fb:0b:f5:f6:c3:06:6e:9d:94:a1:2c:6f:ec:c1:
76:b7:41:da:9b:9d:bc:ca:1e:a4:ba:80:4b:a4:05:
22:ec:90:97:96:01:9c:ce:df:3f:a9:be:f7:a9:e5:
c7:83:dc:59:46:e7:a6:2e:19:b8:ed:00:4b:1f:bc:
09:62:19:86:63:7a:14:72:03:48:35:30:93:f5:93:
b0:0b:3a:76:58:92:dc:fe:0f:a3:74:7f:68:06:f9:
55:36:93:a6:46:2d:34:0a:1a:df:e6:ed:77:6b:76:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:CD:BA:11:12:1A:F3:1A:F2:18:84:EB:1D:85:F0:BE:9E:A7:3C
X509v3 Authority Key Identifier:
keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d6:cb:c5:e0:1c:42:37:7c:3a:2b:8b:ff:f0:5b:4c:7d:a4:
4e:06:33:ac:c9:f4:56:a2:38:56:48:68:37:bc:5f:bc:00:b9:
d5:48:f8:f5:73:8f:db:e3:ec:12:75:bf:e0:4d:c0:6f:e4:66:
89:46:1e:81:27:3a:64:b1:44:f2:3f:bd:71:c3:72:81:98:51:
b7:e8:2d:c7:25:29:2a:55:3a:1c:8a:ab:a1:a7:f2:55:24:36:
5f:6e:90:86:bb:d5:98:11:db:5f:5b:2d:d8:49:18:c7:17:0a:
98:58:39:35:91:30:ba:69:01:57:2b:43:6c:be:9e:9a:3d:9b:
85:e2:fc:90:79:62:47:2f:08:67:3c:e4:a3:30:c3:7d:51:f8:
92:52:e8:78:46:d6:bf:b8:f0:d4:e5:54:42:0f:81:30:40:27:
9d:d1:77:3d:c2:97:c6:b0:6c:ba:bd:30:bf:a4:46:a7:49:43:
2e:4a:5e:46:39:64:46:0f:db:b0:b1:ea:82:df:bd:aa:06:bc:
43:f3:7d:6a:4f:4e:79:86:90:2e:47:88:63:71:6b:7a:4a:bc:
cd:aa:09:85:8a:ff:1b:26:bf:b5:78:5a:27:60:01:ee:a0:57:
47:42:8a:77:77:65:65:59:f1:98:c4:6f:af:ab:04:1c:e2:e6:
2d:6e:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:58 2025 by rpki-client