
$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33332e302f32342d3234203d3e203533303532.roa
File: 3138372e38342e33332e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier: btC3yb2gw201qNYvn2GqTUoBvBbe/gJJzsej3Db9zs4=
Subject key identifier: C8:D6:1E:6A:EE:EB:03:B3:F6:33:F1:E6:8B:8F:05:A5:11:88:7C:DF
Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial: 020D079F32DBA38E745D4477552A13BAB94A3282
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33332e302f32342d3234203d3e203533303532.roa
Signing time: Mon 01 Sep 2025 18:45:35 +0000
ROA not before: Mon 01 Sep 2025 18:40:35 +0000
ROA not after: Mon 31 Aug 2026 18:45:35 +0000
asID: 53052
IP address blocks: 187.84.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 14:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0d:07:9f:32:db:a3:8e:74:5d:44:77:55:2a:13:ba:b9:4a:32:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Validity
Not Before: Sep 1 18:40:35 2025 GMT
Not After : Aug 31 18:45:35 2026 GMT
Subject: CN=C8D61E6AEEEB03B3F633F1E68B8F05A511887CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:58:08:6c:62:8d:5d:f5:f9:c9:6d:b6:f5:
0e:32:18:4e:c5:0c:a9:3b:b4:68:4d:90:c8:06:94:
93:fb:fb:16:8c:19:c3:8a:d8:49:32:28:9d:15:b9:
9a:17:f2:5e:fe:77:eb:5f:60:73:6f:71:d2:11:36:
99:55:4f:65:f8:07:6a:cc:05:f0:40:33:0c:ea:8c:
4c:d1:7c:c6:e2:a2:93:b4:8c:a3:47:c5:10:47:9e:
cd:5f:02:91:41:24:a0:11:7b:f7:73:34:b3:00:aa:
db:f8:47:84:9d:1b:50:1e:07:86:08:36:fe:85:06:
1c:de:9f:11:bb:3e:58:3f:ad:60:4d:4c:cb:d4:3b:
5e:95:29:af:23:da:44:ca:91:c2:80:63:fb:cd:0e:
3c:24:52:09:00:79:20:16:bd:45:e2:c7:3c:e3:66:
70:2c:c5:44:2f:cc:04:41:5a:f4:22:61:cf:8d:f2:
59:27:28:43:e6:61:ec:05:0c:7d:1e:16:31:47:18:
3a:70:17:3d:70:2a:23:b1:52:51:c8:4f:09:89:0b:
70:6c:7a:61:1b:d3:09:2d:2b:d8:76:6a:d3:34:e6:
4a:58:c0:04:2c:d9:50:bb:e9:8e:ca:d6:3a:b2:26:
5f:ce:c9:9e:10:5c:34:f8:64:d9:1a:4b:e0:3a:6d:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:1E:6A:EE:EB:03:B3:F6:33:F1:E6:8B:8F:05:A5:11:88:7C:DF
X509v3 Authority Key Identifier:
keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33332e302f32342d3234203d3e203533303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:51:d0:cf:a4:8b:54:35:3c:ed:55:14:b6:2f:fb:e9:9d:f2:
b9:6b:86:b7:af:79:59:dd:60:36:08:75:19:1c:8c:13:da:aa:
fa:ea:b7:b3:c8:99:a9:f3:a3:19:18:b7:b8:88:20:27:94:1f:
1c:bc:d5:40:f0:a6:32:b0:1c:80:55:00:14:41:7c:76:08:bd:
22:80:62:05:21:3b:7a:3e:e9:07:06:3a:e1:7d:e7:5b:c1:8b:
17:b6:a8:36:05:77:4d:46:2a:31:4b:15:04:2a:29:17:af:64:
63:d1:77:4d:dd:d8:51:ec:5d:fc:90:57:13:2a:7b:fe:e5:97:
c6:93:36:22:c9:da:53:77:8e:df:26:67:df:66:64:7c:45:c0:
e4:ac:83:12:fc:37:b1:7a:8c:c4:6d:e2:37:48:32:a4:e6:66:
7b:2d:95:7a:61:34:d5:49:9d:13:c6:90:23:bb:f5:37:5a:2d:
d4:54:ed:69:85:0b:46:33:00:ae:09:8e:ca:a4:53:65:08:ee:
0b:57:5a:73:97:bf:f1:b7:86:7b:a2:15:09:22:cd:e2:77:c4:
e5:3b:ad:fb:28:03:11:26:6f:40:d3:46:71:ab:4f:56:49:06:
af:21:bc:48:46:a7:7f:d1:92:ba:2c:24:45:a6:d7:e0:ba:03:
3d:31:94:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAg0HnzLbo450XUR3VSoTurlKMoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0
OUI3NDAzRDAeFw0yNTA5MDExODQwMzVaFw0yNjA4MzExODQ1MzVaMDMxMTAvBgNV
BAMTKEM4RDYxRTZBRUVFQjAzQjNGNjMzRjFFNjhCOEYwNUE1MTE4ODdDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPNlgIbGKNXfX5yW229Q4yGE7F
DKk7tGhNkMgGlJP7+xaMGcOK2EkyKJ0VuZoX8l7+d+tfYHNvcdIRNplVT2X4B2rM
BfBAMwzqjEzRfMbiopO0jKNHxRBHns1fApFBJKARe/dzNLMAqtv4R4SdG1AeB4YI
Nv6FBhzenxG7Plg/rWBNTMvUO16VKa8j2kTKkcKAY/vNDjwkUgkAeSAWvUXixzzj
ZnAsxUQvzARBWvQiYc+N8lknKEPmYewFDH0eFjFHGDpwFz1wKiOxUlHITwmJC3Bs
emEb0wktK9h2atM05kpYwAQs2VC76Y7K1jqyJl/OyZ4QXDT4ZNkaS+A6bYgJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyNYeau7rA7P2M/Hmi48FpRGIfN8wHwYDVR0j
BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM
RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF
Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZVTN1TFFnVVh1NUViUms3dVdNYVpkZkxDS0JnalFtWDlGZzJ0Q3c1TERVLzAv
MzEzODM3MmUzODM0MmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALtUITANBgkqhkiG9w0BAQsFAAOCAQEArFHQz6SLVDU8
7VUUti/76Z3yuWuGt695Wd1gNgh1GRyME9qq+uq3s8iZqfOjGRi3uIggJ5QfHLzV
QPCmMrAcgFUAFEF8dgi9IoBiBSE7ej7pBwY64X3nW8GLF7aoNgV3TUYqMUsVBCop
F69kY9F3Td3YUexd/JBXEyp7/uWXxpM2IsnaU3eO3yZn32ZkfEXA5KyDEvw3sXqM
xG3iN0gypOZmey2VemE01UmdE8aQI7v1N1ot1FTtaYULRjMArgmOyqRTZQjuC1da
c5e/8beGe6IVCSLN4nfE5Tut+ygDESZvQNNGcatPVkkGryG8SEanf9GSuiwkRabX
4LoDPTGUQA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:28:11 2025 by rpki-client