
$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32332d3233203d3e203631373937.roa
File: 3133382e33362e36382e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier: /t/MWs1MyrVsTTd0uSNMuiQsbngcfRJT6of1oTGU+yo=
Subject key identifier: 54:86:38:3C:43:C0:3D:B6:F7:67:5D:11:E2:72:CD:13:1B:0E:95:95
Certificate issuer: /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial: 71E8C1211845BAEC723ABC4A551725C79F8A3050
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32332d3233203d3e203631373937.roa
Signing time: Mon 03 Nov 2025 15:07:13 +0000
ROA not before: Mon 03 Nov 2025 15:02:13 +0000
ROA not after: Mon 02 Nov 2026 15:07:13 +0000
asID: 61797
IP address blocks: 138.36.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 05:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e8:c1:21:18:45:ba:ec:72:3a:bc:4a:55:17:25:c7:9f:8a:30:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
Validity
Not Before: Nov 3 15:02:13 2025 GMT
Not After : Nov 2 15:07:13 2026 GMT
Subject: CN=5486383C43C03DB6F7675D11E272CD131B0E9595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c3:01:6f:26:11:73:86:e7:a2:03:61:a9:41:
10:fd:2c:ca:2c:e7:2b:f0:ac:d3:fb:c5:f0:94:84:
60:18:40:59:5e:67:ac:e0:28:21:e4:8b:e6:98:e0:
79:dd:72:09:1a:88:b0:96:9d:0b:34:81:34:7a:3c:
0a:f7:b1:ba:58:39:95:08:03:26:04:22:e5:e3:f9:
9d:63:04:a0:eb:80:9c:9d:78:34:46:63:48:6b:eb:
53:63:32:2b:73:01:a0:7e:9c:cf:4b:8a:47:28:85:
d7:72:c2:e8:6a:8a:74:25:11:97:67:92:cf:cd:97:
6e:84:68:76:6c:b9:31:b6:d3:56:27:8a:1a:7e:ef:
4a:23:5e:b2:89:d0:c8:69:de:05:27:f8:d3:60:d2:
32:7a:27:87:ad:b4:e3:f8:a3:bc:5b:46:88:37:7b:
5f:1d:38:78:99:1e:9d:e1:ca:37:3d:ea:a2:e4:9d:
e6:05:d1:c9:ac:c1:06:67:e0:f0:47:89:7f:98:10:
50:8c:65:41:93:7b:46:81:07:8b:c9:1e:c0:9e:a0:
9d:0f:18:e8:ba:fa:09:1e:cf:dc:d2:6f:4c:e9:f2:
12:a7:7f:9c:51:b7:14:01:e7:75:f1:2c:de:c6:f5:
96:7f:ab:78:cb:86:60:49:6d:77:70:7a:8d:b6:90:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:38:3C:43:C0:3D:B6:F7:67:5D:11:E2:72:CD:13:1B:0E:95:95
X509v3 Authority Key Identifier:
keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32332d3233203d3e203631373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.68.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b4:ef:4a:62:2b:3f:da:0e:72:f5:74:84:10:74:df:4d:a9:
a9:6f:71:ad:d8:c3:e0:2b:7b:76:03:52:17:b4:05:ff:17:34:
8e:1e:2d:fe:e1:8e:bf:5b:c7:7a:ca:ba:24:25:7a:cc:74:9e:
2c:76:6a:05:cc:60:a0:55:25:24:b7:fa:9f:c6:76:0a:df:e0:
5e:a0:1b:3a:f4:d1:50:d2:5b:90:59:2a:06:f6:88:fc:cb:80:
fc:8f:cc:56:2c:1e:84:c7:79:ad:7a:14:b8:96:82:38:a9:8a:
54:69:3c:c0:55:45:b3:74:4e:ba:76:ec:45:f0:c7:9e:0f:14:
58:54:9a:60:42:6f:f3:70:88:9f:1b:72:a8:1e:6f:4e:b3:86:
55:9a:6c:e8:b4:84:63:65:6f:1f:e6:93:59:b0:b7:a5:f9:c6:
b3:40:36:42:db:58:92:d0:85:72:d7:a7:4b:6a:f2:3e:df:e6:
09:d9:ef:0c:5a:ba:d0:3c:75:fe:d5:de:db:2f:e1:63:76:ea:
fb:aa:b6:40:1d:0b:f1:1a:ac:2a:0a:9e:5e:68:2d:69:e5:13:
c8:b3:d0:28:a4:fe:5f:1a:f0:10:aa:12:74:32:d5:46:09:4c:
6f:8a:20:35:0a:52:62:56:1c:ff:65:2b:40:75:0b:33:0e:5f:
fa:a6:36:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcejBIRhFuuxyOrxKVRclx5+KMFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4REQwNThDQzQ0QTcwODdDNUIxMjgzNTZEMTBGQjAy
NEM3RDc3ODAeFw0yNTExMDMxNTAyMTNaFw0yNjExMDIxNTA3MTNaMDMxMTAvBgNV
BAMTKDU0ODYzODNDNDNDMDNEQjZGNzY3NUQxMUUyNzJDRDEzMUIwRTk1OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwwFvJhFzhueiA2GpQRD9LMos
5yvwrNP7xfCUhGAYQFleZ6zgKCHki+aY4HndcgkaiLCWnQs0gTR6PAr3sbpYOZUI
AyYEIuXj+Z1jBKDrgJydeDRGY0hr61NjMitzAaB+nM9LikcohddywuhqinQlEZdn
ks/Nl26EaHZsuTG201Ynihp+70ojXrKJ0Mhp3gUn+NNg0jJ6J4ettOP4o7xbRog3
e18dOHiZHp3hyjc96qLkneYF0cmswQZn4PBHiX+YEFCMZUGTe0aBB4vJHsCeoJ0P
GOi6+gkez9zSb0zp8hKnf5xRtxQB53XxLN7G9ZZ/q3jLhmBJbXdweo22kMPnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUVIY4PEPAPbb3Z10R4nLNExsOlZUwHwYDVR0j
BBgwFoAUaY3QWMxEpwh8WxKDVtEPsCTH13gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhG
SjEvMC82OThERDA1OENDNDRBNzA4N0M1QjEyODM1NkQxMEZCMDI0QzdENzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5OEREMDU4Q0M0NEE3MDg3
QzVCMTI4MzU2RDEwRkIwMjRDN0Q3NzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOOXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAv
MzEzMzM4MmUzMzM2MmUzNjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM3
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYokRDANBgkqhkiG9w0BAQsFAAOCAQEAprTvSmIrP9oO
cvV0hBB0302pqW9xrdjD4Ct7dgNSF7QF/xc0jh4t/uGOv1vHesq6JCV6zHSeLHZq
BcxgoFUlJLf6n8Z2Ct/gXqAbOvTRUNJbkFkqBvaI/MuA/I/MViwehMd5rXoUuJaC
OKmKVGk8wFVFs3ROunbsRfDHng8UWFSaYEJv83CInxtyqB5vTrOGVZps6LSEY2Vv
H+aTWbC3pfnGs0A2QttYktCFctenS2ryPt/mCdnvDFq60Dx1/tXe2y/hY3bq+6q2
QB0L8RqsKgqeXmgtaeUTyLPQKKT+XxrwEKoSdDLVRglMb4ogNQpSYlYc/2UrQHUL
Mw5f+qY2LA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:04:03 2025 by rpki-client