
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
File: 3133382e3230342e39322e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier: YL/k1DS1CWk0xmnrSOwrulPFkkSmGfZwQzHZ9xp1VPU=
Subject key identifier: 17:E3:C4:BA:88:34:F7:00:AF:F9:1B:70:FE:08:CA:A1:F7:74:18:35
Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial: 2B42655C28E29DF1338A4AD7E75B40EAB407F37A
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
Signing time: Fri 20 Feb 2026 12:33:02 +0000
ROA not before: Fri 20 Feb 2026 12:28:02 +0000
ROA not after: Fri 19 Feb 2027 12:33:02 +0000
asID: 28165
IP address blocks: 138.204.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 09:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:42:65:5c:28:e2:9d:f1:33:8a:4a:d7:e7:5b:40:ea:b4:07:f3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Validity
Not Before: Feb 20 12:28:02 2026 GMT
Not After : Feb 19 12:33:02 2027 GMT
Subject: CN=17E3C4BA8834F700AFF91B70FE08CAA1F7741835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:dd:55:27:d9:23:1c:d0:04:82:10:68:6d:
42:79:43:44:c8:35:c5:5e:66:de:34:21:5b:ec:8e:
5d:63:e8:4e:d4:6a:44:89:b0:59:67:48:23:99:18:
8a:ac:30:1f:58:0c:81:14:d4:6a:1c:bf:86:46:ee:
19:55:c8:7a:ce:d4:c5:eb:22:ae:4b:96:b3:a5:18:
21:92:3f:18:ce:c8:91:ce:37:37:1f:18:cd:e8:8f:
ba:c1:bc:c6:c1:01:c4:0e:24:2a:7c:9e:88:68:4c:
58:1c:02:5b:e3:3b:eb:7b:ec:ee:c3:7d:73:37:64:
2c:75:9e:38:3d:23:5d:84:e7:d4:40:d7:47:41:f4:
82:ea:8d:c5:ff:2b:fe:d5:75:45:88:6f:c7:a4:58:
1d:ff:b3:2f:33:09:f7:1f:fd:16:d8:8e:d0:4c:27:
99:ea:d6:9e:1e:95:bd:0d:e9:c1:b8:ec:00:5d:0b:
ee:99:29:d9:89:ac:d7:f4:7d:e1:cf:0f:52:50:eb:
b0:1b:24:e9:92:9a:7c:58:b5:3e:21:ac:54:28:7c:
2c:4a:d5:12:9e:24:ff:4f:b4:26:49:ab:89:8a:77:
42:48:4a:56:e1:81:3d:1d:95:dd:93:03:79:bf:52:
05:af:9c:20:a5:6c:0b:05:07:06:93:40:e7:1a:39:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:C4:BA:88:34:F7:00:AF:F9:1B:70:FE:08:CA:A1:F7:74:18:35
X509v3 Authority Key Identifier:
keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:54:84:0f:d3:0e:b8:d0:20:6e:98:9b:2f:8c:e4:f0:2b:e7:
3e:8f:09:36:a8:ea:76:01:7a:66:1c:e0:f2:ce:3f:9e:9f:bc:
51:92:64:c6:98:54:d9:39:90:45:61:76:8b:40:f4:ab:74:23:
71:6a:16:5a:e9:38:b6:de:69:c9:1e:30:3d:0b:d2:1b:ce:70:
ea:7f:78:f2:04:fb:a7:15:a8:68:04:88:4d:06:28:5f:db:f4:
d8:7b:e9:8d:6c:88:bd:cc:d1:1a:0d:b7:f8:51:60:c2:78:34:
14:a4:d5:b2:6e:1b:9d:20:48:f8:7d:7a:1c:a8:2d:6a:ab:32:
fb:54:17:32:3a:ca:5b:54:93:ed:b3:14:e3:7a:b0:36:eb:5b:
be:ec:00:bc:0d:46:23:8e:30:12:b5:93:b0:3a:77:ad:14:ed:
de:22:a7:80:0a:04:af:ac:ac:4f:e9:ba:f5:59:ff:a2:e2:79:
58:5a:98:83:bc:59:d3:0a:cf:77:db:fa:53:e6:b3:32:3f:f4:
38:d5:cf:94:0a:de:c1:07:7d:1f:4d:a6:2a:cb:fe:c5:4d:95:
6a:6a:61:51:6f:ca:4f:27:c5:76:b3:7b:54:2c:6f:5a:60:82:
64:fb:90:07:a1:0f:72:ae:65:8b:1d:b1:1f:40:ce:8d:cb:b4:
4f:1b:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:48:22 2026 by rpki-client