
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa
File: 3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa (raw, json)
Hash identifier: ALE5aP3ssmh/qYxcSqgnftt3+8LXZKVaGjQXT6kI18g=
Subject key identifier: FD:8B:07:C6:DF:5E:A7:3C:03:38:D5:56:75:B5:A7:B8:1D:08:71:91
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 141324805B087711D3BCB0E75E32133115639C62
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa
Signing time: Tue 20 May 2025 03:52:43 +0000
ROA not before: Tue 20 May 2025 03:47:43 +0000
ROA not after: Tue 19 May 2026 03:52:43 +0000
asID: 52892
IP address blocks: 138.185.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:13:24:80:5b:08:77:11:d3:bc:b0:e7:5e:32:13:31:15:63:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: May 20 03:47:43 2025 GMT
Not After : May 19 03:52:43 2026 GMT
Subject: CN=FD8B07C6DF5EA73C0338D55675B5A7B81D087191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:0f:b4:31:07:56:2f:cc:81:77:c8:4c:06:
32:30:c0:4d:5c:55:90:41:d5:85:af:9f:91:66:82:
df:e0:fb:45:06:7a:71:c3:d9:21:66:5e:ca:53:33:
b7:5d:8c:00:61:54:39:26:d0:92:a5:88:b2:82:ce:
aa:90:4a:0f:9b:5e:77:64:56:b4:66:48:76:a4:46:
8e:8a:87:6a:06:03:44:a9:f8:07:c6:e2:db:7d:d5:
ec:84:01:ba:49:9e:c1:bd:c6:ac:81:4c:ce:1a:31:
df:10:8f:b6:f2:44:3c:d6:24:f7:b9:3b:e2:8c:51:
64:1a:86:71:2d:8e:bd:e9:4c:9c:14:3d:9f:31:57:
7a:de:ea:17:c6:ea:98:50:78:b0:07:f5:d5:ce:17:
b3:de:4c:6d:5c:65:39:22:27:10:b9:10:bc:51:09:
b9:9a:13:63:ed:cd:3b:19:23:8b:d5:2a:48:35:75:
49:3e:69:e1:43:0b:8b:00:8d:85:2e:07:60:42:e3:
cb:bc:62:38:9e:18:56:e3:09:97:28:6b:ba:92:ea:
29:8f:34:e7:65:ad:a5:8e:ef:80:91:18:95:a4:75:
24:f3:bb:ea:41:0e:16:5e:08:4e:09:8a:2c:67:bf:
f1:1e:f8:1a:9f:f9:3f:b7:fd:ca:5b:6b:5a:dc:1a:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8B:07:C6:DF:5E:A7:3C:03:38:D5:56:75:B5:A7:B8:1D:08:71:91
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233342e302f32332d3233203d3e203532383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.234.0/23
Signature Algorithm: sha256WithRSAEncryption
30:3e:d4:ac:80:8a:db:2a:66:17:66:42:39:66:66:30:33:56:
80:55:f8:97:ef:00:3e:1f:67:99:c9:9a:fa:66:65:72:17:f9:
4d:6d:f0:02:88:c6:b7:f3:8d:31:89:8f:2a:47:10:21:8e:08:
cb:a8:52:d7:84:e5:61:ce:01:33:c6:cb:c8:59:06:12:e2:3a:
a9:df:ab:ac:ab:21:d5:e0:e0:11:d2:af:66:73:dc:9c:e3:95:
52:6a:b8:ab:37:b6:bf:57:f1:e3:7b:1b:45:4d:d9:80:96:cb:
b1:54:4a:57:0c:28:63:b9:7f:4d:65:c6:fa:1f:75:d0:09:6c:
d4:e9:4d:48:41:c3:47:75:b8:1e:97:68:1e:d7:8e:02:34:cd:
14:28:b4:ce:62:98:0d:e5:85:6b:ca:07:52:c9:1a:be:56:54:
c7:b0:f8:14:bd:02:c2:9e:2b:31:56:5e:1e:6b:cc:3f:e3:4c:
b7:6d:a5:ff:1a:ee:06:66:d1:fa:0a:f4:83:6b:81:4d:be:39:
f0:fe:a3:fb:30:c3:ad:46:65:89:f5:83:3c:11:00:66:78:d4:
45:03:a4:04:49:d2:a8:44:a7:3e:fa:f9:d1:74:9f:33:5a:d1:
f8:89:76:6c:65:93:33:1a:16:07:0d:77:a4:9b:97:35:df:3b:
f4:ff:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:45:59 2025 by rpki-client