
$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa
File: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier: JL+tQ5Kfrej9dzNOHqdA47WL83D9j5wRJVEy93Y0jqU=
Subject key identifier: A1:1E:06:1F:C8:BB:ED:92:93:29:95:F3:BE:32:0E:B6:78:44:F2:56
Certificate issuer: /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial: 67950AB8DB820D84CF615099C986FAA7EF28F467
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa
Signing time: Thu 06 Mar 2025 07:44:37 +0000
ROA not before: Thu 06 Mar 2025 07:39:37 +0000
ROA not after: Thu 05 Mar 2026 07:44:37 +0000
asID: 270910
IP address blocks: 138.121.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 02:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:95:0a:b8:db:82:0d:84:cf:61:50:99:c9:86:fa:a7:ef:28:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Validity
Not Before: Mar 6 07:39:37 2025 GMT
Not After : Mar 5 07:44:37 2026 GMT
Subject: CN=A11E061FC8BBED92932995F3BE320EB67844F256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3a:e1:9a:84:72:95:b6:46:9c:a4:a8:c8:e1:
15:b1:ed:ce:e3:58:56:04:a4:ac:97:83:ce:80:ac:
25:5c:2a:3c:f9:b7:02:43:c1:8e:ca:e6:a3:77:3e:
80:ac:44:af:7f:0d:e1:75:b7:c7:27:bc:08:33:51:
02:60:38:95:ca:f4:64:cf:81:ce:89:c2:9c:0d:9c:
9a:f3:b4:77:24:1e:a2:21:f3:68:ba:5f:a1:2f:c0:
f0:64:86:6a:fa:db:83:99:80:fd:97:9a:99:8a:09:
68:2a:63:6e:42:03:49:0c:39:5c:c9:28:37:57:16:
3a:7e:cc:b4:b3:7b:ba:8f:fe:a8:6d:03:7d:6f:54:
8a:3e:4c:62:8c:3e:8e:1d:58:88:47:21:71:e9:34:
9d:00:b6:35:eb:3d:da:aa:e8:e9:70:4d:9e:ff:a8:
c4:97:3f:1d:30:45:5c:62:4c:7c:61:ca:5d:f4:96:
b5:08:e8:33:6c:5f:1f:ff:48:ff:2a:3f:a7:1e:c7:
2d:62:07:2a:ad:8f:be:c1:e9:21:dd:b0:64:6a:25:
57:1c:95:80:51:eb:23:18:da:9b:8c:14:d0:4e:20:
48:a7:44:c0:77:1d:a9:14:1d:42:cf:a7:4e:ba:0b:
d3:41:68:04:c9:0f:3d:72:27:19:d1:de:db:19:df:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:06:1F:C8:BB:ED:92:93:29:95:F3:BE:32:0E:B6:78:44:F2:56
X509v3 Authority Key Identifier:
keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.165.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e0:5f:db:4d:46:54:49:83:80:88:4e:b3:8f:e5:a3:30:30:
9c:16:a4:b3:0b:b2:f9:6d:36:12:95:24:71:ae:bd:d8:ff:0a:
a5:09:82:c0:82:50:7f:76:d2:3d:ae:b3:32:36:f8:82:ec:44:
c4:07:ee:e9:c3:98:0e:09:8d:33:53:58:b5:d2:1d:e4:ff:13:
26:8c:56:91:e4:4e:ce:f6:dc:5c:57:0f:15:83:6d:0b:0f:0f:
05:35:76:4b:b7:88:20:55:92:bd:f7:a0:66:a7:ba:f4:dc:58:
11:e7:c4:58:0c:e7:99:c6:56:9a:91:c6:00:bd:0c:2f:16:e0:
c6:70:5b:1f:78:de:2c:fd:4f:8b:5a:73:c3:3b:39:4c:30:d2:
59:3e:1f:8e:9a:18:e0:03:3b:d6:24:bf:38:a7:7c:36:68:d5:
92:25:03:09:bb:20:af:be:f1:9d:5e:92:d6:2f:c1:a0:39:fb:
7f:04:3c:e2:da:1c:fd:da:64:81:bb:55:6c:08:fe:96:91:96:
e9:5e:b2:e6:58:c7:d3:04:6a:d9:3d:16:61:53:0e:61:85:4c:
12:58:57:66:d1:8c:34:b3:7b:16:8b:19:80:f6:2d:c6:4b:8a:
8a:7f:29:cb:4f:da:16:74:30:9a:23:8e:e2:04:e2:e7:43:52:
de:9f:3e:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ5UKuNuCDYTPYVCZyYb6p+8o9GcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNTAzMDYwNzM5MzdaFw0yNjAzMDUwNzQ0MzdaMDMxMTAvBgNV
BAMTKEExMUUwNjFGQzhCQkVEOTI5MzI5OTVGM0JFMzIwRUI2Nzg0NEYyNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmOuGahHKVtkacpKjI4RWx7c7j
WFYEpKyXg86ArCVcKjz5twJDwY7K5qN3PoCsRK9/DeF1t8cnvAgzUQJgOJXK9GTP
gc6JwpwNnJrztHckHqIh82i6X6EvwPBkhmr624OZgP2XmpmKCWgqY25CA0kMOVzJ
KDdXFjp+zLSze7qP/qhtA31vVIo+TGKMPo4dWIhHIXHpNJ0AtjXrPdqq6OlwTZ7/
qMSXPx0wRVxiTHxhyl30lrUI6DNsXx//SP8qP6cexy1iByqtj77B6SHdsGRqJVcc
lYBR6yMY2puMFNBOIEinRMB3HakUHULPp066C9NBaATJDz1yJxnR3tsZ35zFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoR4GH8i77ZKTKZXzvjIOtnhE8lYwHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv
MzEzMzM4MmUzMTMyMzEyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp5pTANBgkqhkiG9w0BAQsFAAOCAQEAUOBf
201GVEmDgIhOs4/lozAwnBakswuy+W02EpUkca692P8KpQmCwIJQf3bSPa6zMjb4
guxExAfu6cOYDgmNM1NYtdId5P8TJoxWkeROzvbcXFcPFYNtCw8PBTV2S7eIIFWS
vfegZqe69NxYEefEWAznmcZWmpHGAL0MLxbgxnBbH3jeLP1Pi1pzwzs5TDDSWT4f
jpoY4AM71iS/OKd8NmjVkiUDCbsgr77xnV6S1i/BoDn7fwQ84toc/dpkgbtVbAj+
lpGW6V6y5ljH0wRq2T0WYVMOYYVMElhXZtGMNLN7FosZgPYtxkuKin8py0/aFnQw
miOO4gTi50NS3p8+CA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:46 2025 by rpki-client