
$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
File: 3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa (raw, json)
Hash identifier: FA7pllzomTZtMxKRTRmnNiEG2GJ878cgSEVc9pJQBzs=
Subject key identifier: FF:20:21:73:01:D9:0B:88:25:5A:6C:C7:2C:C1:DB:AB:38:65:EE:F0
Certificate issuer: /CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Certificate serial: 250A1EBD1C5EE146A2AD43BB836BB5E356C50098
Authority key identifier: C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
Signing time: Fri 15 Aug 2025 14:51:28 +0000
ROA not before: Fri 15 Aug 2025 14:46:28 +0000
ROA not after: Fri 14 Aug 2026 14:51:28 +0000
asID: 263920
IP address blocks: 138.185.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0a:1e:bd:1c:5e:e1:46:a2:ad:43:bb:83:6b:b5:e3:56:c5:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B
Validity
Not Before: Aug 15 14:46:28 2025 GMT
Not After : Aug 14 14:51:28 2026 GMT
Subject: CN=FF20217301D90B88255A6CC72CC1DBAB3865EEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:2f:bf:fb:e1:05:96:7f:7c:ce:31:25:d8:
7a:2b:1f:52:95:da:46:c1:dd:40:c2:5a:fc:f5:06:
8f:cb:17:f6:0d:98:f6:74:2d:31:7c:4e:45:91:a1:
7b:3b:0b:b8:69:b6:8f:42:b2:fb:2c:ab:79:b7:7e:
68:e5:6c:c1:dc:c2:d2:9b:02:23:7b:b4:8a:ad:2b:
34:8a:ef:df:db:a9:10:a8:2d:5c:7d:c3:75:02:ff:
cf:63:26:ac:55:51:e8:ce:15:8e:df:07:86:6f:47:
b3:6d:2b:b3:eb:2f:14:4a:41:ba:fa:da:62:a4:58:
9b:f7:dd:62:bf:17:80:0b:e6:25:0d:2a:3a:cd:1f:
fa:d0:28:c3:b1:84:16:4e:5f:e8:47:67:8f:3b:96:
23:7a:61:22:2e:08:dd:b2:0a:0e:b6:ff:59:ea:a0:
54:96:da:6f:15:3d:53:87:49:5f:32:94:bd:be:9e:
14:c9:96:55:ea:7c:b1:59:52:d0:b9:70:1b:05:c1:
11:75:c6:fa:f1:64:e0:87:1f:bb:76:09:98:b3:32:
1f:1b:22:24:e7:6b:b6:63:1b:d5:09:1c:2e:80:de:
7f:01:13:4e:1c:88:52:95:2b:2d:05:7a:a7:ff:a2:
d7:29:ee:57:5d:3c:39:52:93:6d:f6:41:8f:72:aa:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:21:73:01:D9:0B:88:25:5A:6C:C7:2C:C1:DB:AB:38:65:EE:F0
X509v3 Authority Key Identifier:
keyid:C8:68:A6:8B:2B:0C:AA:98:D2:EE:3E:E6:87:3F:60:BE:9E:33:BD:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A68B2B0CAA98D2EE3EE6873F60BE9E33BD4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32332d3233203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.240.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:60:f3:40:04:4a:9e:ae:97:8c:ad:78:a4:80:d8:5c:ee:05:
6d:62:29:e0:15:00:1d:46:08:1a:1f:f8:21:9f:3f:08:72:d0:
ea:e3:55:e0:a5:7a:c4:da:1d:b8:e3:dd:ad:89:d8:c0:24:a4:
20:37:79:37:d2:04:2e:0f:3c:fa:80:b5:c3:eb:eb:be:15:0d:
cc:20:77:8d:7f:64:3b:46:3e:fb:3b:a5:37:ef:78:35:7c:ac:
68:6c:c3:f3:89:8e:c9:74:65:89:fd:3d:a0:24:e9:5f:d4:a4:
7a:d9:54:89:c6:6d:41:3a:35:15:ff:8c:dd:a5:c7:d2:33:1d:
71:f7:15:50:cc:50:21:9a:9e:5b:92:0d:f8:28:22:b1:6f:c3:
61:94:c3:0c:87:7d:55:d1:06:07:56:62:ed:b5:aa:ae:0b:bd:
03:ab:b2:e1:a2:ad:78:d0:5f:93:45:7a:1f:3a:8a:b7:61:3a:
22:56:d9:d2:42:7b:c5:db:b1:7a:26:65:58:78:fc:98:70:9c:
ea:0d:30:ed:52:73:a3:77:eb:04:3c:1f:2b:2b:71:85:d1:c4:
65:18:c4:6e:76:17:47:eb:fc:67:28:2f:8a:de:b1:22:91:0b:
93:c3:6f:17:d3:28:df:f3:32:32:b6:72:7a:d3:02:15:8e:dc:
13:1b:d2:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJQoevRxe4UairUO7g2u141bFAJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2OEE2OEIyQjBDQUE5OEQyRUUzRUU2ODczRjYwQkU5
RTMzQkQ0QjAeFw0yNTA4MTUxNDQ2MjhaFw0yNjA4MTQxNDUxMjhaMDMxMTAvBgNV
BAMTKEZGMjAyMTczMDFEOTBCODgyNTVBNkNDNzJDQzFEQkFCMzg2NUVFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeS+/++EFln98zjEl2HorH1KV
2kbB3UDCWvz1Bo/LF/YNmPZ0LTF8TkWRoXs7C7hpto9Csvssq3m3fmjlbMHcwtKb
AiN7tIqtKzSK79/bqRCoLVx9w3UC/89jJqxVUejOFY7fB4ZvR7NtK7PrLxRKQbr6
2mKkWJv33WK/F4AL5iUNKjrNH/rQKMOxhBZOX+hHZ487liN6YSIuCN2yCg62/1nq
oFSW2m8VPVOHSV8ylL2+nhTJllXqfLFZUtC5cBsFwRF1xvrxZOCHH7t2CZizMh8b
IiTna7ZjG9UJHC6A3n8BE04ciFKVKy0Feqf/otcp7lddPDlSk232QY9yqkgFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/yAhcwHZC4glWmzHLMHbqzhl7vAwHwYDVR0j
BBgwFoAUyGimiysMqpjS7j7mhz9gvp4zvUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9DODY4QTY4QjJCMENBQTk4RDJFRTNFRTY4NzNGNjBCRTlFMzNCRDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4NjhBNjhCMkIwQ0FBOThE
MkVFM0VFNjg3M0Y2MEJFOUUzM0JENEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq58DANBgkqhkiG9w0BAQsFAAOCAQEArWDz
QARKnq6XjK14pIDYXO4FbWIp4BUAHUYIGh/4IZ8/CHLQ6uNV4KV6xNoduOPdrYnY
wCSkIDd5N9IELg88+oC1w+vrvhUNzCB3jX9kO0Y++zulN+94NXysaGzD84mOyXRl
if09oCTpX9SketlUicZtQTo1Ff+M3aXH0jMdcfcVUMxQIZqeW5IN+CgisW/DYZTD
DId9VdEGB1Zi7bWqrgu9A6uy4aKteNBfk0V6HzqKt2E6IlbZ0kJ7xduxeiZlWHj8
mHCc6g0w7VJzo3frBDwfKytxhdHEZRjEbnYXR+v8Zygvit6xIpELk8NvF9Mo3/My
MrZyetMCFY7cExvSKA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:10 2025 by rpki-client