
$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS53108.roa
File: AS53108.roa (raw, json)
Hash identifier: vKLCa7XaenyMf0wiEaILE2A5x/O33O1HlZNILup4X8E=
Subject key identifier: 42:D4:14:6B:F1:E2:55:12:D3:BC:2D:69:3D:EF:77:BB:D7:9B:82:2C
Certificate issuer: /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial: 7CE45A34F34DA5B52D06FD856C3FFEA063B2427E
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS53108.roa
Signing time: Thu 12 Feb 2026 13:37:17 +0000
ROA not before: Thu 12 Feb 2026 13:32:17 +0000
ROA not after: Thu 11 Feb 2027 13:37:17 +0000
asID: 53108
IP address blocks: 167.249.104.0/22 maxlen: 22
167.249.104.0/24 maxlen: 24
167.249.105.0/24 maxlen: 24
167.249.106.0/24 maxlen: 24
167.249.107.0/24 maxlen: 24
2804:2b78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 13:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e4:5a:34:f3:4d:a5:b5:2d:06:fd:85:6c:3f:fe:a0:63:b2:42:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Validity
Not Before: Feb 12 13:32:17 2026 GMT
Not After : Feb 11 13:37:17 2027 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:cf:ef:c1:ef:76:80:9d:bd:e6:b7:80:22:
a6:4f:af:63:20:cc:d6:f2:47:08:86:f7:e8:97:55:
d0:e8:71:ea:56:b0:56:1b:1d:d7:60:53:72:9c:86:
0c:cb:6c:5d:7d:b1:33:72:91:ad:de:e5:4f:de:3d:
22:e3:36:7c:66:be:17:60:3a:d9:4b:97:4f:94:09:
0d:86:4e:49:4c:e7:7c:a8:2e:fa:23:fe:2b:3b:e5:
2c:3d:04:21:5a:b8:91:1a:91:94:83:09:1e:22:d4:
c8:4b:49:ae:74:d6:9f:78:fd:58:54:34:a8:4f:f7:
b2:33:3d:93:76:32:76:9e:25:43:85:74:26:31:31:
ed:bc:3b:15:b3:b1:8e:86:81:18:71:53:31:9a:77:
b0:96:c7:ac:cc:a6:84:1c:ec:3c:36:75:b6:37:57:
25:61:81:8b:ee:19:4f:8a:d0:ed:6d:c7:ea:dc:01:
b6:27:3d:07:28:db:1a:5a:59:4c:f5:ed:3a:3c:75:
25:74:86:6c:ea:4a:3f:8c:27:8d:de:e8:4b:35:d9:
21:0f:98:c6:8d:ae:66:30:05:b8:ed:d7:f0:37:83:
c4:12:f8:5c:b3:87:72:f0:a1:f4:da:32:3d:61:a0:
8c:7f:2c:ce:b4:56:85:2c:15:da:cc:4f:2d:6d:e9:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:14:6B:F1:E2:55:12:D3:BC:2D:69:3D:EF:77:BB:D7:9B:82:2C
X509v3 Authority Key Identifier:
keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS53108.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.104.0/22
IPv6:
2804:2b78::/32
Signature Algorithm: sha256WithRSAEncryption
3b:7b:9b:89:5a:36:9a:8b:ed:e1:fd:3c:10:80:f0:ec:24:3d:
1d:13:16:a9:27:5d:ab:76:26:de:e1:f6:e1:59:15:12:98:98:
86:97:2b:a8:2d:a7:eb:85:94:3b:8d:33:fb:3a:cf:7a:36:86:
2e:1a:2a:42:af:8e:49:68:13:2e:e8:59:38:5c:a0:75:28:be:
26:a6:08:cb:7f:6c:80:bf:73:81:54:ab:2b:25:7e:99:0f:7c:
b8:6e:bf:c6:c5:61:7e:a4:39:0f:1c:27:a5:d6:7c:8f:4a:16:
d8:ae:ff:34:24:fb:d6:f3:06:18:22:09:f1:9d:ef:b3:37:b7:
bf:ee:bc:01:2f:b1:dd:82:a3:34:45:24:72:83:c8:ba:a3:27:
6e:cb:d6:a4:cb:e3:7c:7e:e4:11:db:35:de:94:f6:ba:bc:25:
0d:67:3a:06:f8:39:16:fa:05:02:01:bc:ad:c0:84:98:ca:2a:
9a:88:63:89:9d:b5:e9:3b:f4:81:54:40:2c:fa:96:03:4d:db:
d8:c4:4e:29:f4:6e:ba:24:6b:8f:f8:7e:dd:40:c1:3f:31:e7:
09:24:3f:4d:ad:55:6e:97:bc:83:7a:da:78:72:1f:0f:52:91:
ee:28:98:01:84:57:cc:28:fd:32:4b:6f:c9:86:2f:83:22:18:
ac:09:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:13:44 2026 by rpki-client