
$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
File: 3138392e31342e36342e302f32302d3332203d3e203238323736.roa (raw, json)
Hash identifier: Pfl7jBlpLNz7cOroz8jBR2Lux2EXoEBFushu0bPcZ4Q=
Subject key identifier: 39:F8:DA:72:0E:1C:28:55:34:0A:86:9E:09:7C:42:AC:B6:5B:8C:FE
Certificate issuer: /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial: 26407A671002A06EF140E50DD92D6F36F5444ADF
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
Signing time: Thu 09 Oct 2025 14:32:39 +0000
ROA not before: Thu 09 Oct 2025 14:27:39 +0000
ROA not after: Thu 08 Oct 2026 14:32:39 +0000
asID: 28276
IP address blocks: 189.14.64.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:40:7a:67:10:02:a0:6e:f1:40:e5:0d:d9:2d:6f:36:f5:44:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Validity
Not Before: Oct 9 14:27:39 2025 GMT
Not After : Oct 8 14:32:39 2026 GMT
Subject: CN=39F8DA720E1C2855340A869E097C42ACB65B8CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:5e:58:7d:ad:89:da:0a:6c:7c:e5:24:55:
fb:a7:cb:13:b6:32:9e:f6:2c:6b:5b:9f:10:90:54:
8e:6c:46:45:72:9d:a2:e6:a2:57:61:79:3f:6c:48:
1e:2a:e7:b1:3d:fc:0b:13:e4:ee:37:56:20:08:e3:
66:02:8f:92:16:6b:ab:42:cb:28:ba:3e:06:dd:75:
c7:1c:6f:92:5c:d3:43:fc:bd:70:81:c4:8a:eb:45:
ba:07:73:55:cf:e5:60:fd:71:c8:a5:1c:85:14:cb:
a0:93:aa:d3:0b:3e:fc:4c:83:ad:ae:81:25:ab:3c:
4c:41:0f:c0:60:d9:cc:bd:cb:eb:8c:be:a1:39:e3:
c1:96:85:12:b1:ae:f2:d5:ca:81:1d:e2:dd:49:ba:
0a:e6:07:2f:d5:a9:05:81:74:79:03:c0:b7:30:d1:
02:38:92:0e:63:d4:a3:1b:1d:25:3a:31:ce:4b:2c:
cb:20:d5:b7:b7:76:d0:80:34:5c:6e:b4:1c:ed:cf:
9c:81:f7:a6:e2:9f:09:2c:06:99:78:46:27:fc:ad:
92:52:5b:72:d5:c5:96:94:4b:32:79:2d:24:a2:7e:
b7:68:b3:7f:ee:ef:ac:15:08:c9:c7:28:35:4f:bc:
e7:43:da:ea:b5:b9:9b:b8:1a:ae:7f:a1:18:9d:ce:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:DA:72:0E:1C:28:55:34:0A:86:9E:09:7C:42:AC:B6:5B:8C:FE
X509v3 Authority Key Identifier:
keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.64.0/20
Signature Algorithm: sha256WithRSAEncryption
29:c5:0b:bf:4b:ab:81:a4:a1:b3:7c:4d:7d:d3:c3:1f:a5:8d:
50:9f:11:c1:38:37:2c:f8:ff:eb:53:80:41:ac:b4:ad:42:9d:
05:26:6a:28:3e:15:79:7d:15:f8:70:0c:37:b0:b0:5b:22:24:
0c:db:ad:f7:12:8f:66:bc:55:94:6a:aa:10:75:33:b7:53:65:
d4:ed:e3:da:d2:18:a1:a1:fc:bb:64:31:62:19:23:fb:95:66:
18:77:f1:27:2f:9c:c0:a1:90:21:a7:7d:23:03:69:36:a4:d0:
b2:0f:db:84:06:5f:84:de:db:d4:d8:f9:08:2a:ee:4f:9e:cf:
dd:ab:98:4f:b0:a1:ce:92:80:a1:c8:55:1f:72:23:66:17:c0:
d0:d9:d6:c6:dd:b8:1c:6c:6f:e1:02:66:a7:b1:ac:b2:43:ae:
e6:8b:a4:00:5f:cf:0c:b3:a4:8d:cd:fa:54:22:0f:11:7e:f7:
9d:48:be:6e:df:0e:c4:cd:f7:1e:a9:3b:6d:00:ab:35:3a:df:
99:00:ee:39:17:44:8a:a4:eb:fa:25:b3:1b:47:0c:cc:9f:c8:
d9:7f:90:9f:5b:8e:d2:99:d2:95:13:09:45:9c:ec:da:90:7f:
42:25:94:f0:b8:b1:81:41:6a:a3:48:6d:67:5f:dd:69:06:32:
1e:53:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:30:08 2025 by rpki-client