
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3234203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32322d3234203d3e20323633393430.roa (raw, json)
Hash identifier: Uh0wyjJbN+qDHOh4F+h0DMVVA4FJkPRqqRLvTE+BR3E=
Subject key identifier: B0:38:C1:33:79:12:EB:3C:AD:5C:44:F4:3E:7C:53:1F:E2:D0:85:5C
Certificate issuer: /CN=338D018DD1A983A496F7C17B72907F6B5CE80AC1
Certificate serial: 2A63FB6DBBC8C115F6AFA78FAB7DB5354E29C7C1
Authority key identifier: 33:8D:01:8D:D1:A9:83:A4:96:F7:C1:7B:72:90:7F:6B:5C:E8:0A:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3234203d3e20323633393430.roa
Signing time: Sun 31 May 2026 11:40:11 +0000
ROA not before: Sun 31 May 2026 11:35:11 +0000
ROA not after: Sun 30 May 2027 11:40:11 +0000
asID: 263940
IP address blocks: 138.185.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.crl
rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 13:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:63:fb:6d:bb:c8:c1:15:f6:af:a7:8f:ab:7d:b5:35:4e:29:c7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338D018DD1A983A496F7C17B72907F6B5CE80AC1
Validity
Not Before: May 31 11:35:11 2026 GMT
Not After : May 30 11:40:11 2027 GMT
Subject: CN=B038C1337912EB3CAD5C44F43E7C531FE2D0855C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:93:b1:4c:b8:c0:0d:f0:3c:01:1d:83:31:
d7:66:e8:8d:01:f0:4a:1a:a1:9c:8c:f9:84:c8:23:
bd:7e:d1:d3:ea:de:99:a1:49:3c:f2:5b:64:68:9d:
47:01:9d:8c:6f:43:24:aa:37:39:84:e6:12:09:5f:
fc:c4:97:47:7d:f4:65:b9:33:9a:06:c2:38:14:e5:
b2:21:98:66:b8:5c:42:68:1b:b3:a9:41:9c:b8:2c:
19:29:39:20:01:f5:f9:82:86:69:da:bc:c3:66:1b:
01:eb:43:3f:0f:1b:8e:62:5c:3f:25:17:06:c7:bb:
2c:27:f3:7f:fd:f6:6d:ed:5a:62:b5:17:9e:30:09:
2a:d1:69:8f:c9:53:a4:ca:08:7b:0a:61:f3:9c:86:
9c:aa:28:ab:a9:e3:09:be:ce:d6:df:8f:ed:37:32:
60:e6:f7:cf:3f:09:ae:0f:fe:ac:0c:0f:90:fe:a6:
5a:aa:01:9d:16:4a:31:3f:cf:3e:06:c6:56:96:98:
3f:75:ea:f6:eb:c0:fc:9d:7b:2d:9e:3d:5e:b7:08:
72:47:e8:32:a4:29:fc:f8:21:7b:a8:6b:05:4f:27:
47:a3:63:9f:f9:08:0f:01:11:1a:8c:61:73:a7:05:
f1:54:b9:0e:87:35:9b:a0:5e:e9:e6:e1:42:a1:0d:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:C1:33:79:12:EB:3C:AD:5C:44:F4:3E:7C:53:1F:E2:D0:85:5C
X509v3 Authority Key Identifier:
keyid:33:8D:01:8D:D1:A9:83:A4:96:F7:C1:7B:72:90:7F:6B:5C:E8:0A:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3234203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/22
Signature Algorithm: sha256WithRSAEncryption
06:66:01:af:f6:4f:34:ba:21:08:3d:9b:22:38:1e:fa:2a:dd:
95:65:3a:99:30:fc:26:21:1c:e7:9e:48:ad:2a:ba:17:47:3e:
5f:e0:5c:8b:36:5c:81:62:ae:2e:43:10:75:54:e8:7f:11:2d:
77:c5:ea:4f:66:5c:4b:b6:76:37:be:f7:88:1e:80:75:49:64:
f2:aa:37:69:51:4c:01:7b:58:14:e6:7d:ca:95:c1:8c:18:cf:
fb:92:78:a5:49:94:b1:df:05:ab:98:c4:f4:00:80:e9:80:be:
77:9e:1c:29:57:4a:9a:fe:3f:1c:dc:e8:90:cf:49:0d:5f:2a:
ea:a2:ac:f4:56:b3:af:2e:df:93:71:34:76:51:3d:75:4f:f8:
05:ff:4a:de:7b:25:ae:f3:a5:22:7a:0d:70:d0:75:a4:8e:b4:
ac:ed:38:0a:74:91:9b:e2:f0:a3:38:f8:9b:d0:88:38:61:b3:
04:c3:9f:c2:82:ff:c7:84:f3:b7:e8:87:3c:90:27:fb:0f:55:
b5:ab:24:67:e7:aa:b6:a1:6b:21:4f:82:4b:5a:44:64:fb:85:
d4:5b:d6:08:b2:93:60:0c:a5:56:7b:0f:71:7b:ec:7f:cc:1d:
ea:9c:fd:4a:c5:49:33:2d:17:7f:f9:3a:34:ca:a2:5f:61:af:
85:72:6f:53
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKmP7bbvIwRX2r6ePq321NU4px8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4RDAxOEREMUE5ODNBNDk2RjdDMTdCNzI5MDdGNkI1
Q0U4MEFDMTAeFw0yNjA1MzExMTM1MTFaFw0yNzA1MzAxMTQwMTFaMDMxMTAvBgNV
BAMTKEIwMzhDMTMzNzkxMkVCM0NBRDVDNDRGNDNFN0M1MzFGRTJEMDg1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfV5OxTLjADfA8AR2DMddm6I0B
8EoaoZyM+YTII71+0dPq3pmhSTzyW2RonUcBnYxvQySqNzmE5hIJX/zEl0d99GW5
M5oGwjgU5bIhmGa4XEJoG7OpQZy4LBkpOSAB9fmChmnavMNmGwHrQz8PG45iXD8l
FwbHuywn83/99m3tWmK1F54wCSrRaY/JU6TKCHsKYfOchpyqKKup4wm+ztbfj+03
MmDm988/Ca4P/qwMD5D+plqqAZ0WSjE/zz4GxlaWmD916vbrwPydey2ePV63CHJH
6DKkKfz4IXuoawVPJ0ejY5/5CA8BERqMYXOnBfFUuQ6HNZugXunm4UKhDQfFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsDjBM3kS6zytXET0PnxTH+LQhVwwHwYDVR0j
BBgwFoAUM40BjdGpg6SW98F7cpB/a1zoCsEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvMzM4RDAxOEREMUE5ODNBNDk2RjdDMTdCNzI5MDdGNkI1Q0U4MEFDMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzhEMDE4REQxQTk4M0E0OTZG
N0MxN0I3MjkwN0Y2QjVDRTgwQUMxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAoq5/DANBgkqhkiG9w0BAQsFAAOCAQEABmYBr/ZP
NLohCD2bIjge+irdlWU6mTD8JiEc555IrSq6F0c+X+BcizZcgWKuLkMQdVTofxEt
d8XqT2ZcS7Z2N773iB6AdUlk8qo3aVFMAXtYFOZ9ypXBjBjP+5J4pUmUsd8Fq5jE
9ACA6YC+d54cKVdKmv4/HNzokM9JDV8q6qKs9Fazry7fk3E0dlE9dU/4Bf9K3nsl
rvOlInoNcNB1pI60rO04CnSRm+Lwozj4m9CIOGGzBMOfwoL/x4Tzt+iHPJAn+w9V
taskZ+eqtqFrIU+CS1pEZPuF1FvWCLKTYAylVnsPcXvsf8wd6pz9SsVJMy0Xf/k6
NMqiX2GvhXJvUw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:43:59 2026 by rpki-client