
$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
File: 3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier: Nmd6bE+y+hSnvt9rmkslV25mYJ965pyyx1PIrqIg9EE=
Subject key identifier: 33:F1:9F:C8:A6:81:07:C6:14:8B:9A:93:7F:9E:AA:3B:16:A8:F5:C0
Certificate issuer: /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial: 31CFC91BAF183C0EAD81F46B62478EDF695C4459
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
Signing time: Thu 19 Mar 2026 17:09:58 +0000
ROA not before: Thu 19 Mar 2026 17:04:58 +0000
ROA not after: Thu 18 Mar 2027 17:09:58 +0000
asID: 263980
IP address blocks: 138.255.244.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 09:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cf:c9:1b:af:18:3c:0e:ad:81:f4:6b:62:47:8e:df:69:5c:44:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Validity
Not Before: Mar 19 17:04:58 2026 GMT
Not After : Mar 18 17:09:58 2027 GMT
Subject: CN=33F19FC8A68107C6148B9A937F9EAA3B16A8F5C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:77:6f:3d:9d:5a:31:8e:4c:8e:ae:3f:43:
97:f4:10:64:29:21:c4:3f:72:48:e2:3d:63:b1:f9:
a1:73:49:e5:99:c1:b8:a2:cf:57:be:38:10:ab:a6:
aa:5d:08:6e:61:0c:7c:cd:d3:cd:e7:fc:4e:12:69:
2d:b3:6e:22:2f:7b:3b:bc:c6:7c:df:e9:ae:6f:ef:
9b:4a:9e:8c:fd:98:d8:c0:05:d4:a4:57:bb:11:f8:
e7:6b:f2:38:c3:95:b2:8f:18:73:8a:09:5d:c6:61:
f3:cf:6e:18:1b:e4:4c:8a:77:ac:78:51:fa:77:04:
08:ed:46:74:38:a4:b3:63:e0:01:d3:3b:0f:f0:67:
d0:57:61:f2:96:c4:41:40:42:e1:16:27:6e:5d:fc:
bf:76:92:4a:05:ad:39:2c:52:36:32:f1:0e:6b:cf:
d4:bf:d2:23:6c:28:ec:1d:31:c3:48:f8:58:9e:ce:
0c:46:8b:0a:6e:fd:7b:5a:55:ee:51:0b:44:ea:1a:
19:38:56:97:33:7c:f7:cd:f8:1b:2d:0b:4e:31:fc:
85:30:e9:b3:36:ce:a0:4f:0a:50:99:08:e0:bd:db:
8d:82:cd:3c:7a:fc:82:9d:ca:e9:1f:d0:68:69:4c:
d5:ea:27:a2:ff:c5:4f:81:f5:3a:a8:d1:17:23:f1:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:9F:C8:A6:81:07:C6:14:8B:9A:93:7F:9E:AA:3B:16:A8:F5:C0
X509v3 Authority Key Identifier:
keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:41:36:98:48:e5:1b:2a:5c:cf:c4:05:d1:7f:e3:07:1a:56:
3f:48:e3:b0:a8:eb:cb:97:c2:9b:3b:3c:df:e5:9d:95:5b:44:
7f:62:4a:b2:9b:45:ca:c2:61:fc:b8:7e:97:e1:3b:70:5c:6f:
cf:87:27:de:c2:6f:ed:d4:a2:f6:29:91:bd:a0:95:50:fc:69:
af:cb:0a:0e:6c:e8:e2:87:38:ff:19:4c:9d:58:f8:d4:77:4f:
a5:2a:a4:84:da:e4:8f:c3:44:d8:ed:96:1b:24:86:5e:d7:64:
a9:e5:1c:59:88:a4:e3:c5:85:ca:45:72:3d:b4:1e:72:34:d0:
82:97:fa:f8:0f:4f:30:48:da:f5:0c:eb:29:d7:79:b7:5d:75:
ec:b8:a3:45:35:f6:07:f3:63:21:66:f2:7e:4f:83:1d:eb:05:
7b:67:3f:4d:c0:f0:17:b8:08:41:60:b7:01:15:8c:f8:c7:e7:
ef:c4:be:78:ed:e9:bf:3f:2d:bd:e3:c5:13:3a:07:bb:d9:8e:
ef:54:22:b6:83:5e:8a:87:65:d8:86:c8:e5:6f:37:b4:56:08:
0a:06:b7:31:cd:03:de:12:a7:e1:73:cb:f1:fe:3d:76:8e:ce:
ad:e2:3c:3e:ab:72:17:c8:80:c0:f2:35:ce:80:ca:0b:3a:8f:
18:e0:5b:51
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMc/JG68YPA6tgfRrYkeO32lcRFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwNzU1Q0RBMTBEQkVCQkE2QTgyNDExMkY2N0NEQUU2
MTQ0QTFFMjAeFw0yNjAzMTkxNzA0NThaFw0yNzAzMTgxNzA5NThaMDMxMTAvBgNV
BAMTKDMzRjE5RkM4QTY4MTA3QzYxNDhCOUE5MzdGOUVBQTNCMTZBOEY1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KndvPZ1aMY5Mjq4/Q5f0EGQp
IcQ/ckjiPWOx+aFzSeWZwbiiz1e+OBCrpqpdCG5hDHzN083n/E4SaS2zbiIvezu8
xnzf6a5v75tKnoz9mNjABdSkV7sR+Odr8jjDlbKPGHOKCV3GYfPPbhgb5EyKd6x4
Ufp3BAjtRnQ4pLNj4AHTOw/wZ9BXYfKWxEFAQuEWJ25d/L92kkoFrTksUjYy8Q5r
z9S/0iNsKOwdMcNI+FiezgxGiwpu/XtaVe5RC0TqGhk4VpczfPfN+BstC04x/IUw
6bM2zqBPClCZCOC9242CzTx6/IKdyukf0GhpTNXqJ6L/xU+B9Tqo0Rcj8fNJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUM/GfyKaBB8YUi5qTf56qOxao9cAwHwYDVR0j
BBgwFoAUKgdVzaENvrumqCQRL2fNrmFEoeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVXR2VNVWdla0hKZDg3M1pnSGRjSjk5c1dEbllRelZtSnlVck5QUHRE
OVMvMC8yQTA3NTVDREExMERCRUJCQTZBODI0MTEyRjY3Q0RBRTYxNDRBMUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDc1NUNEQTEwREJFQkJB
NkE4MjQxMTJGNjdDREFFNjE0NEExRTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1V0dlTVVnZWtISmQ4NzNaZ0hkY0o5OXNXRG5ZUXpWbUp5VXJOUFB0RDlTLzAv
MzEzMzM4MmUzMjM1MzUyZTMyMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/9DANBgkqhkiG9w0BAQsFAAOCAQEAW0E2
mEjlGypcz8QF0X/jBxpWP0jjsKjry5fCmzs83+WdlVtEf2JKsptFysJh/Lh+l+E7
cFxvz4cn3sJv7dSi9imRvaCVUPxpr8sKDmzo4oc4/xlMnVj41HdPpSqkhNrkj8NE
2O2WGySGXtdkqeUcWYik48WFykVyPbQecjTQgpf6+A9PMEja9QzrKdd5t1117Lij
RTX2B/NjIWbyfk+DHesFe2c/TcDwF7gIQWC3ARWM+Mfn78S+eO3pvz8tvePFEzoH
u9mO71QitoNeiodl2IbI5W83tFYICga3Mc0D3hKn4XPL8f49do7OreI8PqtyF8iA
wPI1zoDKCzqPGOBbUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:57:25 2026 by rpki-client