
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa
File: 3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa (raw, json)
Hash identifier: T8lgVpgLYSUe1ipalKTo5B7Or3n0UQWhKhkrj10JnKw=
Subject key identifier: B1:31:C6:C4:72:6A:69:6F:6E:86:39:56:93:DF:74:84:D8:2A:FB:7D
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 30C2D41F1493B6547D1EB49BEB7A1441BFC38580
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa
Signing time: Tue 20 Oct 2026 15:34:42 +0000
ROA not before: Tue 20 Oct 2026 15:29:42 +0000
ROA not after: Tue 19 Oct 2027 15:34:42 +0000
asID: 52721
IP address blocks: 138.185.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 05:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c2:d4:1f:14:93:b6:54:7d:1e:b4:9b:eb:7a:14:41:bf:c3:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Oct 20 15:29:42 2026 GMT
Not After : Oct 19 15:34:42 2027 GMT
Subject: CN=B131C6C4726A696F6E86395693DF7484D82AFB7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:f8:9b:77:be:cf:09:7b:15:39:32:6a:c3:
76:a2:58:95:a4:20:74:a3:9a:e9:4c:4b:18:34:bc:
00:b7:28:bc:6d:63:6b:08:5b:f2:15:55:26:9b:48:
df:c7:ce:7c:c9:d6:be:e4:ab:c5:bd:70:32:81:cf:
87:2a:27:f6:9a:ec:f7:01:67:c6:66:00:c2:67:74:
12:73:bf:32:5d:28:66:17:6f:07:c2:28:06:6d:62:
ec:34:ce:bc:51:aa:5c:6d:76:b6:69:17:81:2c:f8:
6c:16:4a:3e:96:f0:74:93:84:bc:fb:91:4c:c7:39:
85:66:e7:ed:c5:a4:29:8f:1b:b1:46:10:cf:20:dd:
bf:a0:36:14:33:b4:7e:18:c6:ee:c5:75:8e:c1:88:
ca:c3:f6:cf:3d:17:f0:8a:94:20:c9:1d:cc:37:5a:
b0:a7:7f:df:ed:0a:dd:e7:c5:05:be:5a:81:9c:93:
93:1c:f4:6b:5b:d6:b6:26:5e:1a:71:f1:94:b6:e2:
d9:21:16:6b:90:c0:66:b6:6a:2e:68:4b:cb:88:03:
e6:9f:06:ec:54:85:cb:cc:26:a2:60:73:99:c5:a9:
f6:f2:17:06:be:a8:24:fe:09:cf:1c:5e:16:00:fa:
b8:19:42:27:1f:9b:97:cf:d9:76:ab:76:6a:53:ca:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:C6:C4:72:6A:69:6F:6E:86:39:56:93:DF:74:84:D8:2A:FB:7D
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.108.0/22
Signature Algorithm: sha256WithRSAEncryption
78:de:5a:54:c0:31:82:71:bf:b0:3f:77:de:ed:3c:65:82:a4:
48:26:7d:a8:b3:0b:95:1d:0f:83:d0:6b:de:82:53:7f:15:0f:
61:f5:12:c7:60:0e:c2:a4:b9:fb:f9:33:b1:a3:20:2b:47:43:
42:5b:9f:66:81:27:e8:47:fc:9c:81:b4:31:28:94:f4:d3:a3:
81:e9:89:26:c3:cc:24:b2:ed:92:81:1b:c6:95:4c:24:fe:13:
4b:6a:24:ca:02:1f:a2:f2:22:d6:4f:ce:d1:4c:5c:eb:4a:e8:
58:0f:66:9f:31:d1:70:24:21:8b:2a:3c:94:27:b9:75:bc:1a:
4b:50:16:c7:98:8f:04:8b:14:92:e6:96:b0:51:14:83:e9:5e:
05:42:98:e4:95:19:07:63:e4:96:62:55:81:3c:0c:64:b9:08:
ec:03:ec:01:b1:56:99:a0:51:75:f3:0b:65:fe:79:f5:e9:99:
0a:a8:55:05:ce:7e:01:7f:6d:48:fe:ba:eb:78:c4:6c:6f:0a:
bb:66:8a:c2:53:44:e9:7b:25:7d:e2:aa:e6:1d:e7:a5:97:75:
2e:2e:be:df:f0:46:58:ab:51:9b:81:d3:4d:a8:54:e3:2f:3d:
a1:dc:b9:ab:93:ee:04:f6:53:39:70:cc:e6:68:07:77:c1:8a:
da:18:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:12:33 2026 by rpki-client