
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263297.roa
File: AS263297.roa (raw, json)
Hash identifier: 4ySKybOmHZPb49dbzeQSl6/IBR5bK/vgpNq4NWDIt9g=
Subject key identifier: BB:0D:5C:57:D6:BB:5C:E6:CA:69:AB:09:63:00:2C:52:10:D7:02:F4
Certificate issuer: /CN=135830443F9F0628207359060862957206FBE517
Certificate serial: 04D9A47CDD20084ADD73A52BD4DDA0D4560C2857
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263297.roa
Signing time: Wed 29 Apr 2026 19:45:43 +0000
ROA not before: Wed 29 Apr 2026 19:40:43 +0000
ROA not after: Wed 28 Apr 2027 19:45:43 +0000
asID: 263297
IP address blocks: 45.230.116.0/22 maxlen: 24
131.255.124.0/22 maxlen: 24
143.202.168.0/22 maxlen: 24
167.249.92.0/22 maxlen: 24
168.0.124.0/22 maxlen: 24
170.82.196.0/22 maxlen: 24
191.6.136.0/22 maxlen: 24
2804:13d0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 05:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d9:a4:7c:dd:20:08:4a:dd:73:a5:2b:d4:dd:a0:d4:56:0c:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135830443F9F0628207359060862957206FBE517
Validity
Not Before: Apr 29 19:40:43 2026 GMT
Not After : Apr 28 19:45:43 2027 GMT
Subject: CN=BB0D5C57D6BB5CE6CA69AB0963002C5210D702F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:60:0c:8c:26:19:14:3a:27:d8:c2:83:4f:
5f:9c:a3:00:30:9d:ba:3f:89:01:c2:ed:b3:63:5b:
a8:1a:aa:46:16:44:f5:c3:00:01:87:23:0d:48:86:
88:2a:37:89:ad:78:bf:7b:06:a9:f0:34:3a:15:e0:
53:9c:67:a8:09:ec:b8:6f:2f:6c:73:a2:05:ae:63:
48:3e:c7:de:62:26:ef:67:02:0c:e5:c8:e8:25:7a:
97:79:6b:1c:bf:61:9b:46:1e:6a:de:89:2c:dc:bd:
5b:b9:84:13:d9:a8:3c:4a:14:c4:41:d1:47:b2:39:
e9:45:3d:c7:e6:dd:81:07:29:8f:7a:81:97:98:91:
76:f3:12:94:b5:b7:70:30:42:9f:74:ef:2d:18:71:
03:d0:f4:84:c6:a2:20:20:c3:01:8d:72:54:3e:f6:
84:70:81:25:3d:cc:4b:69:f7:14:d4:c2:88:39:c1:
0d:aa:3e:d4:e4:65:0b:32:7a:36:4e:09:40:38:fe:
df:b7:31:c8:15:2e:38:68:ac:83:02:6c:50:fb:29:
c3:ee:95:68:f5:cc:47:09:b6:3e:8d:e5:3d:36:18:
15:6a:d9:2b:e8:3a:e9:0a:65:a2:f9:17:de:f5:36:
7b:a8:35:81:28:bb:d9:39:cc:d2:f5:71:99:06:3b:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:5C:57:D6:BB:5C:E6:CA:69:AB:09:63:00:2C:52:10:D7:02:F4
X509v3 Authority Key Identifier:
keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263297.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.116.0/22
131.255.124.0/22
143.202.168.0/22
167.249.92.0/22
168.0.124.0/22
170.82.196.0/22
191.6.136.0/22
IPv6:
2804:13d0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:ef:76:a4:3e:fd:8b:eb:75:91:89:61:27:a8:73:f8:76:3f:
42:ba:5f:8b:ef:e4:a4:af:42:4c:70:75:ca:92:82:07:4a:7d:
b3:f5:c9:b4:02:01:b7:42:a8:9f:14:68:d9:a9:f0:40:ef:1e:
2e:71:7e:53:ee:19:55:17:cc:63:c5:0a:ab:ca:24:11:e4:53:
76:11:2c:af:8f:00:f9:98:6d:39:7c:98:6b:1c:03:f1:2e:b2:
52:c7:21:ae:c5:74:58:05:bf:7d:e2:38:bb:7a:11:4d:65:bb:
6d:f9:cd:1d:5c:fd:19:16:63:74:08:5f:d7:f7:79:30:20:8e:
d0:7f:4d:60:f8:c1:0b:7a:c2:ba:46:22:2a:90:41:71:13:77:
fd:0d:ba:29:94:8b:06:f1:70:ff:ab:77:2f:93:4f:1b:4a:12:
6b:06:3a:87:b0:99:34:87:09:f8:0b:76:58:09:52:c6:c7:58:
af:10:f2:58:31:54:b8:f5:96:78:ea:71:bf:1d:fe:0b:38:2e:
15:65:c3:48:3b:e4:8a:d2:e0:b3:87:83:17:a2:e0:40:97:3a:
76:14:af:5b:f8:31:fc:41:91:e7:18:dd:c7:ce:6b:a5:cb:15:
25:07:17:51:16:16:52:9a:28:f5:46:d6:0a:50:61:30:fb:96:
f1:a0:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:45 2026 by rpki-client