
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
File: AS53085.roa (raw, json)
Hash identifier: 8vAExpicZ/abVsjAhgFumFN+VegnHZs5khm7zgkOa6g=
Subject key identifier: AC:65:79:AD:D5:FC:EE:90:0E:92:F6:51:EC:A6:60:A4:41:09:C7:64
Certificate issuer: /CN=135830443F9F0628207359060862957206FBE517
Certificate serial: 5EAC360C0CC873D0451A09F303995A88694E5A27
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
Signing time: Wed 29 Apr 2026 19:45:01 +0000
ROA not before: Wed 29 Apr 2026 19:40:01 +0000
ROA not after: Wed 28 Apr 2027 19:45:01 +0000
asID: 53085
IP address blocks: 132.255.148.0/22 maxlen: 24
187.33.160.0/20 maxlen: 24
191.5.144.0/20 maxlen: 24
2804:1790::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 05:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ac:36:0c:0c:c8:73:d0:45:1a:09:f3:03:99:5a:88:69:4e:5a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135830443F9F0628207359060862957206FBE517
Validity
Not Before: Apr 29 19:40:01 2026 GMT
Not After : Apr 28 19:45:01 2027 GMT
Subject: CN=AC6579ADD5FCEE900E92F651ECA660A44109C764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:19:9a:6e:b2:67:84:13:81:80:95:7a:ab:
48:cc:1b:9b:8b:3c:eb:fc:13:ed:24:5a:b0:e2:ac:
a6:c6:5e:d6:df:b7:40:fe:51:86:59:92:23:9b:40:
9b:72:3e:3c:2f:f0:c6:c5:5c:81:43:bf:4b:06:0e:
24:a7:8f:07:22:ed:40:9b:c8:e1:b6:7a:cf:0e:cf:
73:12:0b:7d:0d:10:2b:5d:55:f6:dd:d7:e0:c7:a5:
fd:b9:26:f7:7d:3d:41:89:6e:5e:83:e9:b6:ae:36:
a0:e7:a4:e0:f1:84:9a:16:21:af:0b:3d:44:ac:09:
82:9c:03:7b:0e:15:58:20:7c:60:fa:d6:e7:00:83:
49:b8:c6:43:ae:86:c5:6b:c9:92:f8:e5:ed:06:79:
65:22:b9:c8:8d:0b:91:a8:fd:61:75:97:31:6b:7d:
ef:46:e7:6a:73:4d:46:38:c6:7c:a0:19:59:ec:be:
82:ba:94:f9:05:10:10:43:d6:6f:0b:02:65:0f:83:
83:d8:ff:16:95:51:c6:0e:9f:90:96:a7:c7:23:33:
b6:21:7a:60:e0:d6:8d:68:ec:4a:e9:ba:3d:9b:12:
b8:d7:a6:06:03:ee:86:b6:fd:71:48:34:1b:bf:c0:
98:4b:6d:be:e7:e9:5f:e5:67:9b:a8:55:ef:4a:2c:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:79:AD:D5:FC:EE:90:0E:92:F6:51:EC:A6:60:A4:41:09:C7:64
X509v3 Authority Key Identifier:
keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.148.0/22
187.33.160.0/20
191.5.144.0/20
IPv6:
2804:1790::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b1:3a:1f:16:cb:3b:92:1c:40:da:8c:b0:79:d6:df:88:ab:
39:f4:1a:70:3f:32:a9:b1:4f:05:0a:00:58:8b:aa:e2:70:a6:
6d:0b:ee:ff:45:bc:01:c7:7e:1a:41:72:d2:37:db:f5:1a:09:
07:e1:77:f7:c2:c7:be:63:ea:83:2e:aa:69:09:21:e4:bf:22:
30:45:c5:6c:84:48:63:58:01:47:ce:66:aa:99:0f:6f:d3:94:
24:d3:e8:0e:ba:c2:7f:97:f9:d5:a2:68:ca:7c:c1:31:db:98:
0e:03:d9:11:44:f1:01:24:d1:1e:0b:2e:ad:58:5f:94:07:bc:
7c:0f:77:66:17:df:06:7c:2f:9b:7c:6f:7c:f4:0b:ce:0b:d0:
85:14:5d:34:b5:de:e0:fb:8e:24:68:68:1d:24:08:ef:e6:33:
ff:75:9e:77:a2:ec:8e:f7:ef:78:24:b2:1f:b1:20:3f:4c:79:
16:2d:ab:df:df:32:7a:2c:31:b3:82:55:53:5f:34:1d:86:59:
a6:77:d6:71:41:53:0b:e9:77:eb:f7:22:e5:72:f6:fb:a0:a8:
94:6e:d1:a6:5a:9c:20:be:c2:93:88:48:e1:3d:89:77:f3:bd:
d8:26:cd:98:0d:2b:ec:18:28:b9:5c:48:0e:b9:08:1f:73:1d:
0e:3e:a6:1c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXqw2DAzIc9BFGgnzA5laiGlOWicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1ODMwNDQzRjlGMDYyODIwNzM1OTA2MDg2Mjk1NzIw
NkZCRTUxNzAeFw0yNjA0MjkxOTQwMDFaFw0yNzA0MjgxOTQ1MDFaMDMxMTAvBgNV
BAMTKEFDNjU3OUFERDVGQ0VFOTAwRTkyRjY1MUVDQTY2MEE0NDEwOUM3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNhmabrJnhBOBgJV6q0jMG5uL
POv8E+0kWrDirKbGXtbft0D+UYZZkiObQJtyPjwv8MbFXIFDv0sGDiSnjwci7UCb
yOG2es8Oz3MSC30NECtdVfbd1+DHpf25Jvd9PUGJbl6D6bauNqDnpODxhJoWIa8L
PUSsCYKcA3sOFVggfGD61ucAg0m4xkOuhsVryZL45e0GeWUiuciNC5Go/WF1lzFr
fe9G52pzTUY4xnygGVnsvoK6lPkFEBBD1m8LAmUPg4PY/xaVUcYOn5CWp8cjM7Yh
emDg1o1o7Erpuj2bErjXpgYD7oa2/XFINBu/wJhLbb7n6V/lZ5uoVe9KLBMtAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUrGV5rdX87pAOkvZR7KZgpEEJx2QwHwYDVR0j
BBgwFoAUE1gwRD+fBiggc1kGCGKVcgb75RcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC8xMzU4MzA0NDNGOUYwNjI4MjA3MzU5MDYwODYyOTU3MjA2RkJFNTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNTgzMDQ0M0Y5RjA2Mjgy
MDczNTkwNjA4NjI5NTcyMDZGQkU1MTcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTNTMw
ODUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAKE/5QDBAS7IaADBAS/BZAwDQQCAAIwBwMFACgEF5AwDQYJ
KoZIhvcNAQELBQADggEBAF+xOh8WyzuSHEDajLB51t+Iqzn0GnA/MqmxTwUKAFiL
quJwpm0L7v9FvAHHfhpBctI32/UaCQfhd/fCx75j6oMuqmkJIeS/IjBFxWyESGNY
AUfOZqqZD2/TlCTT6A66wn+X+dWiaMp8wTHbmA4D2RFE8QEk0R4LLq1YX5QHvHwP
d2YX3wZ8L5t8b3z0C84L0IUUXTS13uD7jiRoaB0kCO/mM/91nnei7I7373gksh+x
ID9MeRYtq9/fMnosMbOCVVNfNB2GWaZ31nFBUwvpd+v3IuVy9vugqJRu0aZanCC+
wpOISOE9iXfzvdgmzZgNK+wYKLlcSA65CB9zHQ4+phw=
-----END CERTIFICATE-----
Generated at Wed May 13 17:02:42 2026 by rpki-client