
$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/3133382e3138362e31362e302f32322d3234203d3e203631363233.roa
File: 3133382e3138362e31362e302f32322d3234203d3e203631363233.roa (raw, json)
Hash identifier: JWwJnqFVLfb7s0xn8ymrfclHa6+SS+4LbQrsuCJSidU=
Subject key identifier: 2A:A8:9A:79:7B:15:5B:BD:3F:78:BB:80:C6:23:EB:BA:01:92:17:79
Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial: 2F964027C79EE51FD2E97F09B79F111CC6303087
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/3133382e3138362e31362e302f32322d3234203d3e203631363233.roa
Signing time: Fri 20 Mar 2026 20:34:52 +0000
ROA not before: Fri 20 Mar 2026 20:29:52 +0000
ROA not after: Fri 19 Mar 2027 20:34:52 +0000
asID: 61623
IP address blocks: 138.186.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:96:40:27:c7:9e:e5:1f:d2:e9:7f:09:b7:9f:11:1c:c6:30:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Validity
Not Before: Mar 20 20:29:52 2026 GMT
Not After : Mar 19 20:34:52 2027 GMT
Subject: CN=2AA89A797B155BBD3F78BB80C623EBBA01921779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:d9:3a:d1:2b:da:85:e3:16:4e:7f:3a:0e:
f6:9d:09:35:b9:88:8a:98:21:a6:40:36:00:6f:b9:
2e:ac:8f:31:d7:77:bf:89:d8:72:5f:fe:76:dd:98:
29:90:85:96:e5:0f:c8:c2:a1:31:bd:1c:d9:07:11:
39:4c:89:62:f9:6a:9c:04:55:a2:15:42:68:a6:16:
cc:71:83:5f:46:41:c8:1d:35:02:5b:c0:40:10:83:
60:69:55:84:67:83:ff:0d:16:8c:64:89:0b:d9:9e:
53:8c:2b:5e:bb:93:b4:ec:f3:0e:06:e5:60:ad:bd:
c3:99:d5:36:51:43:72:6c:d4:37:59:f1:5f:e9:2c:
e1:b1:3e:12:ac:5f:7e:18:ee:56:bb:6c:e9:4a:6c:
18:20:68:86:7b:00:9e:3d:66:ea:fc:a8:84:a7:25:
db:da:13:cd:e1:74:b3:70:c0:89:b0:a8:aa:b6:73:
b0:c9:ba:05:c6:b8:a1:63:e8:ba:c4:08:30:49:31:
73:e0:ce:32:ab:8e:c1:41:08:5b:22:9e:46:a0:fa:
e0:86:be:43:17:9f:a0:26:90:9d:11:50:b6:39:62:
af:27:06:aa:c9:a5:de:cc:f0:42:5b:d4:83:39:00:
ec:1d:eb:e9:db:3b:66:92:fc:10:2b:0a:2c:be:da:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:9A:79:7B:15:5B:BD:3F:78:BB:80:C6:23:EB:BA:01:92:17:79
X509v3 Authority Key Identifier:
keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/3133382e3138362e31362e302f32322d3234203d3e203631363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:79:67:3c:63:2f:47:3b:58:00:db:ac:46:52:48:31:5b:71:
c6:17:12:fd:f5:c7:f4:17:4e:9e:54:f7:82:82:9a:ec:28:ec:
9d:4c:09:f9:53:24:8f:35:dc:f0:e6:9d:6e:50:ba:7d:09:36:
20:e1:4e:4b:4e:d9:91:b1:27:84:d7:62:1e:7d:99:57:48:1f:
91:7e:26:f3:02:95:7f:23:ee:ed:72:7b:fa:bd:1c:71:4b:49:
40:1c:31:85:ca:ce:b3:34:26:9a:54:21:1c:c4:87:e8:9d:c8:
73:06:cb:4a:85:c9:86:d1:e0:0f:dc:92:22:71:52:fe:35:5a:
e2:6a:fd:11:ea:3f:2d:aa:eb:ef:88:cf:9d:0d:af:56:8c:e9:
4d:b1:c6:46:a3:d6:f5:db:5d:c1:33:a7:82:68:5f:01:37:d1:
d3:5d:e6:f5:60:00:30:53:45:46:aa:9f:81:88:0e:5a:ad:91:
26:49:ed:27:2c:89:71:e3:d0:62:56:52:af:82:30:75:d8:1e:
99:e8:48:05:1d:eb:50:53:b0:74:0e:cb:ae:aa:51:e9:ae:fe:
80:0d:01:94:3e:d7:4a:7e:40:8c:63:04:18:e0:34:e7:97:a9:
7d:68:70:8f:4e:7c:52:6f:6c:a5:46:b0:22:83:f3:c6:ec:4f:
a2:57:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:07 2026 by rpki-client