
$ rpki-client -vvvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS264367.roa
File: AS264367.roa (raw, json)
Hash identifier: rjfb+7wr2e7BTM8tmr5XO3hwGgDNzMoxBlQ4fty6C2E=
Subject key identifier: 1E:63:4D:E5:40:D4:FF:04:5C:D0:67:4B:16:4E:2F:F6:CA:9F:1E:5A
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 7D8629E9214C57FB9F5273811E34134EE3157E7D
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS264367.roa
Signing time: Tue 22 Sep 2026 03:59:45 +0000
ROA not before: Tue 22 Sep 2026 03:54:45 +0000
ROA not after: Tue 21 Sep 2027 03:59:45 +0000
asID: 264367
IP address blocks: 131.108.32.0/22 maxlen: 24
138.185.216.0/22 maxlen: 24
168.196.136.0/22 maxlen: 24
2804:1d68::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 10:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:86:29:e9:21:4c:57:fb:9f:52:73:81:1e:34:13:4e:e3:15:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Sep 22 03:54:45 2026 GMT
Not After : Sep 21 03:59:45 2027 GMT
Subject: CN=1E634DE540D4FF045CD0674B164E2FF6CA9F1E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:54:db:bd:6d:74:26:55:25:12:ad:88:72:
54:dc:b2:4c:8f:a4:92:de:f6:02:43:5d:c3:f5:90:
68:58:bc:d1:7a:1e:55:87:39:64:f3:21:ff:20:ff:
ae:2a:ba:1a:1f:b3:bf:ed:80:72:df:52:a7:ac:93:
fd:35:60:86:bc:a1:2b:e0:18:11:fd:37:ba:28:a1:
0a:c0:d1:0a:a3:4c:90:28:52:59:e3:1d:15:62:f8:
41:aa:46:41:a0:6a:8a:93:b4:ab:de:8a:49:9d:1a:
e6:81:1f:97:93:62:36:cb:f4:72:9b:8e:fc:45:62:
ed:d8:3c:74:38:3e:92:8b:18:ac:d6:e1:69:3b:f2:
35:3c:1a:f5:c6:01:04:80:2e:28:de:3c:52:d5:13:
d1:91:be:55:89:54:f0:81:fa:c4:05:47:2c:a0:2f:
4b:a4:6f:5f:4b:10:92:e8:fd:48:07:ae:41:62:12:
22:ca:53:0d:3a:c2:db:cc:89:96:b0:0b:69:c9:4b:
a3:e7:73:27:26:e8:85:2a:04:14:eb:36:f6:22:6c:
c6:29:30:87:30:69:04:6e:d8:76:e1:c2:07:35:51:
55:58:7c:43:85:d7:68:ad:10:f7:70:98:19:6f:aa:
10:ae:15:50:7e:27:e2:85:55:ed:2a:58:a4:26:cd:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:4D:E5:40:D4:FF:04:5C:D0:67:4B:16:4E:2F:F6:CA:9F:1E:5A
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS264367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.32.0/22
138.185.216.0/22
168.196.136.0/22
IPv6:
2804:1d68::/32
Signature Algorithm: sha256WithRSAEncryption
25:23:82:91:72:b0:9b:5d:e2:7a:51:2b:37:25:17:b8:a7:9c:
cc:8a:e5:3d:a0:bb:4b:36:92:11:22:7c:e8:2f:af:cc:97:a0:
79:a6:19:03:f4:dc:bf:9f:01:00:cb:6d:ae:1a:a9:4e:9e:78:
81:38:8a:b3:96:a9:7e:55:2e:ad:45:82:13:c7:17:bc:be:5c:
0c:df:36:fb:71:4c:61:27:17:db:42:39:a3:0c:ef:0d:97:65:
15:95:0a:42:7b:a0:a1:09:51:28:90:8e:2a:9a:5a:d4:a8:60:
66:9b:93:21:26:59:2b:71:d7:7d:db:a3:65:d2:56:46:3b:ed:
db:10:65:6f:91:25:d4:e4:c3:d0:ac:c5:80:01:1b:69:14:0f:
ce:3c:9f:84:82:f6:ba:91:ca:ac:8e:18:ad:7a:fe:20:0a:74:
a7:2b:54:b2:1d:2a:0a:fe:b5:16:83:75:9a:79:4a:c7:8b:5f:
97:b4:bf:1e:88:3f:f9:41:34:b3:08:55:7f:af:e2:60:20:d1:
5e:da:33:bb:ea:a2:86:34:4c:63:bf:b3:37:58:db:1f:cc:e6:
ce:77:36:dc:c7:f8:26:a8:5d:cc:84:49:35:4a:64:f2:d0:cd:
5b:b5:96:82:e2:59:50:39:7a:0f:69:78:3a:59:09:37:d6:1f:
be:18:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:00:00 2026 by rpki-client