
$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32332d3233203d3e20323634323934.roa
File: 3133382e3132312e3132382e302f32332d3233203d3e20323634323934.roa (raw, json)
Hash identifier: 7MY2iAHQ357CmbPzjpOkomop3gk7/U0r2ejdV6X1D/I=
Subject key identifier: 85:35:3E:72:64:6D:A0:6C:D1:71:48:5B:E5:91:69:5F:2C:3B:40:EA
Certificate issuer: /CN=29E752800F8BF73453CEA055406DCC5F61330F19
Certificate serial: 6481AC818221EC9CB3109C6875C902E4825CF641
Authority key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32332d3233203d3e20323634323934.roa
Signing time: Wed 25 Mar 2026 13:36:46 +0000
ROA not before: Wed 25 Mar 2026 13:31:46 +0000
ROA not after: Wed 24 Mar 2027 13:36:46 +0000
asID: 264294
IP address blocks: 138.121.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 11:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:81:ac:81:82:21:ec:9c:b3:10:9c:68:75:c9:02:e4:82:5c:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29E752800F8BF73453CEA055406DCC5F61330F19
Validity
Not Before: Mar 25 13:31:46 2026 GMT
Not After : Mar 24 13:36:46 2027 GMT
Subject: CN=85353E72646DA06CD171485BE591695F2C3B40EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:02:48:b5:fe:0a:a8:be:dc:27:85:ef:b5:
16:70:e8:0d:96:ce:24:0c:66:88:8c:0d:98:2d:dd:
3b:01:0f:94:a9:43:1b:1b:ce:66:02:84:11:5b:1f:
d9:9d:35:05:81:b4:dc:5f:10:8c:1e:dc:1f:90:b3:
68:25:6e:f7:eb:a7:b1:78:0b:a2:74:5f:d9:f7:06:
34:3a:a9:db:ff:8e:3c:c9:88:82:d7:eb:8a:ab:3a:
1e:96:c1:a1:5b:fa:18:ea:cd:5b:b0:43:84:4e:f3:
be:05:ca:c4:78:b7:73:4a:3c:fe:06:67:f1:52:c7:
77:a9:7e:64:38:ca:30:fc:b5:a3:15:d7:34:a0:e6:
d7:0b:ec:14:f2:72:54:5b:8e:61:8b:32:26:5a:0a:
4e:ed:41:03:60:e0:bb:3d:c7:29:93:3d:f7:11:78:
4b:69:b0:26:5a:10:e6:9b:44:84:b0:10:4c:bf:a8:
b5:f1:07:e6:b3:51:d9:fb:42:9e:30:9d:07:be:de:
35:17:91:22:5f:a7:1f:d7:e4:87:10:27:45:1c:b2:
83:51:98:3e:5f:c0:63:db:e8:af:cd:3f:24:da:ed:
9b:d3:bc:50:75:63:aa:6f:bf:a2:7e:4c:d8:c9:d2:
1c:f1:dd:86:10:1f:a9:f0:9c:91:86:dc:1c:4b:38:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:3E:72:64:6D:A0:6C:D1:71:48:5B:E5:91:69:5F:2C:3B:40:EA
X509v3 Authority Key Identifier:
keyid:29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3133382e3132312e3132382e302f32332d3233203d3e20323634323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.128.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:bd:13:6f:3e:a6:31:f1:6f:41:08:89:96:e8:cf:74:b1:36:
98:e1:58:40:e1:d5:b8:6f:6a:24:c1:e4:0f:d6:ae:bc:63:55:
d7:65:15:2b:5e:85:df:58:69:9d:52:d8:25:fa:e9:18:e5:61:
6d:90:7a:c9:75:d0:6c:b7:4d:ba:46:3d:b7:51:c3:d1:ea:55:
15:3c:66:4e:04:2c:31:48:d8:e2:4e:6d:41:08:47:1b:86:4a:
b8:72:51:96:76:5a:f7:71:fe:6b:b4:1b:50:e0:5a:58:fc:a8:
c9:71:bd:1b:0b:bb:ab:34:28:8a:bd:04:be:54:56:83:db:94:
1c:34:d5:59:33:7d:21:02:0b:21:97:5d:5f:38:6c:bc:31:c5:
b2:de:53:65:31:d5:23:f4:ee:5d:b7:cc:2e:d4:e5:6c:06:f0:
4c:63:24:90:14:a1:ca:3d:9b:72:52:2b:af:03:33:16:34:11:
21:34:d7:c3:8d:ca:a4:4c:d2:32:f7:a4:88:69:23:40:5b:ca:
4f:45:4e:bc:43:1f:f1:9f:6e:41:93:cf:4c:9e:fb:43:81:73:
41:35:6e:a3:c6:53:5e:ed:e5:60:33:dd:69:d9:0a:b1:1c:a9:
76:b8:0f:3b:f9:83:76:aa:46:f2:d3:d0:ac:79:db:35:bb:c4:
c1:7d:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:21:00 2026 by rpki-client