
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
File: 3133382e35392e32302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: XHpAgDVXWmm3dvtSUNMBo9Vygmzy2O+ENv8zwtJBrI0=
Subject key identifier: 1F:CE:62:53:3E:D3:BC:E0:6E:30:95:90:88:4F:59:38:2F:8F:8F:7F
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 216D63EA3B1C4213AB31565065FA8C2783020A2D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
Signing time: Sat 04 Jul 2026 13:44:00 +0000
ROA not before: Sat 04 Jul 2026 13:39:00 +0000
ROA not after: Sat 03 Jul 2027 13:44:00 +0000
asID: 28201
IP address blocks: 138.59.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 22:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6d:63:ea:3b:1c:42:13:ab:31:56:50:65:fa:8c:27:83:02:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Jul 4 13:39:00 2026 GMT
Not After : Jul 3 13:44:00 2027 GMT
Subject: CN=1FCE62533ED3BCE06E309590884F59382F8F8F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:23:3c:61:f1:42:ed:f4:58:1e:f2:1f:13:
a7:ac:b0:9e:45:ed:15:60:2a:e5:65:a0:3a:a9:ce:
d0:a9:e5:df:d3:24:49:93:98:e4:3c:ac:39:a3:c9:
27:b9:45:03:1a:c5:2b:28:16:e3:42:1b:e8:50:f1:
b2:b4:a2:58:d9:e3:78:11:ab:b6:82:1f:d0:1a:e3:
06:43:d6:76:43:89:43:4d:de:78:d2:4e:dc:ee:7f:
3e:82:74:23:ba:ba:bf:0c:0d:29:89:b8:0e:7d:3d:
6b:98:2d:37:9c:24:75:69:e5:d5:a9:77:b5:29:7f:
a4:fe:b5:f8:6a:4f:77:ca:8b:bc:c7:56:9d:b5:14:
04:60:54:3d:16:d7:f5:b2:b4:16:ba:b9:87:96:ab:
fb:e0:0c:bc:12:b7:ad:02:24:52:3f:b2:d2:ae:bd:
01:38:2f:bb:af:d1:41:f5:47:e4:b3:22:06:ee:78:
2a:9a:6f:07:b4:92:42:13:56:98:f8:dd:07:20:06:
1e:f2:dc:f0:4b:f8:63:9b:8e:50:0e:d5:69:e7:02:
9f:9e:56:96:bf:45:9f:76:6c:ab:20:4c:c1:48:eb:
07:30:6e:f9:c1:3b:7c:5d:30:35:ee:24:6f:b6:dd:
54:73:4b:36:9d:6b:ce:6a:8a:9b:d0:c7:41:71:0e:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:62:53:3E:D3:BC:E0:6E:30:95:90:88:4F:59:38:2F:8F:8F:7F
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a4:8c:94:6a:a6:07:b0:84:a6:80:82:10:37:8b:2c:68:ea:
bc:54:0d:ee:21:15:df:f5:1c:17:10:d8:09:2c:74:73:b2:53:
0e:d5:f2:ea:a3:25:ba:5f:95:c1:e4:89:68:e1:c5:b8:fc:74:
f0:4b:9b:2a:56:f4:51:26:52:2f:e0:bd:93:66:82:e5:28:ba:
d9:61:f5:0e:04:76:c5:7c:86:82:80:88:70:a6:99:fb:6d:01:
ae:eb:18:bf:c3:b9:86:67:10:41:9c:f2:89:47:be:ac:4c:e4:
6a:91:3c:73:e2:3f:59:65:51:36:23:91:91:24:dd:41:4c:90:
bc:d3:45:80:ac:0d:ea:de:81:01:59:9d:99:36:27:b9:be:3c:
85:8e:e8:a1:ef:6f:9a:27:69:57:98:79:0b:cd:65:c0:5e:7b:
94:c2:ea:ac:a0:ae:6a:d1:6f:35:16:d9:e8:04:36:32:e3:5d:
99:27:54:15:39:d8:98:ab:a0:99:4a:c8:08:5d:e0:c2:79:b7:
0d:9a:bd:00:cd:99:ea:de:f2:a5:94:e5:bf:53:7f:c2:f1:c9:
bb:d5:5e:93:86:46:b5:f7:bb:12:8d:90:db:63:b7:a7:4a:aa:
f3:ce:5e:d2:21:89:1c:c3:7c:85:64:77:8f:7f:1b:38:49:a9:
63:44:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:19 2026 by rpki-client