
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
File: 3138392e312e3134342e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier: 0nfm0vkmnn4NmySPHv/VBmxVDHgLCn6UOf1Z78gVin4=
Subject key identifier: C0:FA:4A:42:0F:3E:FF:9C:6B:48:67:97:D5:2D:BE:82:15:FA:E9:99
Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial: 63BFE01D7AFFFA747E40F910675535CBBB38EC51
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
Signing time: Fri 17 Jul 2026 21:01:10 +0000
ROA not before: Fri 17 Jul 2026 20:56:10 +0000
ROA not after: Fri 16 Jul 2027 21:01:10 +0000
asID: 28668
IP address blocks: 189.1.144.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bf:e0:1d:7a:ff:fa:74:7e:40:f9:10:67:55:35:cb:bb:38:ec:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Validity
Not Before: Jul 17 20:56:10 2026 GMT
Not After : Jul 16 21:01:10 2027 GMT
Subject: CN=C0FA4A420F3EFF9C6B486797D52DBE8215FAE999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:60:88:03:5f:72:ea:67:44:af:df:46:e1:
3b:9d:e5:3e:51:2f:f9:e7:68:b3:3a:5e:cf:bb:31:
97:0a:35:ec:ef:27:75:67:a9:be:cb:36:be:ef:73:
5a:e3:af:14:7d:45:51:8a:b5:3e:3f:83:4a:90:fd:
95:9d:d0:fc:2f:18:79:f1:a5:3c:b5:1a:e1:72:d9:
9a:e1:d1:4f:2a:c5:46:32:43:d0:17:9d:47:3f:68:
f3:63:f6:b1:70:e9:17:95:91:b4:1a:47:f3:6f:63:
29:61:e6:70:da:66:33:83:41:eb:56:c2:5a:cf:e3:
c8:7c:8f:ff:d0:aa:67:a5:77:ff:ec:9b:15:19:1a:
94:6d:02:62:30:e7:f7:18:c2:cb:67:ba:d6:00:a2:
6a:9c:4a:a8:13:54:3e:c0:e9:d4:d7:78:a7:67:8e:
85:c9:07:40:69:b5:c6:81:12:86:e0:e9:4d:36:89:
6a:4b:e7:da:f1:e5:86:7f:73:9d:eb:a8:61:28:75:
d7:9d:7e:23:91:a8:95:3e:1a:22:16:de:16:d1:8e:
80:79:45:e6:ee:7d:d0:90:09:66:93:94:de:37:e7:
b9:97:1d:e8:7e:8e:88:9c:02:c7:77:c5:59:01:54:
50:7a:e1:82:26:70:15:9a:4c:bd:8f:d5:2f:6c:62:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:4A:42:0F:3E:FF:9C:6B:48:67:97:D5:2D:BE:82:15:FA:E9:99
X509v3 Authority Key Identifier:
keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:58:2c:b4:46:dd:01:bb:66:6c:75:ca:3e:1f:37:78:04:00:
71:7e:ba:f4:76:24:fa:2e:48:10:2d:b9:7e:eb:05:f7:21:e0:
0a:2d:33:20:0f:34:8d:99:df:b0:78:10:9d:78:d6:73:af:d4:
be:bd:fc:88:15:89:d0:0e:7c:8a:b9:ae:e7:31:af:1a:4e:79:
0a:10:bf:b9:e6:99:1e:f5:5a:8d:fa:7c:50:c5:25:fd:2e:e4:
f9:ec:db:eb:b6:c4:8b:ad:7f:e9:69:73:92:67:b7:7f:0d:3f:
76:e5:01:95:01:76:e0:8a:e0:9a:20:32:9a:9e:ec:e1:5f:ff:
ea:16:c8:c2:5d:d0:66:be:c1:f0:83:b4:2e:17:98:8c:2a:d5:
86:50:e1:0d:e6:4f:1a:70:2b:7c:5a:0c:f1:70:25:a6:23:2d:
be:1a:9e:65:d4:26:e9:29:04:0c:75:48:9b:2d:10:61:73:ee:
24:05:34:7d:b2:c3:e7:bc:7e:18:64:48:51:ea:27:02:dd:81:
c1:1e:4c:67:65:00:e0:51:d1:aa:ed:e2:2e:79:c8:15:79:da:
7e:79:a9:e8:2f:eb:9c:b1:39:4f:3e:66:f4:18:1e:0f:6b:88:
0c:f2:5e:08:4c:b7:b0:e5:ba:66:85:36:bf:7b:58:f2:50:2e:
60:8c:d2:12
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUY7/gHXr/+nR+QPkQZ1U1y7s47FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTBaFw0yNzA3MTYyMTAxMTBaMDMxMTAvBgNV
BAMTKEMwRkE0QTQyMEYzRUZGOUM2QjQ4Njc5N0Q1MkRCRTgyMTVGQUU5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3WCIA19y6mdEr99G4Tud5T5R
L/nnaLM6Xs+7MZcKNezvJ3Vnqb7LNr7vc1rjrxR9RVGKtT4/g0qQ/ZWd0PwvGHnx
pTy1GuFy2Zrh0U8qxUYyQ9AXnUc/aPNj9rFw6ReVkbQaR/NvYylh5nDaZjODQetW
wlrP48h8j//Qqmeld//smxUZGpRtAmIw5/cYwstnutYAomqcSqgTVD7A6dTXeKdn
joXJB0BptcaBEobg6U02iWpL59rx5YZ/c53rqGEoddedfiORqJU+GiIW3hbRjoB5
RebufdCQCWaTlN4357mXHeh+joicAsd3xVkBVFB64YImcBWaTL2P1S9sYja3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwPpKQg8+/5xrSGeX1S2+ghX66ZkwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzODM5MmUzMTJlMzEzNDM0MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODM2
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0BkDANBgkqhkiG9w0BAQsFAAOCAQEAPFgstEbdAbtm
bHXKPh83eAQAcX669HYk+i5IEC25fusF9yHgCi0zIA80jZnfsHgQnXjWc6/Uvr38
iBWJ0A58irmu5zGvGk55ChC/ueaZHvVajfp8UMUl/S7k+ezb67bEi61/6Wlzkme3
fw0/duUBlQF24IrgmiAymp7s4V//6hbIwl3QZr7B8IO0LheYjCrVhlDhDeZPGnAr
fFoM8XAlpiMtvhqeZdQm6SkEDHVImy0QYXPuJAU0fbLD57x+GGRIUeonAt2BwR5M
Z2UA4FHRqu3iLnnIFXnafnmp6C/rnLE5Tz5m9BgeD2uIDPJeCEy3sOW6ZoU2v3tY
8lAuYIzSEg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:14:08 2026 by rpki-client