
$ rpki-client -vvvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35342e302f32342d3234203d3e20323633393234.roa
File: 3133382e3231392e35342e302f32342d3234203d3e20323633393234.roa (raw, json)
Hash identifier: LFLahqT+3u+kPYCVxGNv8x92XCKeB+8pRZlDSErVcAQ=
Subject key identifier: 36:DB:0B:DA:12:87:10:6E:4D:EE:2B:21:38:3E:E5:08:2A:3A:CF:58
Certificate issuer: /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial: 17078A2F70421D2C9C966D3F2D610643738C1A05
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35342e302f32342d3234203d3e20323633393234.roa
Signing time: Fri 25 Sep 2026 18:46:12 +0000
ROA not before: Fri 25 Sep 2026 18:41:12 +0000
ROA not after: Fri 24 Sep 2027 18:46:12 +0000
asID: 263924
IP address blocks: 138.219.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 21:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:07:8a:2f:70:42:1d:2c:9c:96:6d:3f:2d:61:06:43:73:8c:1a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Validity
Not Before: Sep 25 18:41:12 2026 GMT
Not After : Sep 24 18:46:12 2027 GMT
Subject: CN=36DB0BDA1287106E4DEE2B21383EE5082A3ACF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:d4:4e:69:33:a9:75:65:69:62:2a:b7:dd:
a3:95:25:a4:ac:c2:11:61:c1:75:4a:8f:71:a1:76:
e7:be:06:bc:c0:fd:21:28:86:0e:09:ec:84:2a:38:
24:5c:d0:35:62:7b:d6:71:00:96:d8:dc:7a:19:3a:
13:e6:4a:a1:27:85:53:9f:f2:e6:f9:b7:2b:6e:14:
9a:a9:16:48:a8:94:e4:b2:02:29:ea:22:8b:b9:b8:
80:37:c0:5d:65:44:88:ff:12:2f:94:79:d1:c4:9c:
89:7e:a6:6b:5c:54:dd:0d:6c:e0:bd:df:1c:c7:4d:
88:36:99:72:13:40:bf:9c:59:90:de:28:c0:c6:45:
e0:62:64:7c:c5:df:11:b7:df:09:39:16:c6:32:56:
57:a4:18:52:c4:f5:e7:3b:be:34:ef:d9:ed:ea:5a:
5d:6e:c6:be:23:a6:24:b5:be:35:b2:c3:72:0b:b1:
7c:a6:2c:64:d1:be:ff:17:ce:e5:7f:03:91:fb:aa:
30:cf:fc:8a:df:65:14:67:54:28:61:f8:10:6b:09:
ac:49:dd:8b:be:4c:70:e6:d0:7e:92:94:fb:45:2d:
5c:2d:24:25:3a:27:f5:f4:f7:fe:e7:fa:d4:27:4e:
2a:68:ea:d9:04:e4:a0:55:db:0d:38:2b:57:65:2b:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:0B:DA:12:87:10:6E:4D:EE:2B:21:38:3E:E5:08:2A:3A:CF:58
X509v3 Authority Key Identifier:
keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35342e302f32342d3234203d3e20323633393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b8:5b:91:91:7f:1a:c2:16:15:a6:36:a9:b6:dc:23:2f:16:
92:fc:49:4c:9f:72:e8:f2:49:c2:9b:3b:33:2d:25:4b:d0:df:
0f:46:1d:0c:85:01:6d:34:46:1d:8b:b8:7c:64:4d:5e:82:6c:
6e:19:5d:e1:d9:ef:33:15:77:cb:fa:2d:ac:06:5b:f0:ca:0e:
c4:83:73:34:a2:ec:9c:9b:2c:6a:63:e5:31:63:83:32:bf:a6:
72:93:0e:e4:b5:6b:15:fa:3c:e3:06:fe:c9:d3:c4:7a:0c:ba:
c5:49:f7:33:85:0a:84:c0:c7:a2:12:29:9c:02:73:5e:c7:3d:
be:37:53:93:dc:d0:6f:71:40:33:29:7a:85:33:b5:1a:45:c1:
98:f3:aa:63:8f:b9:3b:21:55:dc:0c:5f:12:7d:43:2f:7f:4f:
52:3e:54:ca:48:10:6a:ed:cf:5a:b1:c5:09:ca:45:ba:96:37:
4b:8c:e9:90:0c:d7:3d:66:b9:eb:ec:eb:6d:ab:02:dc:66:d8:
b2:ed:40:c1:91:b6:68:24:12:8d:91:85:2d:00:04:d3:f6:a8:
5a:3c:33:ad:b2:12:53:2a:6f:13:9f:ac:82:fb:b4:97:9b:ab:
48:59:32:38:7f:c9:06:cc:81:9e:76:0b:d3:23:0c:f9:0f:5a:
56:2c:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:21:10 2026 by rpki-client