
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137302e37382e3134302e302f32322d3234203d3e203532383932.roa
File: 3137302e37382e3134302e302f32322d3234203d3e203532383932.roa (raw, json)
Hash identifier: 0/Zh/f3Jas9d3qy9xsqLMeo0xRdJYHuGF8d9q3Y9gSI=
Subject key identifier: 1E:32:BB:21:D1:F2:D1:CA:8D:7B:82:64:69:79:2E:0C:1D:31:BE:A9
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 19E03D1ACCDB8AB48FF1E833B0EEBE05F5D79F8E
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137302e37382e3134302e302f32322d3234203d3e203532383932.roa
Signing time: Tue 21 Apr 2026 04:38:04 +0000
ROA not before: Tue 21 Apr 2026 04:33:04 +0000
ROA not after: Tue 20 Apr 2027 04:38:04 +0000
asID: 52892
IP address blocks: 170.78.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 18:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e0:3d:1a:cc:db:8a:b4:8f:f1:e8:33:b0:ee:be:05:f5:d7:9f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Apr 21 04:33:04 2026 GMT
Not After : Apr 20 04:38:04 2027 GMT
Subject: CN=1E32BB21D1F2D1CA8D7B826469792E0C1D31BEA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:62:1d:63:cb:42:a5:3f:05:11:1c:a5:68:
f3:2d:43:c1:08:f0:58:a1:b6:4b:9e:ea:6e:e0:12:
53:af:2e:14:61:bf:91:4a:cc:67:4a:40:bf:e5:aa:
7f:a6:bf:ec:ce:e7:4c:65:e1:88:8b:84:79:1c:70:
3c:ae:ff:73:49:19:da:8e:a2:2f:71:dc:3a:3c:84:
60:ec:70:d0:7b:26:8d:f7:8a:98:da:2e:87:81:82:
89:3f:b4:8b:41:ba:1c:82:8e:e8:2f:41:4f:9b:31:
01:97:21:28:c1:52:05:68:40:89:24:08:0b:db:cb:
50:d2:86:04:35:d3:f5:c5:5a:d7:44:61:b0:be:d4:
7b:04:9d:3d:98:8c:1c:e1:0d:17:52:c4:a0:79:a2:
21:e1:26:18:dc:a9:96:c3:b4:21:80:a2:61:10:34:
f3:85:15:6c:14:53:94:1a:b9:b7:91:23:ec:05:5e:
58:7d:df:98:9d:a2:6f:59:c0:c7:c3:4b:cc:eb:3b:
3b:f2:2e:60:d6:a7:ae:a9:97:7a:e8:50:d0:f7:61:
8b:84:0b:53:13:e8:b6:86:38:cc:06:c0:be:74:78:
b9:ce:54:1d:69:cf:e7:f1:eb:25:b2:f1:5e:ce:07:
6c:69:a7:89:b5:57:74:ea:4c:c7:1e:9c:03:c3:ba:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:BB:21:D1:F2:D1:CA:8D:7B:82:64:69:79:2E:0C:1D:31:BE:A9
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137302e37382e3134302e302f32322d3234203d3e203532383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:fb:f2:c1:cc:a9:71:ee:7a:6f:fc:99:25:48:9f:29:c1:28:
af:db:98:b4:05:20:70:f7:a7:e6:90:d2:78:a4:c4:b5:db:be:
1b:e6:b0:e2:c6:93:29:96:ad:b1:11:f9:88:82:c0:f5:09:6e:
0b:84:93:80:85:53:33:cf:58:ee:13:70:5f:1f:ea:05:5c:65:
41:8d:42:a2:5d:e4:31:85:74:6b:2c:b5:bb:f1:6a:0d:5f:e5:
b7:25:ca:3d:68:6d:fa:3b:d2:1a:e1:2e:c8:67:e8:1e:c2:a4:
19:8e:3a:53:41:71:dc:ca:5a:c2:d6:25:e2:9a:f2:b8:80:7e:
46:43:a8:70:29:16:dc:08:d3:35:94:5b:e2:22:af:10:0d:b9:
a1:1f:5b:5e:6c:c9:e8:73:68:75:24:bd:51:95:e8:97:b6:35:
6d:61:13:7f:2e:dd:04:53:78:1b:11:50:4d:e7:29:f8:74:47:
9d:e1:4f:6a:9d:eb:b4:c6:bf:2e:aa:56:df:fa:9c:d0:fa:50:
fb:39:46:6f:da:0e:74:83:bd:3e:fe:13:47:79:2d:08:77:93:
01:37:38:09:4c:4c:2b:5b:42:ea:86:f6:60:9b:24:c1:d5:4f:
2b:87:9b:3e:d1:ae:6c:4a:d1:e0:da:ec:74:3c:49:4f:0c:00:
d6:28:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:55:55 2026 by rpki-client