
$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
File: 3138392e31342e36342e302f32302d3332203d3e203238323736.roa (raw, json)
Hash identifier: +kGE/xcLf25u09ygj8IODGpMkIuXfxTp7W64sj7a1+Y=
Subject key identifier: 1E:B1:F9:D5:F7:2C:4A:DF:F9:53:4A:EB:5B:1D:2B:05:E9:86:2A:9D
Certificate issuer: /CN=A4EE038911DF33B6C5078A0D31896E9E63D13909
Certificate serial: 5A2445C694DAD59113A9DEC857967D02CD84C4CF
Authority key identifier: A4:EE:03:89:11:DF:33:B6:C5:07:8A:0D:31:89:6E:9E:63:D1:39:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
Signing time: Mon 23 Mar 2026 11:43:19 +0000
ROA not before: Mon 23 Mar 2026 11:38:19 +0000
ROA not after: Mon 22 Mar 2027 11:43:19 +0000
asID: 28276
IP address blocks: 189.14.64.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.crl
rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 20:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:24:45:c6:94:da:d5:91:13:a9:de:c8:57:96:7d:02:cd:84:c4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4EE038911DF33B6C5078A0D31896E9E63D13909
Validity
Not Before: Mar 23 11:38:19 2026 GMT
Not After : Mar 22 11:43:19 2027 GMT
Subject: CN=1EB1F9D5F72C4ADFF9534AEB5B1D2B05E9862A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:62:99:d7:49:8a:53:3e:06:2e:64:84:09:
a0:90:7d:69:d1:61:f7:3c:ff:bb:e2:d9:67:ad:93:
8a:d5:20:1e:40:aa:7a:03:0d:04:89:0d:c9:d8:d4:
2b:8b:a4:e9:a2:b0:e1:13:df:5e:93:16:67:69:8e:
c7:93:c7:96:94:01:fb:f8:88:bc:4c:2e:b7:30:b6:
1e:79:06:67:d2:0e:84:06:72:85:8d:88:38:61:28:
57:3a:31:54:14:31:c3:20:aa:92:eb:2a:20:55:89:
f8:b2:39:66:3c:8f:98:e5:0b:0e:61:b3:8e:f9:6f:
2b:ba:5b:a4:4a:e5:b0:0a:00:9f:69:37:38:7b:87:
a7:96:a5:14:ce:e0:20:06:f7:ba:3b:43:8e:56:9b:
75:41:ef:d3:ef:8e:d2:e1:2f:2c:32:77:77:ad:25:
a3:71:36:3c:b9:16:ec:84:45:78:e9:59:09:07:cd:
71:65:f8:92:46:ec:5a:0e:71:18:4a:56:b4:1f:9f:
85:a4:20:b7:b2:97:f6:25:bb:01:51:0b:2e:84:e1:
58:82:f8:d4:d6:55:ce:63:cf:11:15:59:57:b3:6f:
58:c6:b2:e1:c7:50:4f:a6:6c:08:67:07:3c:66:78:
4f:7f:99:30:e2:c5:96:57:80:62:f0:42:5b:a9:a8:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:F9:D5:F7:2C:4A:DF:F9:53:4A:EB:5B:1D:2B:05:E9:86:2A:9D
X509v3 Authority Key Identifier:
keyid:A4:EE:03:89:11:DF:33:B6:C5:07:8A:0D:31:89:6E:9E:63:D1:39:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3332203d3e203238323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:08:4f:cd:f1:b5:dd:90:d4:7f:b7:3d:fa:35:77:56:5d:c6:
7f:94:e2:44:86:75:10:5b:92:3c:76:09:04:5c:db:38:88:06:
99:1e:e4:65:f5:97:5a:73:52:95:f2:93:c4:e7:c7:8e:40:7e:
79:9c:5e:78:57:8b:6f:b1:80:39:c7:0d:61:58:44:bb:2a:a8:
ef:e3:0d:8d:f5:28:ce:e9:c4:29:c2:a1:11:67:1a:f9:af:b3:
10:05:17:d3:dd:08:42:1e:b9:ae:3b:67:b9:51:1b:a3:96:d8:
52:1f:de:f1:bb:c1:53:0e:1d:dd:23:eb:d0:a5:7a:03:22:26:
5a:34:cb:b8:e8:79:ca:43:9b:5b:41:d9:d0:3e:a1:dc:1b:68:
1d:67:8f:fe:58:bd:d9:05:ac:f9:dd:f5:71:9e:df:95:8b:23:
27:c4:9e:b1:e3:eb:5e:53:c7:dc:78:9f:c5:01:9a:c5:56:fc:
6e:c6:de:77:50:31:a5:a6:ea:51:70:e4:fa:29:ac:40:f0:17:
f7:a0:91:cc:e4:bd:94:32:41:c1:1d:b4:4b:2d:9f:93:c2:7a:
82:0d:ea:44:c1:8c:e2:94:a8:39:4a:63:1e:50:5a:94:60:e7:
94:0e:ac:73:f0:d7:e6:36:4b:28:cf:6c:91:a9:b8:22:f6:86:
b0:13:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:57 2026 by rpki-client