
$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138392e302f32342d3234203d3e20323633393332.roa
File: 3133382e3231392e3138392e302f32342d3234203d3e20323633393332.roa (raw, json)
Hash identifier: XHSG0GaEp+Ms0peyn6Fadx5RQFTECgAdtN8C/HH+9HA=
Subject key identifier: B5:75:C9:36:99:F0:3D:F5:88:FC:03:15:CD:F4:EB:3A:00:D4:29:68
Certificate issuer: /CN=32C3A39C604E0A859847813700F0E5113757B6FC
Certificate serial: 437E1B0191089298BC7516C9C285521D1D1885E5
Authority key identifier: 32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138392e302f32342d3234203d3e20323633393332.roa
Signing time: Wed 15 Jul 2026 17:45:39 +0000
ROA not before: Wed 15 Jul 2026 17:40:39 +0000
ROA not after: Wed 14 Jul 2027 17:45:39 +0000
asID: 263932
IP address blocks: 138.219.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl
rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 04:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7e:1b:01:91:08:92:98:bc:75:16:c9:c2:85:52:1d:1d:18:85:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C3A39C604E0A859847813700F0E5113757B6FC
Validity
Not Before: Jul 15 17:40:39 2026 GMT
Not After : Jul 14 17:45:39 2027 GMT
Subject: CN=B575C93699F03DF588FC0315CDF4EB3A00D42968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:b1:3a:8b:f9:d4:d6:4f:a2:d0:d9:fe:c6:
21:d2:7d:d1:66:d8:5c:97:38:08:3d:06:be:17:43:
ba:ea:38:fa:52:ab:5f:ff:b2:07:b8:b2:bb:5d:f6:
f1:6a:5d:aa:c7:85:01:aa:05:e7:2f:bf:08:c1:c6:
5b:66:ae:d8:95:4c:10:32:57:ea:f3:25:49:be:0d:
47:dd:91:d4:b3:54:0f:53:a6:78:a9:21:6b:2e:b1:
04:73:05:99:43:ef:ee:39:1d:96:2a:fe:24:2b:f6:
75:af:78:ce:5f:70:48:de:db:bc:72:0a:4b:0a:07:
b6:06:15:1c:aa:e2:e6:37:b2:05:4d:37:36:e7:6c:
42:79:87:5e:38:80:9b:37:db:3c:6b:10:29:2d:57:
52:fd:30:cc:46:aa:21:d1:13:1e:b3:ba:7f:76:e1:
74:8b:fa:4e:e9:a6:61:3d:55:1c:63:7d:e8:95:42:
45:ba:bc:00:6b:f3:89:5a:64:1e:44:8f:37:f0:6f:
0d:9a:24:c6:00:27:fa:db:da:f1:ed:22:fe:81:06:
5c:c9:4a:a1:3c:ae:78:66:27:96:cc:df:69:04:02:
a3:3b:94:11:76:c6:0d:3e:e5:f7:58:85:a4:6f:2a:
7c:d8:31:64:0e:bc:60:f8:fd:7f:0c:e1:c9:e6:80:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:75:C9:36:99:F0:3D:F5:88:FC:03:15:CD:F4:EB:3A:00:D4:29:68
X509v3 Authority Key Identifier:
keyid:32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138392e302f32342d3234203d3e20323633393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.189.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ab:4d:c5:c6:56:eb:54:23:17:bd:db:9f:f4:65:f8:f2:15:
71:b4:b2:02:af:ec:58:70:20:f4:89:e7:b9:d3:f8:9f:22:a2:
f0:16:e3:bd:2d:10:96:ac:31:3a:f8:90:39:02:8c:f3:7a:f3:
18:3f:6e:ba:18:0b:fa:a0:c2:32:a0:6b:d7:e5:38:5a:af:0e:
2f:78:05:e3:1c:a1:a8:44:01:4f:b3:5a:fa:61:ed:a2:17:4a:
4a:93:68:b7:89:10:0f:2a:5b:38:26:9d:f9:ec:b7:47:80:1a:
5c:9e:f2:86:c0:6a:72:2a:bd:3b:90:c8:f8:d4:c5:71:dd:17:
a8:14:f9:f1:4d:7d:af:bf:af:74:73:a6:ff:a3:57:d0:c9:80:
43:0b:30:18:2b:d6:51:54:59:28:b5:ab:85:50:e7:7c:41:97:
54:eb:85:66:60:01:a0:15:b4:58:fc:55:69:db:8e:be:7e:79:
4c:eb:12:cc:4a:3a:1f:52:51:bc:24:e4:61:fb:98:0f:c6:64:
de:11:b2:5d:d6:a2:4c:6a:22:db:0c:6d:6c:7d:fe:f7:33:15:
7c:01:ad:82:d2:72:20:dc:a5:c9:d8:77:51:9f:e5:63:22:4b:
57:b3:ba:24:d2:ab:04:5d:e2:3e:bf:34:99:c3:10:c5:a0:81:
d6:da:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:38 2026 by rpki-client