
$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
File: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier: e1ofZhEjwwLqmwacLrvxcVJI9+LRP99uzz0yMnTvfTE=
Subject key identifier: B5:33:91:75:11:72:CF:E8:43:2B:F9:D4:8D:93:C7:21:6C:43:E8:7C
Certificate issuer: /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial: 27CB8AD4E636B0956A0BDFE6923674C9DF2F3558
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
Signing time: Thu 26 Mar 2026 19:33:12 +0000
ROA not before: Thu 26 Mar 2026 19:28:12 +0000
ROA not after: Thu 25 Mar 2027 19:33:12 +0000
asID: 267373
IP address blocks: 45.234.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 21:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cb:8a:d4:e6:36:b0:95:6a:0b:df:e6:92:36:74:c9:df:2f:35:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Validity
Not Before: Mar 26 19:28:12 2026 GMT
Not After : Mar 25 19:33:12 2027 GMT
Subject: CN=B53391751172CFE8432BF9D48D93C7216C43E87C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:65:8a:28:88:14:ed:49:c6:1c:46:1a:ea:
42:a6:d1:63:20:de:a8:8c:60:af:e3:69:20:c9:e2:
a8:41:24:03:ac:2b:d7:d2:9a:29:ee:b3:c6:ac:a5:
26:2d:0d:42:68:b5:7f:3c:16:5c:a8:8b:4e:d7:1c:
65:ef:94:30:9e:a1:5b:ec:f0:9f:69:3a:c0:2e:01:
c7:52:a9:e2:50:69:64:bc:72:dd:a1:0a:7f:d4:5b:
3d:dd:d9:a9:fa:dd:67:ad:86:95:12:cb:55:6c:11:
9a:14:96:84:12:57:05:a4:4b:04:d5:13:d9:40:0f:
7f:17:49:15:42:04:68:32:73:88:da:7b:55:a9:23:
c6:3e:88:21:0b:9d:fb:c3:c0:3b:62:86:f2:2c:a4:
26:21:fd:0f:e2:99:3f:64:15:e1:5e:4a:90:a6:f3:
74:f8:82:ec:28:fc:a1:4d:6b:52:55:4e:b4:55:7f:
66:1b:c7:85:41:41:6e:44:f6:23:f2:82:3a:70:11:
03:23:84:7c:cc:94:10:93:64:2f:ae:a1:6d:2f:c9:
a0:8a:89:66:8f:df:79:1d:da:75:67:f8:38:b7:a0:
1a:1f:40:b3:5e:3b:41:ea:b1:60:4f:ff:18:6e:ec:
61:61:e6:e7:bf:59:fe:f6:7a:a4:a1:4a:6f:4e:c6:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:91:75:11:72:CF:E8:43:2B:F9:D4:8D:93:C7:21:6C:43:E8:7C
X509v3 Authority Key Identifier:
keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:03:bf:a2:29:ce:73:30:b8:17:5f:12:30:6d:ae:b4:da:09:
43:72:ad:af:7b:a7:eb:c8:0d:76:e8:7a:d8:8a:d3:51:c7:e1:
79:a4:29:2f:10:a4:24:39:5c:b8:30:b0:90:1d:bb:77:f8:27:
e1:ae:5f:44:0e:29:4d:57:e0:05:b9:d1:22:8a:5e:24:67:33:
a7:09:39:49:af:43:ed:72:2d:b8:2e:b4:10:86:7f:12:e1:20:
d5:c2:90:ee:a0:bf:61:75:a5:53:5c:38:5f:15:d4:6a:3b:11:
74:d1:da:28:d9:5c:14:4a:f9:b2:e8:7b:2c:e7:3c:5c:92:96:
a7:00:af:cf:c1:ee:45:d4:16:98:81:b9:70:78:35:7a:88:aa:
bd:e7:04:92:db:45:c4:fb:ca:29:e4:34:13:21:fd:ff:ce:8d:
c3:aa:ba:27:b0:bc:84:37:8f:c8:67:a3:f8:b4:95:86:ed:37:
51:df:f8:1f:d2:0d:12:fb:1e:af:39:f4:86:49:e2:21:d3:84:
4d:f3:9d:a3:2f:a9:21:a9:d8:d4:44:70:95:80:c0:f2:7a:a5:
ee:66:9a:c5:9a:14:96:5a:4b:8f:bc:11:31:a1:1c:b8:d2:c1:
5c:24:c8:95:f5:34:53:de:45:a3:02:e5:8e:cb:f0:1a:7a:5c:
18:3f:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:13 2026 by rpki-client