
$ rpki-client -vvvf rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32322d3234203d3e2030.roa
File: 34352e3233372e3230342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: pRarhGOK1gV8jQ+BWeRIt2ZZw7EV4XpK+r0U7M6Jxw4=
Subject key identifier: 56:59:3D:17:39:A3:47:B7:2E:E9:E3:56:4E:80:9F:19:B9:50:F6:D4
Certificate issuer: /CN=D01D2EC076BDA62D438B972886851503EED04B2F
Certificate serial: 4FE32C4225E2168F0660A29B9132A9CAB76F26F7
Authority key identifier: D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32322d3234203d3e2030.roa
Signing time: Tue 25 Aug 2026 15:16:02 +0000
ROA not before: Tue 25 Aug 2026 15:11:02 +0000
ROA not after: Tue 24 Aug 2027 15:16:02 +0000
asID: 0
IP address blocks: 45.237.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl
rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 07 Oct 2026 14:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e3:2c:42:25:e2:16:8f:06:60:a2:9b:91:32:a9:ca:b7:6f:26:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D01D2EC076BDA62D438B972886851503EED04B2F
Validity
Not Before: Aug 25 15:11:02 2026 GMT
Not After : Aug 24 15:16:02 2027 GMT
Subject: CN=56593D1739A347B72EE9E3564E809F19B950F6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:2a:7f:c3:a1:12:6c:69:3d:be:27:cc:54:
37:54:c9:f0:49:b8:cd:a6:10:59:3d:9b:00:6b:78:
13:da:29:3d:e4:be:7b:b4:38:21:c9:62:c8:45:7a:
fd:18:a7:9a:b3:a5:05:0b:1f:b6:ea:e4:10:f0:6d:
a8:83:b1:c0:f5:82:0f:bc:fb:2c:33:ee:ce:13:84:
59:48:3f:58:b5:9d:9c:84:be:9a:67:c1:9d:c3:e9:
82:aa:4f:5e:09:f1:64:50:7d:73:25:35:1f:38:c2:
21:0c:ea:8f:6d:5c:79:55:cf:2e:8f:ec:45:30:db:
aa:33:7a:49:22:8d:cd:8f:ba:ed:df:97:d5:28:ec:
d5:24:b0:2f:22:d8:f4:65:5a:2d:eb:8e:40:bd:76:
64:93:5a:95:c8:8b:81:c3:8f:ab:e0:b1:70:6b:0b:
9c:63:56:b8:a0:91:89:cf:b4:18:b1:33:36:95:9b:
1d:cf:51:6e:09:b6:bf:26:dd:f0:c5:f6:6b:70:70:
64:79:04:63:81:66:db:ef:86:9a:33:a2:f4:92:3c:
94:1b:3a:9d:21:66:ce:bb:c2:8a:6b:fe:07:10:b1:
a8:46:7c:66:78:78:c9:bb:aa:63:ae:c1:62:e0:d9:
d1:50:ee:ab:10:3d:3f:a7:3a:79:66:60:3e:c0:87:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:3D:17:39:A3:47:B7:2E:E9:E3:56:4E:80:9F:19:B9:50:F6:D4
X509v3 Authority Key Identifier:
keyid:D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.204.0/22
Signature Algorithm: sha256WithRSAEncryption
08:da:42:a2:66:b4:b0:1a:d3:5d:5d:c7:d7:28:dd:41:0e:c8:
cf:a4:bb:3a:3e:98:32:f9:63:f5:4d:5a:b7:db:28:f6:32:e3:
6f:e9:54:9b:a1:cb:a9:65:84:a9:fe:a1:5e:fd:93:69:86:c2:
43:eb:95:45:bb:e9:23:f2:a7:6a:37:2c:e9:94:bd:1a:0d:53:
ff:bc:da:4a:e3:65:2a:80:bf:bc:2c:a5:fc:ac:91:fe:a0:a4:
ad:55:fc:6b:b6:f8:f6:50:d8:55:81:ca:fb:7e:56:7e:b0:e9:
95:22:14:e0:48:5d:a1:d6:dd:7f:d7:27:88:ec:2b:ca:40:6d:
4c:d0:1b:23:fe:17:93:67:54:c3:b9:a1:73:1c:aa:43:2c:55:
85:46:b6:a7:10:78:44:9d:bd:5e:0d:a8:9f:0f:61:d3:7d:66:
08:2b:a0:d3:4c:83:48:c9:22:1b:05:3f:61:f8:73:7c:d3:9d:
d5:e2:42:32:53:61:18:c8:f9:13:62:27:5d:e1:4f:78:ef:86:
74:72:03:ab:30:a6:63:bf:e7:93:78:19:f7:b0:ff:f6:12:43:
ea:ba:32:19:51:c7:71:48:00:41:d4:40:1d:6f:69:55:a3:85:
d3:10:b2:69:bd:bc:90:24:4e:9d:d5:7f:54:37:3f:af:8c:af:
10:33:b2:01
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUT+MsQiXiFo8GYKKbkTKpyrdvJvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAxRDJFQzA3NkJEQTYyRDQzOEI5NzI4ODY4NTE1MDNF
RUQwNEIyRjAeFw0yNjA4MjUxNTExMDJaFw0yNzA4MjQxNTE2MDJaMDMxMTAvBgNV
BAMTKDU2NTkzRDE3MzlBMzQ3QjcyRUU5RTM1NjRFODA5RjE5Qjk1MEY2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2ip/w6ESbGk9vifMVDdUyfBJ
uM2mEFk9mwBreBPaKT3kvnu0OCHJYshFev0Yp5qzpQULH7bq5BDwbaiDscD1gg+8
+ywz7s4ThFlIP1i1nZyEvppnwZ3D6YKqT14J8WRQfXMlNR84wiEM6o9tXHlVzy6P
7EUw26ozekkijc2Puu3fl9Uo7NUksC8i2PRlWi3rjkC9dmSTWpXIi4HDj6vgsXBr
C5xjVrigkYnPtBixMzaVmx3PUW4Jtr8m3fDF9mtwcGR5BGOBZtvvhpozovSSPJQb
Op0hZs67wopr/gcQsahGfGZ4eMm7qmOuwWLg2dFQ7qsQPT+nOnlmYD7Ahy6DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUVlk9FzmjR7cu6eNWToCfGblQ9tQwHwYDVR0j
BBgwFoAU0B0uwHa9pi1Di5cohoUVA+7QSy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFQTFdoaWhrblBVdktpY3JGbzJ5UUxiZ1o0Y3hMSFhZd2tQVUI2ZW5i
M2IvMC9EMDFEMkVDMDc2QkRBNjJENDM4Qjk3Mjg4Njg1MTUwM0VFRDA0QjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMUQyRUMwNzZCREE2MkQ0
MzhCOTcyODg2ODUxNTAzRUVEMDRCMkYuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB
kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBUExXaGloa25QVXZLaWNyRm8yeVFMYmdaNGN4TEhYWXdrUFVCNmVuYjNiLzAv
MzQzNTJlMzIzMzM3MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAi3tzDANBgkqhkiG9w0BAQsFAAOCAQEACNpComa0sBrTXV3H1yjd
QQ7Iz6S7Oj6YMvlj9U1at9so9jLjb+lUm6HLqWWEqf6hXv2TaYbCQ+uVRbvpI/Kn
ajcs6ZS9Gg1T/7zaSuNlKoC/vCyl/KyR/qCkrVX8a7b49lDYVYHK+35WfrDplSIU
4Ehdodbdf9cniOwrykBtTNAbI/4Xk2dUw7mhcxyqQyxVhUa2pxB4RJ29Xg2onw9h
031mCCug00yDSMkiGwU/YfhzfNOd1eJCMlNhGMj5E2InXeFPeO+GdHIDqzCmY7/n
k3gZ97D/9hJD6royGVHHcUgAQdRAHW9pVaOF0xCyab28kCROndV/VDc/r4yvEDOy
AQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:24:03 2026 by rpki-client