
$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa
File: 34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa (raw, json)
Hash identifier: DkLuh3tcxCmgKjOsF8Dh3tQBldpIX4JE4i3qL8lOCuI=
Subject key identifier: A1:4D:6F:2A:52:C5:8F:48:9E:A5:FA:99:E0:D8:CF:30:10:80:11:03
Certificate issuer: /CN=974B1286BDF6AAAF8648D23141EAB781B973C049
Certificate serial: 4066547C68EF3E177003C8EEFDDE365776614F8F
Authority key identifier: 97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa
Signing time: Wed 15 Jul 2026 16:38:43 +0000
ROA not before: Wed 15 Jul 2026 16:33:43 +0000
ROA not after: Wed 14 Jul 2027 16:38:43 +0000
asID: 268077
IP address blocks: 45.168.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl
rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 04:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:66:54:7c:68:ef:3e:17:70:03:c8:ee:fd:de:36:57:76:61:4f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974B1286BDF6AAAF8648D23141EAB781B973C049
Validity
Not Before: Jul 15 16:33:43 2026 GMT
Not After : Jul 14 16:38:43 2027 GMT
Subject: CN=A14D6F2A52C58F489EA5FA99E0D8CF3010801103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:fb:9b:f0:ac:6d:2f:8b:48:32:d3:65:c3:
57:28:a7:7b:af:ba:48:bd:c2:f0:11:e8:c7:b1:bd:
5b:14:7b:a8:74:72:9d:10:e4:fc:f4:01:c5:11:14:
50:e5:fe:c2:55:82:04:5b:c9:0c:ef:53:32:48:f6:
a1:d1:81:79:57:fd:28:1f:51:95:b9:05:a8:72:59:
e9:0c:d5:91:54:5b:cd:39:18:4d:41:7b:5f:e3:ac:
c5:ca:b9:ee:dd:ee:31:ad:7d:71:79:a8:31:64:af:
92:cb:d1:8c:1b:35:8d:32:06:63:af:ae:0e:f0:d7:
52:ff:c5:51:42:f6:64:c2:22:ba:96:8e:a0:d1:a6:
d2:f8:80:a3:7c:d5:30:a1:28:d5:94:29:53:5b:0f:
a4:5d:c1:72:1c:c1:5d:23:ad:08:cd:c5:ea:d2:90:
c3:f7:b8:cf:26:c3:41:42:12:9b:22:f4:8c:69:89:
9f:cf:2c:0c:f0:a9:fb:11:87:88:ee:99:77:59:1c:
35:88:a3:e1:96:69:8d:f1:99:75:05:c7:05:93:07:
fd:2e:f0:71:8b:09:7a:5f:29:92:61:46:ba:9e:78:
7e:b5:19:44:53:55:ab:8c:12:a3:51:68:fa:c5:29:
1c:73:cf:bd:36:a1:f3:d1:f8:24:0a:64:ca:2c:aa:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:6F:2A:52:C5:8F:48:9E:A5:FA:99:E0:D8:CF:30:10:80:11:03
X509v3 Authority Key Identifier:
keyid:97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:2b:26:b0:4c:33:4f:a5:d3:b2:7b:aa:09:e5:a6:ea:0a:3f:
a7:0c:2d:bf:7f:35:fc:5c:a6:21:2f:c5:18:10:ed:3b:50:cc:
73:0b:41:14:f7:0d:74:fe:ce:50:a0:d1:0f:ba:07:06:1c:2d:
f2:6f:6a:a8:92:dc:b7:8e:26:cd:1d:a6:63:3f:09:6c:74:83:
18:58:b6:90:27:e2:7c:fa:9f:e0:48:27:43:f4:16:90:f6:d1:
94:78:ba:bf:19:8a:3d:ef:51:25:57:da:19:3c:f3:5f:c5:74:
76:28:01:29:5e:d5:45:c9:c0:00:a8:15:71:30:48:71:89:3e:
22:1c:2a:95:18:7d:68:2d:64:46:a8:cc:f2:bc:bd:e4:89:7a:
64:12:50:88:2f:9e:44:99:45:d3:b5:30:a6:26:da:3d:79:c2:
c0:d6:11:e7:1c:87:0a:58:f7:0b:66:6e:69:5e:eb:bb:5f:58:
60:bf:6e:ed:6c:ed:ec:fd:6c:99:bf:2e:91:89:b6:b5:26:0c:
01:0b:d4:f1:f8:e1:57:45:6f:3c:e0:52:7f:d2:85:f5:fd:e5:
f7:fc:ed:98:75:48:bf:eb:4b:82:da:39:5b:28:dd:d3:a6:58:
f3:ac:b5:2a:48:40:98:e7:a3:45:92:77:91:83:e6:a1:66:c1:
59:53:3c:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQGZUfGjvPhdwA8ju/d42V3ZhT48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0QjEyODZCREY2QUFBRjg2NDhEMjMxNDFFQUI3ODFC
OTczQzA0OTAeFw0yNjA3MTUxNjMzNDNaFw0yNzA3MTQxNjM4NDNaMDMxMTAvBgNV
BAMTKEExNEQ2RjJBNTJDNThGNDg5RUE1RkE5OUUwRDhDRjMwMTA4MDExMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKPub8KxtL4tIMtNlw1cop3uv
uki9wvAR6MexvVsUe6h0cp0Q5Pz0AcURFFDl/sJVggRbyQzvUzJI9qHRgXlX/Sgf
UZW5BahyWekM1ZFUW805GE1Be1/jrMXKue7d7jGtfXF5qDFkr5LL0YwbNY0yBmOv
rg7w11L/xVFC9mTCIrqWjqDRptL4gKN81TChKNWUKVNbD6RdwXIcwV0jrQjNxerS
kMP3uM8mw0FCEpsi9IxpiZ/PLAzwqfsRh4jumXdZHDWIo+GWaY3xmXUFxwWTB/0u
8HGLCXpfKZJhRrqeeH61GURTVauMEqNRaPrFKRxzz702ofPR+CQKZMosqrDTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoU1vKlLFj0iepfqZ4NjPMBCAEQMwHwYDVR0j
BBgwFoAUl0sShr32qq+GSNIxQeq3gblzwEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVR
djcvMC85NzRCMTI4NkJERjZBQUFGODY0OEQyMzE0MUVBQjc4MUI5NzNDMDQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NEIxMjg2QkRGNkFBQUY4
NjQ4RDIzMTQxRUFCNzgxQjk3M0MwNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDTk1iU1B1OHBNNURnTVRMZnRHdUZONUp1cGVRbm5MUTJwM283Ykh1UXY3LzAv
MzQzNTJlMzEzNjM4MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqKgwDQYJKoZIhvcNAQELBQADggEBAEorJrBM
M0+l07J7qgnlpuoKP6cMLb9/NfxcpiEvxRgQ7TtQzHMLQRT3DXT+zlCg0Q+6BwYc
LfJvaqiS3LeOJs0dpmM/CWx0gxhYtpAn4nz6n+BIJ0P0FpD20ZR4ur8Zij3vUSVX
2hk881/FdHYoASle1UXJwACoFXEwSHGJPiIcKpUYfWgtZEaozPK8veSJemQSUIgv
nkSZRdO1MKYm2j15wsDWEecchwpY9wtmbmle67tfWGC/bu1s7ez9bJm/LpGJtrUm
DAEL1PH44VdFbzzgUn/ShfX95ff87Zh1SL/rS4LaOVso3dOmWPOstSpIQJjno0WS
d5GD5qFmwVlTPBQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:25 2026 by rpki-client