
$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
File: 34352e3233352e302e302f32322d3234203d3e20323637333930.roa (raw, json)
Hash identifier: x84RGPPkt0sU6lKdwenGp4sAlumzGUiPtCRVvZsh/S4=
Subject key identifier: 38:A7:A3:04:6F:10:A6:34:39:C6:F1:EF:8E:C3:F9:9B:8E:2E:EF:B4
Certificate issuer: /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial: 11D57B69295AA67EBD21997E95EEE33913B62965
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
Signing time: Mon 09 Mar 2026 15:01:27 +0000
ROA not before: Mon 09 Mar 2026 14:56:27 +0000
ROA not after: Mon 08 Mar 2027 15:01:27 +0000
asID: 267390
IP address blocks: 45.235.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d5:7b:69:29:5a:a6:7e:bd:21:99:7e:95:ee:e3:39:13:b6:29:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
Validity
Not Before: Mar 9 14:56:27 2026 GMT
Not After : Mar 8 15:01:27 2027 GMT
Subject: CN=38A7A3046F10A63439C6F1EF8EC3F99B8E2EEFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:67:6b:f5:e7:d3:5f:2d:f2:15:81:93:f0:
c5:58:3e:77:80:89:32:b5:56:9b:de:09:75:a8:4d:
47:a5:41:23:88:ab:d3:71:7c:43:ab:ac:36:49:e2:
06:a8:62:32:18:e0:8f:be:6b:17:b1:16:37:0f:cc:
00:2e:58:3d:cd:fb:cc:28:d6:f7:95:80:d4:da:c0:
cd:27:ec:75:5d:bd:e9:ad:e8:24:d4:08:f7:d0:68:
37:65:ea:5e:c8:86:f7:67:03:66:b8:32:1a:ee:df:
bb:14:98:1b:65:ff:a9:d6:f4:74:1e:19:35:43:2d:
75:59:2d:bc:34:33:7a:e4:6e:fe:74:2f:bd:73:68:
64:f6:ea:23:16:44:7d:4e:eb:f4:70:93:e7:2c:be:
a3:fd:54:99:4f:e8:e6:ac:0b:15:d6:ca:c9:c6:6c:
a4:20:19:a2:b7:79:14:ce:b5:a0:28:b6:27:84:7b:
4e:66:b1:d4:a8:64:96:3f:6b:08:97:c2:cd:40:dd:
af:95:2e:49:71:2b:40:69:c4:a8:3a:f4:0f:6b:d8:
e5:9c:ee:f2:1e:03:4e:55:4b:9f:e5:18:61:04:1a:
f8:70:f9:c9:43:80:ee:dc:0f:fe:ed:9b:2d:2d:e5:
3e:03:cc:fe:68:43:01:f2:06:55:e0:d7:46:5f:85:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:A3:04:6F:10:A6:34:39:C6:F1:EF:8E:C3:F9:9B:8E:2E:EF:B4
X509v3 Authority Key Identifier:
keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/34352e3233352e302e302f32322d3234203d3e20323637333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.0.0/22
Signature Algorithm: sha256WithRSAEncryption
95:19:6c:db:2f:71:99:b0:a0:4b:44:58:ef:bd:65:6d:01:2f:
57:4d:e4:9a:c2:d1:bd:54:58:18:dc:a0:b7:85:3d:83:db:64:
9c:8f:c6:08:6d:8c:86:ea:8c:c4:5b:e7:52:63:1d:82:d5:f6:
93:86:46:de:85:87:00:26:21:b2:dc:86:73:af:84:24:79:1e:
97:4a:ed:fc:0b:d2:88:9e:90:04:6d:bc:d1:19:29:86:f2:2a:
d8:ce:4b:ec:cd:b4:53:31:15:27:b7:d0:32:13:4f:d7:3e:7c:
d9:fa:bd:c5:47:f7:fa:2f:51:a2:47:a6:4b:f8:2e:37:41:dd:
41:aa:10:ce:c0:03:f7:39:06:e7:ff:90:9d:04:9d:26:13:db:
9a:0d:1b:ed:2b:c5:de:1b:f2:ca:ba:4a:1d:9f:65:22:5c:87:
d0:ed:01:66:2c:ac:c2:17:53:d5:34:a1:f2:12:28:eb:f1:ec:
cb:02:89:4a:c8:6a:20:be:a9:28:9e:42:38:4d:e4:08:a2:11:
41:71:65:e8:c8:ce:7b:a8:33:e3:a9:d0:c8:3f:52:83:92:1d:
9e:4c:0d:ce:09:f0:1d:91:a2:41:ff:21:46:ee:36:6b:d0:c8:
88:a7:21:8b:6e:1c:9d:85:cd:c9:48:ee:e5:dd:fa:1b:ac:a7:
e0:31:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:43:48 2026 by rpki-client