
$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
File: 34352e3137332e33382e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier: dQd1dkxb91IeoxLDilJKLYLozt6ZXzOs4Q00iaqkoKk=
Subject key identifier: 98:BE:CB:F1:CF:40:FF:47:EF:4A:77:82:36:AE:55:D4:0F:1D:D1:E9
Certificate issuer: /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial: 1124A1C967AB61E2C8EDA5731001C7BE957F3211
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
Signing time: Tue 17 Mar 2026 22:38:00 +0000
ROA not before: Tue 17 Mar 2026 22:33:00 +0000
ROA not after: Tue 16 Mar 2027 22:38:00 +0000
asID: 268790
IP address blocks: 45.173.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:24:a1:c9:67:ab:61:e2:c8:ed:a5:73:10:01:c7:be:95:7f:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Validity
Not Before: Mar 17 22:33:00 2026 GMT
Not After : Mar 16 22:38:00 2027 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:48:b7:42:ea:4d:f8:0c:65:4d:54:e3:c6:
7c:51:13:0c:aa:50:8d:29:95:41:45:9b:dc:e3:85:
6f:53:1f:9d:c1:65:83:6d:84:2a:23:fe:98:d4:6d:
9b:d3:49:41:6d:60:8c:37:4f:84:af:d9:17:6e:59:
67:01:58:52:66:bc:dc:40:f5:3b:dc:c7:f5:a4:bf:
78:22:11:30:1a:e2:6d:55:52:0e:be:6b:4d:96:b8:
ef:65:ad:e2:c4:32:4e:01:71:fa:0e:b4:1a:ba:6e:
1c:ef:85:d7:bb:d2:cf:d1:f9:f8:4c:77:2d:55:04:
32:8a:f4:a4:82:7e:51:cc:84:f5:96:94:b9:69:46:
ab:ca:01:c4:3a:a0:b7:22:b0:4f:ca:ba:42:4c:55:
0e:ec:26:c5:08:9c:52:c0:e4:d0:aa:ec:c2:33:10:
a6:37:7d:df:2d:7d:e9:f0:5c:47:28:43:7d:03:cd:
77:28:97:ba:fd:37:bb:5c:3a:72:23:5d:18:3e:eb:
78:fb:c4:ed:5e:c4:71:c4:cc:e0:a5:be:d1:7f:9b:
b6:47:d9:3b:bd:fe:68:cf:04:37:48:8e:0f:50:8d:
88:f3:94:42:a5:e7:12:ad:37:ac:7e:bc:75:41:ca:
7d:ae:42:72:ea:00:ba:f4:11:a1:13:87:25:a1:a5:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:CB:F1:CF:40:FF:47:EF:4A:77:82:36:AE:55:D4:0F:1D:D1:E9
X509v3 Authority Key Identifier:
keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/34352e3137332e33382e302f32342d3234203d3e20323638373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:88:a3:1c:be:4a:3a:0f:6d:dd:94:9f:5a:20:83:16:63:28:
9f:c1:5a:18:d4:47:5c:15:70:27:34:e4:a0:23:14:a7:01:df:
2d:ce:7d:34:da:19:55:f1:a3:69:d7:44:27:4e:cd:3a:78:ca:
93:df:85:85:92:f8:42:2f:60:f9:de:f9:8f:14:d6:b3:8c:12:
24:30:7d:99:9b:39:2e:8a:b9:d7:7f:2a:5b:4d:a4:51:3b:8e:
de:84:66:7d:0b:a6:ed:7f:f7:e3:09:ca:65:c5:69:dd:b5:a4:
c5:eb:ab:b1:b6:f8:87:8a:b9:28:7c:0d:01:3b:46:55:7c:de:
73:65:83:09:c2:8b:c9:03:55:0c:91:7b:2f:4a:b1:57:5e:8c:
85:a8:ff:77:a3:22:97:1a:50:8f:5b:28:0b:59:21:47:3c:83:
cd:2f:e9:fa:30:70:3c:d4:07:6a:23:3b:3e:82:03:3b:ff:df:
a3:bb:10:0d:fd:64:30:6f:a5:92:de:7b:bd:d8:90:a2:c9:b9:
13:f8:fb:5a:fd:a5:3f:fc:a2:75:b3:d0:a9:f3:ea:44:eb:2a:
fb:8a:c7:b1:65:99:be:80:78:d9:8f:7e:7f:ce:a4:5f:76:9e:
f6:18:b4:a1:60:d6:23:0d:b2:88:86:f9:0a:f9:80:c1:3f:47:
f4:f9:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:19 2026 by rpki-client