
$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
File: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (raw, json)
Hash identifier: uG5zjZPAri/Oy9usSAyo4ZR1cw3N7AbcfG5Ap6OPhgQ=
Subject key identifier: D1:73:FD:95:A1:42:FD:F2:E7:D4:A9:42:F5:80:AD:38:51:A3:49:E5
Certificate issuer: /CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
Certificate serial: 2EA75D01EBF30F029EBDD23A7C6E44581A4B0F2F
Authority key identifier: 14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
Signing time: Tue 24 Mar 2026 10:44:45 +0000
ROA not before: Tue 24 Mar 2026 10:39:45 +0000
ROA not after: Tue 23 Mar 2027 10:44:45 +0000
asID: 268155
IP address blocks: 45.170.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl
rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 08:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a7:5d:01:eb:f3:0f:02:9e:bd:d2:3a:7c:6e:44:58:1a:4b:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
Validity
Not Before: Mar 24 10:39:45 2026 GMT
Not After : Mar 23 10:44:45 2027 GMT
Subject: CN=D173FD95A142FDF2E7D4A942F580AD3851A349E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:67:e2:61:7e:7a:a8:41:dd:c8:68:93:5d:
2d:5e:59:15:e7:a8:fb:53:ca:b9:8f:d8:81:03:10:
d0:2c:51:00:25:d3:cf:d6:14:d6:d5:16:a3:e1:45:
0a:44:29:e0:40:f7:4c:58:03:8a:85:58:da:36:5b:
cf:f0:1c:17:75:f0:ff:46:d1:75:cf:db:48:1b:5e:
85:0a:af:4f:a6:70:b1:c2:83:b5:09:ce:69:75:5e:
b5:18:48:2f:87:bf:47:ad:33:09:74:a8:69:f3:a5:
ff:00:04:03:8c:81:50:96:7f:c0:c7:58:d3:38:83:
cb:3c:19:b6:56:2e:ab:c4:50:36:05:0f:26:f7:76:
6b:95:df:5d:48:ff:59:7a:be:78:0c:26:12:c3:de:
c5:a5:1e:52:9d:f5:31:a9:88:f1:80:ec:22:b2:bb:
ec:bc:97:75:1c:12:e8:71:b2:f1:38:21:7e:7c:6f:
22:68:d0:c2:e8:9e:ce:82:e4:fd:36:2d:05:54:72:
0a:34:6e:23:f8:16:f1:55:f7:08:9d:6d:87:8d:81:
9b:58:ad:27:d9:c9:34:12:3b:f4:9c:b8:6e:97:99:
4a:0e:c5:b3:c4:56:fa:43:19:b6:dd:fe:aa:79:e8:
6f:23:b1:04:ba:65:48:57:7c:98:85:18:09:35:17:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:73:FD:95:A1:42:FD:F2:E7:D4:A9:42:F5:80:AD:38:51:A3:49:E5
X509v3 Authority Key Identifier:
keyid:14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:27:78:aa:72:95:4b:33:06:5d:72:0b:8e:d3:21:f3:af:c2:
34:89:25:50:8c:df:00:25:90:f4:1e:9c:fa:5a:6c:9d:6f:7e:
a6:ad:21:04:bb:83:5c:cf:4a:76:59:2f:ac:60:cd:7b:e2:af:
3c:38:b3:a0:48:26:2d:9d:f5:56:ae:b0:18:8e:7c:22:ca:04:
e1:9c:68:83:ec:71:f1:8f:34:0a:41:bd:63:7f:06:8f:dc:74:
34:c4:d7:1e:04:92:8e:29:53:ff:74:c1:29:91:ef:a8:c5:c5:
f9:d1:48:10:c8:65:ec:92:79:2d:d4:cb:6e:fc:bb:c5:fb:46:
89:0d:ea:85:a2:0e:94:80:a4:80:aa:7f:cf:82:13:c1:cf:e7:
b7:2f:30:7e:0c:db:a0:d1:80:c4:43:30:03:43:6a:de:39:2b:
8a:87:03:78:47:9f:b5:69:11:bd:cd:f5:b2:34:8d:d4:b1:75:
5d:19:ea:b2:e0:b1:03:09:52:20:fb:1c:19:9a:58:5e:29:74:
ff:f3:0c:fd:33:e1:70:88:50:69:cf:8b:80:e0:c1:59:61:b9:
0e:9c:b1:51:27:c8:79:35:49:10:98:1a:4a:47:20:bb:88:82:
e0:14:53:1f:b2:e0:13:b6:6c:14:99:ca:75:9f:f1:a0:48:5d:
74:c4:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:54:05 2026 by rpki-client