
$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134332e302f32342d3234203d3e20323637333239.roa
File: 34352e3233322e3134332e302f32342d3234203d3e20323637333239.roa (raw, json)
Hash identifier: kBSZX59LrYnQRTUQretPuhiBKiKFrFpqaLb+j7oBvRg=
Subject key identifier: 02:8D:02:82:14:5C:F1:76:94:FC:23:A0:CD:75:CA:B5:D6:C6:E8:CE
Certificate issuer: /CN=794E629B0678092652C7896E669B6A838A268C5A
Certificate serial: 135F70654A070CC374C631D4F3F2007A025DA0CF
Authority key identifier: 79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134332e302f32342d3234203d3e20323637333239.roa
Signing time: Wed 11 Mar 2026 17:21:22 +0000
ROA not before: Wed 11 Mar 2026 17:16:22 +0000
ROA not after: Wed 10 Mar 2027 17:21:22 +0000
asID: 267329
IP address blocks: 45.232.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl
rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 17:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:70:65:4a:07:0c:c3:74:c6:31:d4:f3:f2:00:7a:02:5d:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794E629B0678092652C7896E669B6A838A268C5A
Validity
Not Before: Mar 11 17:16:22 2026 GMT
Not After : Mar 10 17:21:22 2027 GMT
Subject: CN=028D0282145CF17694FC23A0CD75CAB5D6C6E8CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:5d:ce:a9:be:e8:b4:29:f8:70:c4:b7:3b:
e7:2c:ce:2e:d3:30:24:22:cc:85:42:68:8f:d4:55:
3e:87:86:b8:4d:1c:3d:ab:7d:93:a2:72:d8:f6:79:
ad:a4:96:a1:22:a5:5d:24:94:0a:ad:2e:09:d4:d1:
ff:b9:06:0c:44:35:e6:b5:40:43:c1:6e:0f:f3:c4:
2e:ad:bd:56:32:0e:1c:2a:f4:cb:f6:54:a3:be:af:
bb:2c:73:49:b7:25:be:a8:cd:15:64:8b:e9:de:1f:
f4:e4:f7:5c:cd:b0:53:5c:46:04:c6:80:fc:6e:a6:
c1:5e:26:17:a3:1c:93:aa:95:da:0e:c1:b5:e0:cf:
ac:f0:11:01:31:43:d8:71:84:66:85:cd:6a:71:34:
a6:7a:de:c8:13:13:48:8c:b7:6f:a3:17:88:be:7d:
30:f7:52:5a:4c:bf:8f:fa:71:50:42:07:d1:fe:32:
d3:6c:2b:b3:5a:56:ce:cb:77:08:17:10:81:61:42:
50:ec:94:97:0e:db:40:b2:9b:bb:74:5c:eb:6a:84:
35:f7:8c:82:36:e2:09:9e:31:09:5f:24:4b:29:2f:
6b:02:5e:86:df:90:c2:6e:68:17:68:c7:7f:35:5b:
31:7d:62:4c:78:4b:b1:da:79:ed:0d:c2:e7:e3:13:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:02:82:14:5C:F1:76:94:FC:23:A0:CD:75:CA:B5:D6:C6:E8:CE
X509v3 Authority Key Identifier:
keyid:79:4E:62:9B:06:78:09:26:52:C7:89:6E:66:9B:6A:83:8A:26:8C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/794E629B0678092652C7896E669B6A838A268C5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/794E629B0678092652C7896E669B6A838A268C5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/34352e3233322e3134332e302f32342d3234203d3e20323637333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.143.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:1b:07:a0:5e:2b:ee:40:f2:bb:69:40:f5:14:3f:f3:5b:5e:
6f:e0:3f:7e:5c:02:ce:41:ab:b2:f1:60:d2:68:3c:4d:56:59:
2c:dd:ef:0f:48:a9:0f:53:79:59:11:60:31:46:3e:da:54:46:
9d:a4:aa:95:5b:92:40:b8:8b:8d:b5:da:5c:50:08:10:98:4f:
51:02:b1:27:ed:13:d7:7d:c6:be:42:2e:71:a5:26:ca:5b:75:
7b:e6:01:49:4e:8a:16:24:df:cd:5f:97:6d:48:26:60:d4:5e:
fd:49:a9:04:d1:84:40:36:4f:2e:af:1b:9c:ea:13:56:0a:5e:
9e:53:2c:b3:25:0d:f4:a1:99:1d:b9:42:e1:4a:dd:a5:4d:45:
67:05:2d:47:af:80:b5:13:d5:0f:86:2a:0b:b9:ab:fd:13:8a:
2e:97:e1:41:54:1c:4e:91:f4:d4:60:eb:52:e1:13:ba:1f:f3:
32:e6:81:22:72:1a:8b:18:70:8f:a4:be:2d:02:89:e7:e2:7a:
d9:e3:77:4c:52:9e:b9:eb:a0:66:75:a5:ea:23:b8:bc:64:b8:
a0:f9:c7:60:68:d0:64:7e:86:9d:7d:c3:d5:94:ae:3a:6a:1f:
ca:4b:8f:6a:94:5c:08:1f:d7:41:4d:84:52:ac:ad:01:fe:10:
34:a8:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:30 2026 by rpki-client