
$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32332d3234203d3e20323638333439.roa
File: 34352e3233392e342e302f32332d3234203d3e20323638333439.roa (raw, json)
Hash identifier: DISFv6u1PYwIHXJoRQ0nf9BjOocxQ07ntP6r+B2MpuM=
Subject key identifier: C0:E7:84:EA:6C:0A:22:68:8D:0E:58:C1:0E:23:A9:25:40:FA:05:75
Certificate issuer: /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial: 23AE3EC8A7600066F93DF0AB0309D0C2044AD155
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32332d3234203d3e20323638333439.roa
Signing time: Fri 26 Jun 2026 23:24:06 +0000
ROA not before: Fri 26 Jun 2026 23:19:06 +0000
ROA not after: Fri 25 Jun 2027 23:24:06 +0000
asID: 268349
IP address blocks: 45.239.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 12:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ae:3e:c8:a7:60:00:66:f9:3d:f0:ab:03:09:d0:c2:04:4a:d1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Validity
Not Before: Jun 26 23:19:06 2026 GMT
Not After : Jun 25 23:24:06 2027 GMT
Subject: CN=C0E784EA6C0A22688D0E58C10E23A92540FA0575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:db:b5:b5:cd:e8:ba:bc:47:8c:ff:37:88:
72:85:e4:31:8b:0b:1d:27:25:4e:da:b2:4e:ad:55:
7a:de:d9:ea:69:44:d9:07:c5:f7:2c:13:d1:f5:7b:
9b:4b:e1:77:a0:ff:db:0e:e4:c4:53:29:e8:7e:27:
37:69:ed:52:4f:0d:3f:6e:2e:7e:03:a3:87:f1:ae:
a7:3b:e0:5b:93:38:a3:39:04:5e:9b:1e:00:21:25:
14:98:0a:bd:93:18:e8:20:ba:14:94:91:03:93:94:
2c:ee:bf:4d:72:65:e2:98:8b:79:f4:2c:0e:c7:16:
bc:ee:e4:81:47:30:23:e6:f6:21:c5:20:ca:5f:83:
df:79:a5:c5:c6:72:b4:5c:81:26:b9:c6:b7:f1:2b:
cf:fa:bb:20:5f:fe:3b:96:b1:40:33:3f:02:40:28:
e3:76:a5:2f:b1:a5:94:b5:c6:97:5b:0f:53:cf:56:
40:48:6a:3c:23:f6:a4:9e:aa:c1:b1:7e:10:1c:e7:
01:b9:70:d3:93:58:d3:b5:9c:c4:2d:7b:10:8d:e6:
ab:5b:dc:2d:04:08:16:57:f1:2f:48:50:d3:ad:2f:
0e:9c:24:64:d0:00:1e:87:d3:d5:32:a1:fe:28:5a:
2f:6e:a5:a5:87:4f:c3:93:fb:7c:6a:67:f7:3e:e4:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:84:EA:6C:0A:22:68:8D:0E:58:C1:0E:23:A9:25:40:FA:05:75
X509v3 Authority Key Identifier:
keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/34352e3233392e342e302f32332d3234203d3e20323638333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.4.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e1:71:69:9f:c1:81:49:40:ca:9f:84:2b:26:35:56:f7:11:
0a:9b:b6:81:96:60:48:e6:59:4e:52:3d:2c:40:97:9d:44:f0:
e1:3d:ca:df:4e:ee:6c:73:45:9d:2e:35:9d:10:cc:b9:7e:c0:
e6:65:94:bf:bf:03:fc:fc:6a:a0:ed:de:bb:dc:d2:4f:00:dc:
fd:46:6f:4b:66:e8:46:10:b9:e1:a2:4d:ab:57:d9:15:f7:f3:
9e:98:95:22:cf:ae:72:85:76:f3:a2:9c:1c:81:8b:1b:5e:9d:
4d:98:98:03:6e:bc:9d:0e:16:05:3e:ec:e7:05:32:f5:4c:ac:
cc:91:91:b4:80:0f:8a:ef:72:cf:fe:ce:4a:e2:aa:e1:b8:8e:
be:51:8b:3c:6c:ea:ec:41:ff:90:81:f9:2b:87:d1:7e:e0:93:
84:a5:2c:31:e6:d6:2f:f3:fe:e3:a6:3a:5d:f9:62:8e:03:06:
9b:13:6d:1c:46:54:ab:fd:82:ca:99:af:7f:62:f7:fb:43:1d:
4c:d0:ce:d4:63:24:f1:25:8c:6a:31:03:6d:cf:c9:28:21:52:
52:ef:d5:1c:39:b9:32:e6:81:13:f6:e2:b9:02:7d:93:72:d8:
f5:6b:8e:be:a8:8f:bc:80:00:44:84:58:f6:4a:f4:0f:2c:e6:
6b:ed:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:20 2026 by rpki-client