
$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39372e302f32342d3234203d3e20323638363734.roa
File: 34352e3136352e39372e302f32342d3234203d3e20323638363734.roa (raw, json)
Hash identifier: PfxZccP35JKkmxseMBIxR73MKvrkl+1GMCjX9NeqZyI=
Subject key identifier: 28:CE:D9:7D:19:6F:A2:C0:A0:E8:AA:D8:44:D9:96:D5:6E:93:39:35
Certificate issuer: /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial: 111F682D6938D0B2D095A07B0866321925A8BF5E
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39372e302f32342d3234203d3e20323638363734.roa
Signing time: Sat 07 Mar 2026 19:20:51 +0000
ROA not before: Sat 07 Mar 2026 19:15:51 +0000
ROA not after: Sat 06 Mar 2027 19:20:51 +0000
asID: 268674
IP address blocks: 45.165.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 06:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1f:68:2d:69:38:d0:b2:d0:95:a0:7b:08:66:32:19:25:a8:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Validity
Not Before: Mar 7 19:15:51 2026 GMT
Not After : Mar 6 19:20:51 2027 GMT
Subject: CN=28CED97D196FA2C0A0E8AAD844D996D56E933935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:11:bd:f7:c4:de:4e:9a:33:0c:a0:20:54:fc:
38:52:e3:ed:9d:53:84:1d:7f:94:32:60:f6:d8:ad:
d9:7e:26:d5:71:d2:dc:19:87:a4:4e:b6:94:e9:b8:
9d:ec:ad:44:a7:e9:92:5f:c7:5c:b2:2e:ff:05:a6:
3b:8f:30:fd:d8:7e:c5:eb:71:9c:f7:4f:db:79:85:
eb:a2:76:36:a6:13:4e:96:6b:57:29:79:53:7a:84:
39:e2:2f:10:e1:d7:66:44:52:39:c5:6d:fa:5e:e9:
9a:c8:31:35:84:90:1d:f9:f7:4c:08:5e:9a:69:bd:
57:65:ab:ae:e9:f7:cc:bf:22:8e:31:93:de:5f:f1:
40:6d:9f:33:26:1e:57:89:88:ec:92:a4:72:44:33:
d6:a3:60:70:50:98:e0:ab:22:36:39:67:0a:74:b0:
02:2b:e5:5d:f7:88:5e:13:49:24:54:09:fc:dc:d4:
43:a1:a4:ee:16:a5:3a:3c:09:f7:69:43:5a:a5:8e:
2e:0e:9a:5c:a5:bf:13:de:36:ce:21:a6:ec:2b:6e:
56:1f:28:b5:50:df:b8:04:d5:20:26:49:13:1a:30:
bf:18:e0:0b:8d:ac:58:c4:11:83:89:b3:49:dc:51:
85:17:59:fe:44:2b:1e:eb:79:5e:58:79:de:f4:b3:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:D9:7D:19:6F:A2:C0:A0:E8:AA:D8:44:D9:96:D5:6E:93:39:35
X509v3 Authority Key Identifier:
keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39372e302f32342d3234203d3e20323638363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.97.0/24
Signature Algorithm: sha256WithRSAEncryption
28:02:89:e0:62:9a:99:19:72:86:27:8c:4f:0c:2a:23:72:9d:
c2:17:ae:67:69:61:e8:80:63:7b:e2:f5:c6:6a:ba:db:97:b4:
9e:2d:8e:2b:2f:04:74:d0:92:5e:f9:04:e0:b0:96:4a:e1:1c:
bf:e0:25:cd:80:a6:c3:9d:90:df:f3:51:40:f3:21:54:9b:d3:
35:0f:a8:f6:f0:b8:d1:2f:f8:89:c3:6c:63:3f:49:68:c4:ef:
62:a6:bf:8c:14:8a:9f:ff:76:6c:1b:57:79:4c:0f:22:21:92:
7f:88:86:72:ab:f6:87:55:30:19:8f:b6:0d:df:b4:65:f6:8c:
4d:72:b2:80:a7:d4:71:b4:c6:df:72:ef:4b:f0:dc:9a:4d:3c:
4c:c0:2b:ae:00:1f:8b:cc:01:79:aa:be:ba:74:40:2b:e0:4a:
79:12:45:aa:82:69:70:75:4f:a8:4e:54:06:a7:45:75:fe:38:
76:9c:75:c4:d1:46:40:1c:ae:80:d8:5a:75:40:2e:4b:aa:97:
7e:56:36:a9:09:35:f1:93:8e:f1:be:6d:2f:51:78:e8:2f:5c:
f6:bf:80:27:bf:97:91:d6:db:f2:d1:41:48:aa:d4:4f:ff:0d:
be:fd:d1:0c:c0:8a:93:54:ad:6d:3d:d8:0d:d7:d2:7f:cc:4b:
70:41:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:56 2026 by rpki-client