
$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa
File: 34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa (raw, json)
Hash identifier: W20o3R6brwffosB8kCiifC46ZlMSLQgdQYf8P/mFKSg=
Subject key identifier: 43:72:5F:36:EE:EE:5A:59:BD:8A:22:BB:3E:97:27:DA:0B:0F:E6:FF
Certificate issuer: /CN=461B80DABAEF4F242E84EA4CAC98C51F50210099
Certificate serial: 15F7DE8335497EDA5C0BCE0F765ED28E112ED0BB
Authority key identifier: 46:1B:80:DA:BA:EF:4F:24:2E:84:EA:4C:AC:98:C5:1F:50:21:00:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461B80DABAEF4F242E84EA4CAC98C51F50210099.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa
Signing time: Tue 21 Apr 2026 18:44:45 +0000
ROA not before: Tue 21 Apr 2026 18:39:45 +0000
ROA not after: Tue 20 Apr 2027 18:44:45 +0000
asID: 268737
IP address blocks: 45.171.252.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/461B80DABAEF4F242E84EA4CAC98C51F50210099.crl
rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/461B80DABAEF4F242E84EA4CAC98C51F50210099.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461B80DABAEF4F242E84EA4CAC98C51F50210099.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 05:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f7:de:83:35:49:7e:da:5c:0b:ce:0f:76:5e:d2:8e:11:2e:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461B80DABAEF4F242E84EA4CAC98C51F50210099
Validity
Not Before: Apr 21 18:39:45 2026 GMT
Not After : Apr 20 18:44:45 2027 GMT
Subject: CN=43725F36EEEE5A59BD8A22BB3E9727DA0B0FE6FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:81:5b:91:58:28:f5:53:b5:2c:e0:8f:45:
07:9e:ec:a9:9d:b7:61:b9:0e:72:17:cd:a5:cd:0d:
0e:f8:e1:f4:cc:06:fb:e8:24:85:80:0a:48:ec:b6:
49:ef:11:0a:e0:59:37:7c:aa:5f:8d:e4:ba:90:99:
3e:90:58:68:c4:24:64:51:90:ca:5a:68:be:fd:e3:
86:15:9e:30:e4:e4:41:90:6a:60:7c:58:62:6b:14:
63:25:fa:ee:65:0b:cc:55:56:1b:98:54:1f:48:55:
89:16:fd:11:ea:31:a0:c8:84:dd:25:93:76:9e:46:
ee:fe:4f:44:a6:12:30:a5:bd:6e:6f:5d:95:b4:5f:
82:91:77:38:73:bf:f2:4f:21:79:8a:4c:57:b7:81:
54:84:51:0e:fb:6b:1e:ef:78:b8:a6:36:f0:9e:dc:
68:03:f4:9c:90:be:05:2b:62:83:70:18:3f:8b:0d:
f8:c1:f5:4d:8f:08:d4:c9:f4:9e:23:30:8f:3b:a5:
f7:fd:80:7d:48:a0:08:ec:bf:3b:68:4c:02:9b:fe:
72:81:62:2c:62:bf:40:5f:c1:76:7f:11:af:26:57:
9b:f2:28:44:dd:21:d8:c7:9c:e5:37:0a:c1:fc:f6:
ba:51:ab:1d:2d:a8:f1:05:b5:21:f4:ae:d1:4b:1b:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:5F:36:EE:EE:5A:59:BD:8A:22:BB:3E:97:27:DA:0B:0F:E6:FF
X509v3 Authority Key Identifier:
keyid:46:1B:80:DA:BA:EF:4F:24:2E:84:EA:4C:AC:98:C5:1F:50:21:00:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/461B80DABAEF4F242E84EA4CAC98C51F50210099.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461B80DABAEF4F242E84EA4CAC98C51F50210099.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3332203d3e20323638373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:85:c8:9a:3a:e8:ef:ad:e6:f0:a6:3d:83:6d:b8:0d:9c:f0:
5b:bd:28:ab:fe:61:21:61:5b:2d:8b:bb:e1:54:a1:94:5b:92:
d5:0e:67:fa:c7:97:51:79:9a:55:b9:e2:cb:14:75:9e:2e:11:
2c:c0:39:41:17:ee:e0:b4:ef:27:1e:fc:5d:25:ec:2e:59:46:
82:5f:a5:80:54:3c:fe:91:24:98:c4:6c:4d:64:5c:ab:b1:47:
8e:09:1f:c8:33:ff:85:b6:a6:b4:40:ce:fe:fc:ca:6e:a4:57:
91:43:3c:52:74:b8:f2:57:0f:47:d0:26:21:e6:d5:90:57:44:
da:7e:f2:91:f1:4d:8e:68:7d:7d:2c:80:5d:9f:fc:49:6e:01:
15:8d:29:af:d6:c0:3d:e1:de:ae:7b:3f:10:ca:a1:6c:e8:91:
7c:16:7d:e1:c1:ef:a3:59:89:c7:99:04:fd:27:9c:6c:c0:5c:
c2:cb:95:85:2d:ac:9c:3c:ee:6a:70:1f:92:31:11:8a:6a:2b:
5d:a7:04:8e:c9:d2:16:40:26:3b:99:0f:2d:bb:85:91:8f:b0:
fa:5d:d2:18:6d:86:17:f4:88:60:23:79:37:f2:b2:23:03:3d:
14:cf:d7:a0:97:bf:a3:8d:8a:a4:0c:4b:4b:35:3f:b2:a8:68:
5f:82:d1:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFffegzVJftpcC84Pdl7SjhEu0LswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxQjgwREFCQUVGNEYyNDJFODRFQTRDQUM5OEM1MUY1
MDIxMDA5OTAeFw0yNjA0MjExODM5NDVaFw0yNzA0MjAxODQ0NDVaMDMxMTAvBgNV
BAMTKDQzNzI1RjM2RUVFRTVBNTlCRDhBMjJCQjNFOTcyN0RBMEIwRkU2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBYFbkVgo9VO1LOCPRQee7Kmd
t2G5DnIXzaXNDQ744fTMBvvoJIWACkjstknvEQrgWTd8ql+N5LqQmT6QWGjEJGRR
kMpaaL7944YVnjDk5EGQamB8WGJrFGMl+u5lC8xVVhuYVB9IVYkW/RHqMaDIhN0l
k3aeRu7+T0SmEjClvW5vXZW0X4KRdzhzv/JPIXmKTFe3gVSEUQ77ax7veLimNvCe
3GgD9JyQvgUrYoNwGD+LDfjB9U2PCNTJ9J4jMI87pff9gH1IoAjsvztoTAKb/nKB
Yixiv0BfwXZ/Ea8mV5vyKETdIdjHnOU3CsH89rpRqx0tqPEFtSH0rtFLG6IBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ3JfNu7uWlm9iiK7Ppcn2gsP5v8wHwYDVR0j
BBgwFoAURhuA2rrvTyQuhOpMrJjFH1AhAJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtuOHdnUWFycG8zNmdvaFIzc3hhdXVWZ0NSNmdHV2RMRlhlVmNhNHd2
aUsvMC80NjFCODBEQUJBRUY0RjI0MkU4NEVBNENBQzk4QzUxRjUwMjEwMDk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MUI4MERBQkFFRjRGMjQy
RTg0RUE0Q0FDOThDNTFGNTAyMTAwOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLbjh3Z1FhcnBvMzZnb2hSM3N4YXV1VmdDUjZnR1dkTEZYZVZjYTR3dmlLLzAv
MzQzNTJlMzEzNzMxMmUzMjM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItq/wwDQYJKoZIhvcNAQELBQADggEBACqFyJo6
6O+t5vCmPYNtuA2c8Fu9KKv+YSFhWy2Lu+FUoZRbktUOZ/rHl1F5mlW54ssUdZ4u
ESzAOUEX7uC07yce/F0l7C5ZRoJfpYBUPP6RJJjEbE1kXKuxR44JH8gz/4W2prRA
zv78ym6kV5FDPFJ0uPJXD0fQJiHm1ZBXRNp+8pHxTY5ofX0sgF2f/EluARWNKa/W
wD3h3q57PxDKoWzokXwWfeHB76NZiceZBP0nnGzAXMLLlYUtrJw87mpwH5IxEYpq
K12nBI7J0hZAJjuZDy27hZGPsPpd0hhthhf0iGAjeTfysiMDPRTP16CXv6ONiqQM
S0s1P7KoaF+C0Xk=
-----END CERTIFICATE-----
Generated at Wed May 13 17:36:45 2026 by rpki-client