
$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
File: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (raw, json)
Hash identifier: d9k822rzWWPdaMed/pSQEKphSXYzwkbTzhe5u9ihAI8=
Subject key identifier: 14:CD:93:68:15:0E:6C:CD:A2:6C:1D:EB:88:4D:48:A7:34:96:92:91
Certificate issuer: /CN=CDE3443CDA9AEB85777986244DC0A57E03CAF670
Certificate serial: 42AA860042A331ED3CAB9B016E9478A47F14D832
Authority key identifier: CD:E3:44:3C:DA:9A:EB:85:77:79:86:24:4D:C0:A5:7E:03:CA:F6:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
Signing time: Thu 09 Jul 2026 15:13:18 +0000
ROA not before: Thu 09 Jul 2026 15:08:18 +0000
ROA not after: Thu 08 Jul 2027 15:13:18 +0000
asID: 268151
IP address blocks: 45.170.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl
rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 10:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:aa:86:00:42:a3:31:ed:3c:ab:9b:01:6e:94:78:a4:7f:14:d8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDE3443CDA9AEB85777986244DC0A57E03CAF670
Validity
Not Before: Jul 9 15:08:18 2026 GMT
Not After : Jul 8 15:13:18 2027 GMT
Subject: CN=14CD9368150E6CCDA26C1DEB884D48A734969291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:13:54:86:b8:6f:d8:cc:4b:bc:1a:49:eb:
2e:03:31:53:ef:7c:4d:47:c1:c1:d1:cf:5e:15:01:
1f:88:04:23:5a:0f:2a:83:fd:d2:ab:99:f9:dc:aa:
58:12:dc:83:22:a5:cf:eb:88:ac:1a:85:8d:2a:98:
b3:9d:72:84:a5:cc:4d:ac:ce:fa:67:a4:fa:1f:33:
6f:cb:97:c9:04:67:05:cb:bc:67:dd:8a:7c:07:94:
be:0d:94:06:63:83:48:06:7c:45:6c:ae:12:fc:fb:
23:2a:b9:8a:7c:21:cb:0a:7c:e4:ad:4c:9f:f6:46:
7d:fd:48:81:2f:ae:8f:2d:6a:da:1e:ca:61:d5:b3:
87:e2:a8:0b:bc:0c:e5:34:0e:94:52:92:45:52:fe:
49:60:e4:c6:ac:e2:3d:db:98:52:c2:6f:18:80:8c:
41:51:7c:02:2b:94:27:77:36:05:a7:87:f0:79:da:
85:4e:fe:c6:dd:bd:67:e9:b4:97:db:d4:5f:54:a9:
1f:8e:90:87:5c:24:f6:2c:89:73:02:9a:12:ae:dc:
60:0f:b0:c7:5c:b3:85:27:5d:08:6f:fd:c6:b2:3f:
41:5b:73:96:43:42:06:99:38:98:7f:d1:1b:b5:b9:
47:f1:a2:2b:49:bb:72:58:5a:b9:45:4a:02:f3:42:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:93:68:15:0E:6C:CD:A2:6C:1D:EB:88:4D:48:A7:34:96:92:91
X509v3 Authority Key Identifier:
keyid:CD:E3:44:3C:DA:9A:EB:85:77:79:86:24:4D:C0:A5:7E:03:CA:F6:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:cb:56:be:c3:49:4a:ec:dd:45:bb:73:3a:3e:fe:dc:2d:69:
0c:d1:a9:87:a1:9c:92:e8:a6:1c:4d:53:b2:79:7f:8e:24:90:
e4:1a:41:2d:a6:a3:a7:2e:8b:76:46:9f:ad:18:db:ce:b9:fc:
97:0c:40:3c:ae:d7:d8:5b:0a:ae:fd:eb:c7:77:6d:3f:de:94:
44:13:96:c9:41:60:be:d2:5b:22:7e:6c:97:25:13:e7:e0:c1:
55:ce:8a:82:5a:f1:f6:3f:84:42:63:84:7a:27:b1:f3:22:eb:
19:b0:64:62:74:8f:2b:f8:02:75:e1:69:f1:34:27:a1:af:3d:
3f:3e:0e:41:a9:ec:85:bb:a2:25:b3:ea:67:6c:fc:37:85:c7:
c3:17:15:42:81:29:bc:bd:45:96:e5:e4:c8:92:ac:94:61:86:
eb:aa:dc:02:53:ba:48:16:47:4e:e4:cb:94:cb:4f:39:3e:75:
50:7b:e8:02:86:d0:ea:c6:33:62:c7:80:5b:10:c4:9f:d0:9a:
d2:50:99:2c:30:b5:e8:ea:12:43:80:13:89:15:3d:e0:b8:91:
62:1d:bf:f8:b1:04:e2:a0:40:20:0f:6f:ce:75:d1:44:32:97:
66:68:ee:ae:6f:3b:d8:9f:1b:7e:22:9f:71:03:02:93:69:b2:
72:81:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:33 2026 by rpki-client