
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
File: 34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier: 0yG7J4DiVrfERM6tYMRkIJn+S7u2tvTsAO2brA+VAuk=
Subject key identifier: D7:49:97:1F:A8:E6:C3:73:D5:93:64:7B:8E:FC:C0:7C:7B:C4:2E:28
Certificate issuer: /CN=2EE47F810421AADFC75A240BE718278F1FEE7E4B
Certificate serial: 4A7F73645C970493F2422026DD9CF836B85D43BB
Authority key identifier: 2E:E4:7F:81:04:21:AA:DF:C7:5A:24:0B:E7:18:27:8F:1F:EE:7E:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
Signing time: Tue 10 Mar 2026 20:54:36 +0000
ROA not before: Tue 10 Mar 2026 20:49:36 +0000
ROA not after: Tue 09 Mar 2027 20:54:36 +0000
asID: 268786
IP address blocks: 45.172.168.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.crl
rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 22:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7f:73:64:5c:97:04:93:f2:42:20:26:dd:9c:f8:36:b8:5d:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EE47F810421AADFC75A240BE718278F1FEE7E4B
Validity
Not Before: Mar 10 20:49:36 2026 GMT
Not After : Mar 9 20:54:36 2027 GMT
Subject: CN=D749971FA8E6C373D593647B8EFCC07C7BC42E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:55:87:de:a8:f0:a3:e8:df:92:b0:0e:5f:
2d:66:e5:9c:82:f1:8c:68:a4:b3:be:ea:bb:41:6b:
c7:03:cc:f7:99:34:70:a0:1d:13:80:00:51:12:b9:
e8:0d:2b:ff:68:44:14:81:98:ef:e8:98:f6:e0:8c:
04:c8:3b:55:47:5e:ab:56:85:d6:33:0b:10:1b:1f:
3d:d2:34:32:b7:56:02:e7:46:fa:e0:4b:d9:09:1f:
17:d6:71:70:86:0b:66:af:e6:a9:48:c1:13:7a:1d:
cf:67:b4:47:59:61:06:63:93:d0:7e:75:b3:92:3f:
b7:9f:1e:db:b3:87:5d:7b:d5:8d:89:4d:21:90:c8:
91:cc:51:8a:0d:6f:19:e8:e8:dc:7c:0e:68:21:c1:
83:f1:bd:c0:28:f1:cf:bd:4a:28:8f:33:80:c8:db:
11:5f:ba:41:7b:8c:41:9a:1c:a3:43:75:23:30:4c:
62:f2:1c:10:f3:2e:24:35:77:6c:69:95:8c:72:55:
08:8c:3d:de:c5:81:f8:09:35:6e:f8:9d:5c:3c:e6:
51:17:49:fb:09:3b:a0:60:cc:93:a6:d1:2c:7a:fd:
35:ad:81:c8:a4:61:28:3a:c5:d4:e1:a6:77:cf:11:
46:d5:12:1d:0c:cc:a1:5c:d5:74:6b:23:5e:71:3f:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:97:1F:A8:E6:C3:73:D5:93:64:7B:8E:FC:C0:7C:7B:C4:2E:28
X509v3 Authority Key Identifier:
keyid:2E:E4:7F:81:04:21:AA:DF:C7:5A:24:0B:E7:18:27:8F:1F:EE:7E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/2EE47F810421AADFC75A240BE718278F1FEE7E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE47F810421AADFC75A240BE718278F1FEE7E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.168.0/22
Signature Algorithm: sha256WithRSAEncryption
10:3a:24:2c:69:6e:6a:70:96:81:4d:ec:2b:67:e0:40:79:97:
1f:30:72:09:9c:1d:3a:75:6b:7d:d8:41:81:9b:c3:8c:2f:6e:
67:74:6d:a1:65:c7:1d:d6:57:73:10:bb:f8:6e:d9:58:fb:29:
54:31:bb:56:79:15:9c:fe:6b:d2:76:7f:53:c7:90:3c:6a:7b:
84:5c:c0:8b:7a:d4:79:fd:2f:66:84:de:54:cd:23:6e:50:9b:
72:54:4e:70:2d:bf:ab:39:45:53:3b:1c:60:1c:dc:fd:ab:1e:
c5:d6:48:1a:94:57:d0:80:65:2c:ab:36:4c:35:6d:ef:f1:20:
07:44:f9:dd:05:b5:56:e8:d9:55:a8:f6:5c:ae:dd:45:62:2a:
c0:6e:12:67:10:94:87:ba:f2:d0:fd:5f:0f:ac:0c:77:b5:86:
e6:cd:c7:70:08:8b:09:04:6f:d8:06:9a:18:54:7f:62:f1:6d:
80:d4:e9:89:47:34:a7:6f:43:6c:0a:df:bf:79:5e:25:9c:72:
21:df:2f:66:f8:98:6a:84:71:e9:b8:c4:6c:71:40:7a:45:ce:
60:1f:9e:0d:e6:fa:cb:36:e1:47:35:f0:ca:17:af:c6:d1:55:
89:f1:91:91:d6:58:bf:d8:b8:f8:8d:3f:dd:45:83:77:3c:1c:
62:87:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:07 2026 by rpki-client