
$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
File: 34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa (raw, json)
Hash identifier: CJqHY8uh8AK6oMj3mwaQ429D5Q0vEJr2M19IYLLthPY=
Subject key identifier: D3:49:C4:B9:D1:7F:3A:C6:F9:1A:3B:B7:AD:83:D8:E0:7D:6F:67:DF
Certificate issuer: /CN=9563E21BD28B755C942528966C312AA8DA076625
Certificate serial: 357054584B4931EBDB04CFB95744BBB653418601
Authority key identifier: 95:63:E2:1B:D2:8B:75:5C:94:25:28:96:6C:31:2A:A8:DA:07:66:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9563E21BD28B755C942528966C312AA8DA076625.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
Signing time: Fri 20 Mar 2026 14:16:04 +0000
ROA not before: Fri 20 Mar 2026 14:11:04 +0000
ROA not after: Fri 19 Mar 2027 14:16:04 +0000
asID: 267261
IP address blocks: 45.231.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/9563E21BD28B755C942528966C312AA8DA076625.crl
rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/9563E21BD28B755C942528966C312AA8DA076625.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9563E21BD28B755C942528966C312AA8DA076625.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 19:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:70:54:58:4b:49:31:eb:db:04:cf:b9:57:44:bb:b6:53:41:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9563E21BD28B755C942528966C312AA8DA076625
Validity
Not Before: Mar 20 14:11:04 2026 GMT
Not After : Mar 19 14:16:04 2027 GMT
Subject: CN=D349C4B9D17F3AC6F91A3BB7AD83D8E07D6F67DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:ed:2c:9e:7d:3c:11:2a:40:bb:74:e2:83:
64:fa:00:9a:28:e2:62:56:ef:99:35:d8:c5:a6:21:
4a:15:3c:5f:9a:e5:9c:1e:09:13:f8:25:b6:f0:0c:
8a:1d:17:43:22:15:0e:79:a6:53:fc:47:0f:fc:3c:
12:30:c7:b8:04:cf:2c:0c:11:a5:b5:8d:1b:9f:6a:
ef:69:94:2f:79:75:f2:7f:ff:15:4c:f9:04:aa:de:
69:c2:c7:a1:db:19:22:3f:9a:14:72:e9:7a:de:23:
77:ac:c5:e7:e6:54:91:2f:17:50:73:1b:9a:7d:87:
13:88:bd:2a:7e:46:49:5f:66:80:d9:25:82:db:b6:
a8:03:62:90:03:8a:57:42:75:cb:d5:64:ac:81:a1:
57:0e:9a:a5:bc:60:15:bc:0b:08:32:5d:f1:74:7b:
d0:bb:1c:58:6c:20:be:94:f6:2c:1f:cb:d4:8c:23:
db:83:5b:44:2c:38:d0:11:24:27:7a:8b:fb:9d:52:
a9:df:fe:86:2d:9e:66:24:c5:a3:c2:83:b7:8a:08:
a4:3b:4c:0d:0a:e1:e6:93:83:2a:b7:93:61:4d:7c:
65:e6:24:f3:c2:ba:ca:a5:16:69:d6:7f:4d:12:51:
35:cb:dc:96:0c:69:10:b0:3b:5c:01:64:27:b2:db:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:49:C4:B9:D1:7F:3A:C6:F9:1A:3B:B7:AD:83:D8:E0:7D:6F:67:DF
X509v3 Authority Key Identifier:
keyid:95:63:E2:1B:D2:8B:75:5C:94:25:28:96:6C:31:2A:A8:DA:07:66:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/9563E21BD28B755C942528966C312AA8DA076625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9563E21BD28B755C942528966C312AA8DA076625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.152.0/22
Signature Algorithm: sha256WithRSAEncryption
94:23:10:f0:bc:e1:ca:f1:e0:61:a4:49:30:13:98:4c:b6:e7:
ff:21:b3:bd:e6:19:83:71:ca:49:64:73:c0:3e:2d:50:b0:59:
73:68:30:6c:bc:32:27:2f:b6:b2:70:9a:74:ad:c0:58:67:7b:
17:f3:2f:4f:f9:ed:f4:38:c3:77:cd:b4:a1:22:47:f8:e5:63:
67:54:44:7e:0f:19:12:d4:50:f3:83:da:da:7b:ce:8c:a9:96:
28:cf:90:9d:1b:84:8d:9a:82:11:a3:a5:e5:aa:a3:86:15:5b:
86:8c:b3:56:39:23:6f:f6:a4:b4:1c:56:63:1a:ff:8d:bc:68:
92:71:cd:2c:7a:c7:4a:6f:f0:8c:fe:b1:66:53:34:e1:6f:2c:
f4:94:e9:82:52:1c:81:9e:ae:ce:57:71:b5:e5:b8:72:c9:74:
e7:0e:4a:92:7a:e2:ab:70:89:3c:ce:fd:8d:ca:ba:9a:1f:37:
c2:9a:2a:7c:62:b7:82:bb:d7:0b:53:10:7e:73:f6:a3:78:5c:
ad:4a:64:db:95:23:b6:49:3a:1d:42:b8:f7:f4:b9:52:f1:69:
ea:62:e8:9b:31:73:8e:b0:59:78:e1:17:e6:49:63:7f:8a:00:
97:0a:2d:39:70:df:48:7d:bb:b4:69:e5:df:b2:08:8c:f2:3e:
76:30:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:03 2026 by rpki-client