
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3136312e3134302e302f32322d3234203d3e203238323031.roa
File: 34352e3136312e3134302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: 7FV1aW/3sAcrpg8aBNtynmIjPj9G4EwUhhqTOpk/bTA=
Subject key identifier: 01:AA:E8:B5:E4:67:F8:C0:07:65:68:67:6B:82:02:7D:57:4D:D8:83
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 0A5EB2537B610880FF1AF68C2FCCCED6F51CE2E1
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3136312e3134302e302f32322d3234203d3e203238323031.roa
Signing time: Mon 16 Mar 2026 12:59:47 +0000
ROA not before: Mon 16 Mar 2026 12:54:47 +0000
ROA not after: Mon 15 Mar 2027 12:59:47 +0000
asID: 28201
IP address blocks: 45.161.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 01:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5e:b2:53:7b:61:08:80:ff:1a:f6:8c:2f:cc:ce:d6:f5:1c:e2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Mar 16 12:54:47 2026 GMT
Not After : Mar 15 12:59:47 2027 GMT
Subject: CN=01AAE8B5E467F8C0076568676B82027D574DD883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:bf:4c:6e:bf:03:21:0e:15:88:45:cd:61:
1f:8a:61:b1:44:1f:c9:8a:4c:9e:ea:c7:61:17:3d:
4a:1a:fe:56:39:3a:b6:75:e4:92:10:0e:55:aa:36:
e6:2e:04:29:59:8a:0d:4a:5f:6c:5d:9a:04:00:7e:
5e:82:08:3f:10:34:34:1b:1b:16:fd:69:c6:07:74:
87:e1:6e:07:f0:e7:d7:a5:4b:64:54:8b:1d:99:b1:
44:43:5a:8c:84:77:0c:1d:b5:31:7d:d6:00:ee:f6:
f4:cd:4c:14:22:ca:4b:20:71:a5:9c:dd:d8:d4:8a:
7c:c6:21:3e:a7:af:d5:4b:4e:02:ec:5e:51:7b:11:
c3:36:d8:c8:b1:84:1a:14:e7:6c:11:d4:95:e4:3c:
e0:3e:7f:f1:4a:cd:21:22:ff:85:34:ea:60:b7:10:
be:f3:5d:44:4f:67:e7:5c:5e:72:3b:fa:78:5f:8a:
f5:bb:66:a0:8f:0f:7d:1d:b6:e6:f5:64:7e:3e:b4:
24:3d:7c:c6:8c:d0:75:ac:d2:4e:69:4a:a3:0a:7c:
20:34:40:fd:6e:f2:72:59:96:55:8c:13:a0:6a:3a:
1e:fa:2c:dc:b7:18:f6:13:b6:89:9d:a0:dc:6c:3d:
f4:76:30:99:52:7b:5d:f1:83:87:6d:04:31:7c:3f:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:E8:B5:E4:67:F8:C0:07:65:68:67:6B:82:02:7D:57:4D:D8:83
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3136312e3134302e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.140.0/22
Signature Algorithm: sha256WithRSAEncryption
35:92:6c:29:0b:35:35:8a:9e:9a:be:38:97:b2:25:d7:21:53:
e5:f0:c5:b1:19:f2:12:db:cf:76:7c:57:28:2e:13:5f:07:15:
56:7e:5a:23:f6:11:5e:d5:ce:ca:cf:d3:0c:2b:67:49:bc:0a:
73:26:d5:e7:be:51:51:ff:a5:48:e9:80:92:a2:b2:de:5b:2b:
43:65:cb:78:88:61:86:e0:4f:b9:b4:65:6b:68:56:52:e8:57:
96:31:dc:a5:0d:36:7e:80:4d:19:e9:20:e6:0a:2e:10:bc:0b:
d1:bb:52:20:8e:c6:fe:09:53:6d:3d:22:d6:4b:ff:f6:75:70:
2c:9d:2a:4e:5a:84:68:18:f4:f8:d6:92:3a:ed:bc:65:1b:44:
ba:5a:6d:e3:e8:6f:2a:6b:a3:f6:7b:a2:91:98:a7:b8:9b:ab:
ec:ac:b3:b1:14:4d:c8:f9:e1:09:14:9e:fa:b9:01:18:d7:0f:
61:6d:c4:d5:da:0e:57:26:f6:3f:c2:ca:9f:aa:4e:45:df:98:
bc:0a:5e:13:4a:3d:4d:72:eb:b8:bf:ac:cb:8b:f3:9f:95:74:
c3:26:c9:12:b6:43:4c:ed:44:fb:d2:2b:ba:f4:01:bf:25:cc:
0b:c9:80:b3:43:9c:e6:22:16:60:be:f6:86:06:72:91:dd:57:
d0:0d:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:26:12 2026 by rpki-client