
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa
File: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (raw, json)
Hash identifier: ktGx59JETujExjo30VVMt5PUSTyoY0psMj+P78eLE/Q=
Subject key identifier: 7D:11:8C:15:B3:B0:D7:DB:7E:FE:1E:F2:A9:D9:8F:9E:7D:5B:2E:96
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 5A0AB6545D76D29879586DDF72D7EB9556337F78
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa
Signing time: Mon 16 Mar 2026 12:36:07 +0000
ROA not before: Mon 16 Mar 2026 12:31:07 +0000
ROA not after: Mon 15 Mar 2027 12:36:07 +0000
asID: 268033
IP address blocks: 45.166.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 10:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0a:b6:54:5d:76:d2:98:79:58:6d:df:72:d7:eb:95:56:33:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Mar 16 12:31:07 2026 GMT
Not After : Mar 15 12:36:07 2027 GMT
Subject: CN=7D118C15B3B0D7DB7EFE1EF2A9D98F9E7D5B2E96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:cd:24:4a:fd:10:06:ef:5a:c8:40:ee:ba:
26:01:ea:51:74:3c:f6:67:e2:fa:0a:0d:54:f0:e8:
86:5a:0f:6f:81:33:3e:52:6f:fb:4e:b2:a5:79:99:
c3:f9:6d:3d:8c:e0:73:5d:cc:72:e0:d8:42:7a:63:
22:b5:f5:f6:16:65:36:7e:7f:b8:87:62:10:7d:cc:
50:d7:ac:d3:be:f6:db:91:8d:a3:99:2c:56:b4:63:
73:69:9b:61:d8:83:dd:c5:79:fd:f4:44:4e:41:3c:
5f:50:3d:b5:5b:ab:99:0d:90:5c:23:93:51:37:3e:
fc:c5:0f:9d:59:6e:a3:4b:8f:73:ba:80:59:10:af:
8d:1f:6b:6f:9a:7d:a5:13:b8:ed:ba:c9:f8:b8:23:
53:47:f4:4e:32:9e:a2:82:52:ef:f5:d9:69:95:e1:
05:2b:36:8d:00:28:ce:9b:57:6c:cf:cd:87:94:25:
16:04:e2:21:1e:5c:5c:d6:9a:18:03:67:4a:36:a0:
f1:3f:0c:da:ee:cf:00:66:a4:4a:f6:ac:e2:17:11:
d6:92:bb:ac:0e:b7:a9:f5:16:45:68:f8:c4:82:0b:
d1:23:93:45:8e:7a:0b:8c:a1:51:1f:08:ad:7b:5c:
f6:0d:dc:bf:d0:70:50:75:c9:3f:2a:ca:d5:23:48:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:8C:15:B3:B0:D7:DB:7E:FE:1E:F2:A9:D9:8F:9E:7D:5B:2E:96
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a9:15:67:d1:e6:d0:57:0a:ab:21:55:6c:e4:03:67:af:3a:
a2:d1:4d:31:43:4e:5e:e3:f8:af:e4:e1:eb:18:b2:42:46:87:
21:28:5c:dc:38:45:56:d6:fa:cf:c9:87:24:3c:17:bc:e8:16:
70:a0:f6:f8:7c:09:44:32:ec:3f:49:53:90:35:50:2a:9d:62:
dd:30:c8:6f:b8:bd:6d:36:4f:1e:e5:9a:13:ad:b1:24:25:95:
e9:ea:08:0a:72:cb:6a:c5:7a:71:d2:75:d9:e3:2b:37:29:77:
aa:c8:7e:5b:5d:c3:d6:5c:60:61:08:13:8b:53:ed:ab:6f:ee:
a9:15:4f:35:97:19:0f:ca:4d:3f:27:f6:23:64:2c:11:7c:61:
5d:bd:db:11:6f:c9:3a:bb:58:5e:41:96:c5:f2:f3:85:f6:60:
09:b5:6b:ba:7c:08:27:80:dd:44:f6:d8:ff:24:6c:98:69:27:
ce:a3:98:5b:3f:3c:5d:95:91:5a:4d:ad:16:c4:a1:4c:40:20:
06:72:86:4f:24:1a:97:1f:11:58:ff:be:bb:65:7b:c4:4d:38:
95:c0:3e:0b:be:5b:c7:63:b4:90:15:3e:d5:a9:66:05:48:c3:
f1:b5:1a:3f:c8:cb:a5:76:7c:f4:d1:24:1e:ce:be:6e:ee:e8:
a6:f1:5c:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWgq2VF120ph5WG3fctfrlVYzf3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2QjcxQTRCMDQyODVCQjBFRkVBMTFCNDBCQTc1OUJD
NUZEMUMzODAeFw0yNjAzMTYxMjMxMDdaFw0yNzAzMTUxMjM2MDdaMDMxMTAvBgNV
BAMTKDdEMTE4QzE1QjNCMEQ3REI3RUZFMUVGMkE5RDk4RjlFN0Q1QjJFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3c0kSv0QBu9ayEDuuiYB6lF0
PPZn4voKDVTw6IZaD2+BMz5Sb/tOsqV5mcP5bT2M4HNdzHLg2EJ6YyK19fYWZTZ+
f7iHYhB9zFDXrNO+9tuRjaOZLFa0Y3Npm2HYg93Fef30RE5BPF9QPbVbq5kNkFwj
k1E3PvzFD51ZbqNLj3O6gFkQr40fa2+afaUTuO26yfi4I1NH9E4ynqKCUu/12WmV
4QUrNo0AKM6bV2zPzYeUJRYE4iEeXFzWmhgDZ0o2oPE/DNruzwBmpEr2rOIXEdaS
u6wOt6n1FkVo+MSCC9Ejk0WOeguMoVEfCK17XPYN3L/QcFB1yT8qytUjSFUtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfRGMFbOw19t+/h7yqdmPnn1bLpYwHwYDVR0j
BBgwFoAUzmtxpLBChbsO/qEbQLp1m8X9HDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9DRTZCNzFBNEIwNDI4NUJCMEVGRUExMUI0MEJBNzU5QkM1RkQxQzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNkI3MUE0QjA0Mjg1QkIw
RUZFQTExQjQwQkE3NTlCQzVGRDFDMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGNHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAv
MzQzNTJlMzEzNjM2MmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpsgwDQYJKoZIhvcNAQELBQADggEBAKapFWfR
5tBXCqshVWzkA2evOqLRTTFDTl7j+K/k4esYskJGhyEoXNw4RVbW+s/JhyQ8F7zo
FnCg9vh8CUQy7D9JU5A1UCqdYt0wyG+4vW02Tx7lmhOtsSQllenqCApyy2rFenHS
ddnjKzcpd6rIfltdw9ZcYGEIE4tT7atv7qkVTzWXGQ/KTT8n9iNkLBF8YV292xFv
yTq7WF5BlsXy84X2YAm1a7p8CCeA3UT22P8kbJhpJ86jmFs/PF2VkVpNrRbEoUxA
IAZyhk8kGpcfEVj/vrtle8RNOJXAPgu+W8djtJAVPtWpZgVIw/G1Gj/Iy6V2fPTR
JB7Ovm7u6KbxXHM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:09 2026 by rpki-client