
$ rpki-client -vvf rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/34352e3137352e36302e302f32322d3234203d3e20323638383835.roa
File: 34352e3137352e36302e302f32322d3234203d3e20323638383835.roa (raw, json)
Hash identifier: xxZaVnQXq7k+W19sDrh8ZrubAHqKwDgk822shAw9MvI=
Subject key identifier: 83:68:9B:E8:43:76:A6:E6:06:6A:CB:EF:02:AA:6B:89:55:F2:36:73
Certificate issuer: /CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
Certificate serial: 702198960E8A13BC259465BF15686CFC3ACE42E3
Authority key identifier: FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/34352e3137352e36302e302f32322d3234203d3e20323638383835.roa
Signing time: Thu 26 Mar 2026 12:55:23 +0000
ROA not before: Thu 26 Mar 2026 12:50:23 +0000
ROA not after: Thu 25 Mar 2027 12:55:23 +0000
asID: 268885
IP address blocks: 45.175.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl
rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:21:98:96:0e:8a:13:bc:25:94:65:bf:15:68:6c:fc:3a:ce:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAA3CA7253FF7DA2F25A4D4C953367E9662154DD
Validity
Not Before: Mar 26 12:50:23 2026 GMT
Not After : Mar 25 12:55:23 2027 GMT
Subject: CN=83689BE84376A6E6066ACBEF02AA6B8955F23673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:a9:45:df:30:e6:d9:5c:a1:43:17:b4:57:
0b:0d:bb:af:79:ab:5b:9c:73:c4:fb:81:2c:fd:94:
77:fb:31:5f:14:6d:08:e5:bb:d0:72:b7:9b:42:99:
16:de:c1:e5:b3:ca:a6:2a:85:1c:39:5d:b8:1f:76:
43:b5:cb:59:f3:a0:dc:13:2f:81:dd:da:06:1d:f9:
ed:80:2c:b6:11:a7:6a:42:30:62:de:f8:dd:01:3e:
e5:ca:55:df:94:f2:f0:33:cd:61:07:ab:b2:d9:f9:
e0:c5:f1:ea:15:e6:04:44:06:57:7d:1e:35:d2:25:
1c:6e:b8:66:7d:ce:c7:96:33:20:17:ca:69:72:e9:
d8:8e:96:4a:a7:4a:6c:ab:8a:c3:9a:f8:8e:f3:a7:
48:cf:fe:a3:cd:05:13:44:ae:c7:57:56:26:71:eb:
3a:c4:70:6a:26:dd:f8:6a:51:52:2b:81:f6:45:4a:
89:97:33:77:3e:67:79:52:c4:ad:b2:ca:8f:b4:d6:
63:14:d2:d4:8e:cf:1e:8e:68:d4:c1:7e:4a:0b:44:
5c:a5:09:3d:44:8c:b0:96:b8:f0:e8:88:0e:3a:50:
9e:0a:b6:36:10:be:04:4b:a5:41:c0:98:06:da:ec:
38:c1:da:92:d0:ae:c7:0c:52:e6:52:40:f3:6f:c5:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:9B:E8:43:76:A6:E6:06:6A:CB:EF:02:AA:6B:89:55:F2:36:73
X509v3 Authority Key Identifier:
keyid:FA:A3:CA:72:53:FF:7D:A2:F2:5A:4D:4C:95:33:67:E9:66:21:54:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA3CA7253FF7DA2F25A4D4C953367E9662154DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRQft5eS3acTCS4kKrMXMBcEpHTjkSiYrAd82k6T2jnq/0/34352e3137352e36302e302f32322d3234203d3e20323638383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e5:b9:99:72:1f:93:c0:04:2f:37:9f:bc:8b:4e:87:b8:80:
4a:ea:2a:69:35:7e:19:fd:8a:5d:73:b4:95:1b:1b:02:e8:90:
f5:77:47:f2:af:2d:9f:c6:27:e7:1a:40:46:a7:0b:8e:d2:7f:
33:e0:1b:b4:53:c9:0a:d2:97:af:ae:a9:4e:db:43:10:0d:cd:
0b:bf:fa:d1:32:5b:ab:94:5b:d3:ce:89:f3:28:c9:df:98:54:
6a:9e:be:8e:e5:9d:b5:e2:76:fc:e3:15:e4:6d:51:d5:c6:8c:
86:3c:54:cb:4a:40:92:b0:8e:b1:a4:fa:68:2a:69:35:11:1c:
44:a2:e3:64:9d:92:82:b1:82:84:56:1c:36:9b:70:16:ae:a4:
5c:69:d2:bf:2d:3a:e9:16:c8:30:c2:16:f3:84:45:26:55:51:
74:3f:14:be:fa:f8:70:fb:57:75:d3:1d:5d:81:05:41:e1:fd:
2c:2b:94:88:fd:4f:58:2d:e4:c6:87:8d:e4:9e:48:59:cb:8b:
4d:cb:23:ab:6d:d5:6d:d5:c4:e4:9a:17:95:c5:ec:df:bd:8e:
59:1e:92:d4:ea:db:f4:40:aa:98:8f:3f:0e:56:ae:13:93:ed:
7c:d8:17:b3:2f:15:a0:ae:80:7c:36:9e:4c:23:13:03:d6:95:
e1:8c:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:57:39 2026 by rpki-client