
$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/34352e37312e3232302e302f32322d3234203d3e20323637363433.roa
File: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (raw, json)
Hash identifier: ARu+HiBlwjs5SJVY+5C32MR/FZIMOGcccntV0yboejc=
Subject key identifier: 44:47:10:8C:21:BB:D3:86:B8:5D:C6:2B:03:1E:9B:9F:CE:EA:0F:B4
Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial: 3498E1FA7CE1752DFFD2A069FAADFFB1D2611183
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/34352e37312e3232302e302f32322d3234203d3e20323637363433.roa
Signing time: Wed 06 May 2026 19:09:23 +0000
ROA not before: Wed 06 May 2026 19:04:23 +0000
ROA not after: Wed 05 May 2027 19:09:23 +0000
asID: 267643
IP address blocks: 45.71.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 01:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:98:e1:fa:7c:e1:75:2d:ff:d2:a0:69:fa:ad:ff:b1:d2:61:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Validity
Not Before: May 6 19:04:23 2026 GMT
Not After : May 5 19:09:23 2027 GMT
Subject: CN=4447108C21BBD386B85DC62B031E9B9FCEEA0FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:11:9c:13:1a:d0:de:e1:04:cb:88:bd:58:c7:
29:e6:fd:83:b4:c5:3c:8a:06:0d:c4:14:8a:7d:36:
cf:6a:d6:74:f6:b7:e3:20:43:98:86:81:04:1d:58:
c7:7a:39:5c:77:93:71:4c:bd:88:60:4e:3f:7c:5d:
03:cf:98:c9:23:65:bc:04:54:ab:78:2c:08:11:e2:
c5:f9:23:15:d9:c0:4d:df:37:c2:a2:1a:4f:b7:c8:
0e:0e:0a:31:30:db:14:2b:49:84:b3:06:db:49:b3:
88:2c:0f:83:b6:5a:85:2b:cc:87:11:87:7c:7a:31:
5b:81:48:14:be:0f:6a:42:c9:c7:44:f8:72:af:75:
2b:39:19:97:0d:0e:96:dd:fa:af:55:11:27:6a:c9:
8d:2b:e6:fa:ac:ac:b7:84:88:0e:5a:08:c0:90:dc:
04:b6:b0:22:2b:b8:21:10:b6:a6:c1:4f:d4:8b:90:
af:9c:11:f1:ef:27:d8:14:7e:06:8a:ae:3b:19:ef:
64:d2:a0:8c:96:4f:ed:a7:04:73:75:3f:d7:2e:61:
7f:6b:c6:1f:a2:87:67:89:bd:6f:b8:23:55:4b:44:
65:73:5d:a5:03:33:5e:a4:e1:3e:1d:cd:0b:1d:d9:
94:36:47:6d:b6:19:50:38:d5:33:69:19:be:fb:70:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:10:8C:21:BB:D3:86:B8:5D:C6:2B:03:1E:9B:9F:CE:EA:0F:B4
X509v3 Authority Key Identifier:
keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/34352e37312e3232302e302f32322d3234203d3e20323637363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:5f:cf:90:4d:39:19:17:90:9d:2e:60:89:37:bb:1f:99:0f:
7e:fa:68:53:fc:51:4a:5e:12:7c:cb:0e:91:43:d8:f1:41:e2:
8f:be:53:41:b3:de:09:28:ae:d8:37:29:be:69:6c:f0:99:ad:
7c:0e:f6:93:5c:59:d4:ed:65:e4:e9:f0:70:11:5a:d7:7a:3c:
c1:ec:65:5d:70:22:f2:75:f5:00:b6:d0:61:cc:52:bc:86:93:
68:65:3d:18:16:80:d0:ce:55:0d:d4:7c:f0:08:79:68:19:1c:
1b:26:6e:61:69:3d:9a:7c:cb:e4:c7:3a:28:09:38:b7:a8:80:
46:3e:2b:11:63:ae:c4:67:db:7a:7d:7b:01:5f:fa:17:02:7c:
10:2f:bc:01:b6:a4:b9:5e:db:43:74:52:43:d8:4f:c9:d5:20:
ca:f2:81:00:f4:7c:e0:c2:a3:65:ee:28:d5:28:bf:ee:15:14:
09:b4:98:cf:65:23:17:8f:56:08:fd:e5:62:bc:b9:b2:d3:f1:
60:20:d7:0e:7d:b6:2f:49:db:37:e8:23:47:0e:f6:ac:e4:aa:
52:1a:13:a2:aa:11:d4:a5:f2:d6:f3:b5:13:1f:a4:30:91:3e:
37:c0:86:6f:c6:fb:e0:a9:db:87:9f:68:00:5b:a7:84:aa:5b:
f2:ec:4a:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNJjh+nzhdS3/0qBp+q3/sdJhEYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE
OUZBOEJEQjAeFw0yNjA1MDYxOTA0MjNaFw0yNzA1MDUxOTA5MjNaMDMxMTAvBgNV
BAMTKDQ0NDcxMDhDMjFCQkQzODZCODVEQzYyQjAzMUU5QjlGQ0VFQTBGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrEZwTGtDe4QTLiL1Yxynm/YO0
xTyKBg3EFIp9Ns9q1nT2t+MgQ5iGgQQdWMd6OVx3k3FMvYhgTj98XQPPmMkjZbwE
VKt4LAgR4sX5IxXZwE3fN8KiGk+3yA4OCjEw2xQrSYSzBttJs4gsD4O2WoUrzIcR
h3x6MVuBSBS+D2pCycdE+HKvdSs5GZcNDpbd+q9VESdqyY0r5vqsrLeEiA5aCMCQ
3AS2sCIruCEQtqbBT9SLkK+cEfHvJ9gUfgaKrjsZ72TSoIyWT+2nBHN1P9cuYX9r
xh+ih2eJvW+4I1VLRGVzXaUDM16k4T4dzQsd2ZQ2R222GVA41TNpGb77cNd9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUREcQjCG704a4XcYrAx6bn87qD7QwHwYDVR0j
BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv
dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD
NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MzQzR0N21KWFczWUZZcFpIQ05iZUY5d1I5enVuRWZ6bTV0MjNCQUxYb3ZiLzEv
MzQzNTJlMzczMTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUfcMA0GCSqGSIb3DQEBCwUAA4IBAQAsX8+QTTkZ
F5CdLmCJN7sfmQ9++mhT/FFKXhJ8yw6RQ9jxQeKPvlNBs94JKK7YNym+aWzwma18
DvaTXFnU7WXk6fBwEVrXejzB7GVdcCLydfUAttBhzFK8hpNoZT0YFoDQzlUN1Hzw
CHloGRwbJm5haT2afMvkxzooCTi3qIBGPisRY67EZ9t6fXsBX/oXAnwQL7wBtqS5
XttDdFJD2E/J1SDK8oEA9HzgwqNl7ijVKL/uFRQJtJjPZSMXj1YI/eVivLmy0/Fg
INcOfbYvSds36CNHDvas5KpSGhOiqhHUpfLW87UTH6QwkT43wIZvxvvgqduHn2gA
W6eEqlvy7Epi
-----END CERTIFICATE-----
Generated at Wed May 13 17:51:40 2026 by rpki-client