
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e3137312e3134382e302f32322d3234203d3e203532383932.roa
File: 34352e3137312e3134382e302f32322d3234203d3e203532383932.roa (raw, json)
Hash identifier: StxdXxYydud6KrcQXXUgkAfVI/3sML6gyXSHv9r2r1Y=
Subject key identifier: 8B:5E:72:29:C6:60:5A:60:B6:C0:91:49:B0:A3:6E:08:BF:25:3C:51
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 6C6BADD1CF49D3740D4003B02BFBDD9AD157F5AD
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e3137312e3134382e302f32322d3234203d3e203532383932.roa
Signing time: Tue 21 Apr 2026 04:38:04 +0000
ROA not before: Tue 21 Apr 2026 04:33:04 +0000
ROA not after: Tue 20 Apr 2027 04:38:04 +0000
asID: 52892
IP address blocks: 45.171.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 18:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:6b:ad:d1:cf:49:d3:74:0d:40:03:b0:2b:fb:dd:9a:d1:57:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Apr 21 04:33:04 2026 GMT
Not After : Apr 20 04:38:04 2027 GMT
Subject: CN=8B5E7229C6605A60B6C09149B0A36E08BF253C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:f0:a9:86:1b:6d:66:39:32:aa:a4:dc:a3:
9b:ba:79:e2:33:be:d6:fd:c5:a1:bb:93:9f:24:c5:
e1:01:c2:d8:95:6c:97:54:cb:e6:62:55:51:ad:b4:
78:84:41:a7:1a:8b:24:3a:93:3a:cc:69:96:6c:59:
c2:43:cc:31:6e:b8:2c:8c:d1:0f:8d:5d:19:64:10:
3b:0a:40:c9:f2:a2:29:91:e4:99:4b:42:b7:1d:fb:
72:be:19:a1:d0:db:42:fe:a3:57:c5:b8:d3:94:83:
f7:93:04:86:06:3f:ba:6f:9c:6c:9f:e8:eb:2b:c3:
c1:f0:29:ef:29:ed:02:8b:d6:09:a7:d6:4c:e9:5d:
7c:c7:b4:d1:39:74:f3:f0:af:f2:ef:97:96:11:e5:
66:16:e0:b6:dd:eb:00:1a:0e:2f:45:eb:61:32:38:
b3:1d:0d:e0:65:73:c7:91:fd:e4:1a:4a:2b:bf:87:
aa:9a:0e:88:5b:ff:21:d9:07:43:b5:bc:be:6b:98:
2c:a8:df:3d:e8:7b:3d:5c:00:65:97:bb:d1:f3:c9:
59:86:93:72:37:eb:2a:6e:d8:71:e1:c7:93:8a:47:
27:f2:ac:c0:3b:f1:f2:e5:61:b0:72:49:e5:23:c6:
63:b4:53:e2:5b:81:64:89:71:54:09:15:20:14:ed:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:72:29:C6:60:5A:60:B6:C0:91:49:B0:A3:6E:08:BF:25:3C:51
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/34352e3137312e3134382e302f32322d3234203d3e203532383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.148.0/22
Signature Algorithm: sha256WithRSAEncryption
72:6d:e5:08:a8:4a:17:26:65:33:7e:39:b0:16:23:4e:04:84:
57:77:59:50:24:41:41:13:e8:31:5a:75:27:9f:6c:f4:dd:89:
3c:96:77:9a:5b:51:4f:3c:d9:82:28:b2:d1:b3:e6:20:27:9c:
c7:6f:7a:92:df:39:f2:0c:5b:6e:5f:e1:03:e0:d0:0a:08:6e:
b9:0b:e7:0c:84:26:c4:60:53:9a:09:f4:fe:5b:b4:e7:ed:e7:
e6:c1:87:a7:72:b7:e5:e3:19:5d:34:ed:a7:91:b1:09:70:ea:
88:03:61:a2:ca:22:80:44:1c:c0:e8:11:ab:8d:99:6c:69:ac:
cc:20:b2:b7:14:7c:db:0c:26:c7:37:84:37:74:38:ce:50:64:
28:5d:b0:bb:e9:40:ab:e5:57:cc:e9:a0:8f:66:5c:10:ee:3a:
05:5d:7f:16:38:25:a1:b8:36:b7:5a:33:aa:f0:34:70:b0:01:
1e:a4:c3:af:04:f0:27:8a:79:38:6c:0b:5c:b4:6f:59:74:e2:
95:4e:7b:fd:95:2f:b1:c5:d6:31:16:98:9d:6d:d6:f2:52:71:
b3:38:c5:fb:a0:bf:43:81:f2:25:39:b3:fd:76:1b:87:ff:f7:
b3:65:92:0e:4e:0a:59:69:ac:49:f6:a2:bd:f7:e2:0d:ea:fe:
a5:85:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:55 2026 by rpki-client