
$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3332203d3e20323638323632.roa
File: 34352e3233372e32342e302f32332d3332203d3e20323638323632.roa (raw, json)
Hash identifier: vArVfhgGT8R3/jx9frBmP+FJTOy42OB4PQrNLGQ5JQY=
Subject key identifier: 38:66:CD:51:23:FD:29:B7:A3:07:C2:8A:EA:0A:45:49:87:C0:86:33
Certificate issuer: /CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B
Certificate serial: 51D969F8C590F84A14591296CF912110AF8833E0
Authority key identifier: 72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3332203d3e20323638323632.roa
Signing time: Mon 23 Mar 2026 13:40:04 +0000
ROA not before: Mon 23 Mar 2026 13:35:04 +0000
ROA not after: Mon 22 Mar 2027 13:40:04 +0000
asID: 268262
IP address blocks: 45.237.24.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl
rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 15:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d9:69:f8:c5:90:f8:4a:14:59:12:96:cf:91:21:10:af:88:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B
Validity
Not Before: Mar 23 13:35:04 2026 GMT
Not After : Mar 22 13:40:04 2027 GMT
Subject: CN=3866CD5123FD29B7A307C28AEA0A454987C08633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:6a:13:c8:90:1b:d3:e2:75:2f:05:27:68:
de:f5:b0:4f:45:d8:27:1d:53:69:91:0d:cc:83:19:
2a:a0:bd:f1:b8:a8:55:ac:68:4d:64:89:4d:21:72:
d4:a0:fa:b2:66:05:a6:6d:9e:81:8a:3b:bd:b4:2a:
d2:02:2f:8c:49:ba:73:0d:63:c1:3b:5c:15:a0:76:
56:cf:38:2f:95:57:cc:3b:24:0e:62:44:03:43:e7:
7c:8a:44:2a:1e:df:b6:b0:6f:c3:e7:34:f4:85:3c:
73:27:26:a7:52:da:ed:c3:0d:54:65:d9:f1:88:44:
93:8b:bf:ac:c3:f8:3a:e1:6e:1e:db:96:26:ed:b0:
d5:b3:5a:b9:53:fb:7d:bf:0c:f1:8d:f2:02:28:84:
bd:3a:fe:07:a5:a0:b4:ea:e6:60:5c:c2:b1:84:ba:
d2:5e:d0:d4:ce:f6:61:90:51:98:f3:f2:a3:51:38:
75:e7:32:d6:c8:41:da:a8:a1:80:d4:0f:1a:06:4e:
56:c4:06:ec:49:42:05:e3:7e:9c:c0:fd:09:24:2a:
11:6d:19:c7:a9:77:b3:d6:6f:48:39:2b:ac:ed:83:
5c:83:fe:fd:46:ef:31:6e:7a:1a:3a:81:81:d1:ea:
c2:f6:64:a9:ad:b5:13:8f:47:3c:72:a1:e6:d7:4d:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:CD:51:23:FD:29:B7:A3:07:C2:8A:EA:0A:45:49:87:C0:86:33
X509v3 Authority Key Identifier:
keyid:72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32332d3332203d3e20323638323632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:65:4b:44:93:8c:b4:ac:74:e1:7f:df:0c:d3:95:94:7b:b9:
df:4b:ba:60:b5:cd:28:ce:e7:cb:dd:23:05:e8:98:14:89:13:
56:b1:53:3e:40:a8:2a:10:d8:aa:07:9f:2d:58:02:6e:d6:bc:
68:0c:6a:6f:b1:37:22:0f:36:d6:49:48:0f:b5:c5:a7:c1:37:
09:0a:49:95:cd:9e:3c:da:0e:09:01:38:52:c0:74:86:99:79:
97:87:01:05:56:78:9d:48:46:72:ec:48:f7:08:e9:86:e2:11:
df:b8:f6:bb:f5:37:bd:78:dc:71:08:14:ed:cf:68:0b:fb:73:
40:97:bd:81:b8:cc:75:02:58:45:ec:2a:31:5c:37:8d:ca:e6:
99:ab:e9:68:10:9d:d1:11:5d:64:d0:c3:45:6c:c1:c7:70:99:
f6:ea:c8:e5:f1:be:6c:c3:f9:7f:cc:23:4c:fc:4e:fb:3b:7e:
8a:4e:e4:a0:d9:26:e1:b4:ff:e5:fe:44:7f:34:8c:79:25:2f:
c4:7d:39:2a:79:78:59:db:bc:0c:6d:ec:6c:17:52:ff:5f:44:
8d:50:08:24:50:ae:38:f1:16:6c:0e:2f:81:b5:52:73:e6:99:
c4:64:38:bf:d3:b6:fa:61:ca:8e:40:d7:5b:03:42:29:60:7a:
68:3b:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:45 2026 by rpki-client