
$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/34352e3232352e31362e302f32322d3234203d3e20323636393230.roa
File: 34352e3232352e31362e302f32322d3234203d3e20323636393230.roa (raw, json)
Hash identifier: ZnxjM3wnsPoeVidij8SQsEI+uhxQBTJRN8kgln+Gko8=
Subject key identifier: AB:34:C8:DC:93:B1:EC:78:47:0D:A2:2F:70:12:22:B1:F6:7A:E5:10
Certificate issuer: /CN=BF58315949907054B5E7AB00ED192423448BF8DF
Certificate serial: 6FB6AB62B2A1E2A478C02218A31B6346BD8FE4F1
Authority key identifier: BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/34352e3232352e31362e302f32322d3234203d3e20323636393230.roa
Signing time: Mon 02 Mar 2026 19:17:48 +0000
ROA not before: Mon 02 Mar 2026 19:12:48 +0000
ROA not after: Mon 01 Mar 2027 19:17:48 +0000
asID: 266920
IP address blocks: 45.225.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl
rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 05:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b6:ab:62:b2:a1:e2:a4:78:c0:22:18:a3:1b:63:46:bd:8f:e4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF58315949907054B5E7AB00ED192423448BF8DF
Validity
Not Before: Mar 2 19:12:48 2026 GMT
Not After : Mar 1 19:17:48 2027 GMT
Subject: CN=AB34C8DC93B1EC78470DA22F701222B1F67AE510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:06:67:6f:e9:c7:af:ac:87:67:61:1d:37:
0a:31:15:00:c8:49:79:56:b5:55:52:48:60:2b:c0:
ca:8b:c1:84:48:9f:d3:df:25:63:61:15:80:8c:7f:
24:18:51:4e:9b:c2:83:90:c3:f4:a8:ad:c0:aa:91:
f1:c7:fe:a8:7b:16:23:f9:6b:1c:80:9e:7f:c1:3f:
4f:05:67:98:a8:ff:4c:3a:f5:70:3e:ee:90:ce:3e:
82:9d:ac:27:ca:7a:d8:5d:8f:02:8c:a1:e4:40:41:
f4:50:db:c0:d3:6d:37:43:c9:3a:56:05:bc:06:e9:
9e:7a:02:f7:39:1b:46:f1:75:5c:97:9b:35:7b:3a:
a8:31:f0:52:7d:21:14:59:e7:95:c5:00:df:3f:23:
85:e6:64:31:6e:80:94:76:8d:77:8f:22:1a:9b:f3:
33:16:44:c9:bc:85:a4:e7:c8:47:1c:c9:68:f9:08:
da:e7:a3:a0:34:27:cd:a6:eb:3f:28:3a:90:7f:1c:
67:09:36:ab:3a:f6:5b:ea:b0:47:f0:18:c4:4c:a2:
18:55:39:09:b2:ea:11:7a:7d:d4:de:b1:22:de:42:
51:ca:69:3a:11:11:d4:f4:08:11:5b:4e:50:a7:4b:
6f:68:e6:bb:41:c4:14:5d:9a:1a:c4:b6:fb:07:31:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:C8:DC:93:B1:EC:78:47:0D:A2:2F:70:12:22:B1:F6:7A:E5:10
X509v3 Authority Key Identifier:
keyid:BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/34352e3232352e31362e302f32322d3234203d3e20323636393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.16.0/22
Signature Algorithm: sha256WithRSAEncryption
75:70:5e:37:48:44:ec:70:c3:4e:88:5b:90:ac:da:8b:8a:b0:
94:32:8f:16:30:9a:f6:9b:40:31:62:e4:82:cc:a0:32:46:a1:
cd:64:98:01:1a:1e:42:e7:a4:93:c1:cf:aa:c8:f4:9f:82:e1:
ab:86:39:84:b4:4a:f3:91:af:e9:51:ed:15:52:20:37:6f:7c:
11:27:19:51:ab:c6:c7:ba:95:8b:a5:73:2c:5f:4c:51:f8:f6:
f1:f2:87:bf:9a:ab:f3:bb:1a:6e:2d:09:fa:a0:1a:9c:fe:25:
72:c3:1e:02:6d:00:f3:6b:88:bf:f5:83:e8:77:5e:0a:36:49:
c5:69:25:df:cb:37:42:68:42:5e:61:71:52:6e:c6:2e:a5:28:
a1:b0:fb:81:20:35:c5:4f:77:d0:73:e9:ac:09:46:5d:85:df:
db:62:5a:3c:8b:17:ec:be:7f:ba:6d:74:50:cb:2f:66:b5:70:
cd:41:ad:79:1c:e2:36:9f:e9:8f:24:b2:38:be:ee:75:a4:cb:
0c:7c:6c:e4:1d:3f:a5:88:40:39:38:12:65:7c:1e:52:f5:ac:
27:80:0a:36:42:3a:d6:54:9f:92:df:b4:1d:d8:71:1e:88:20:
92:07:bf:55:47:63:fd:77:ba:19:9f:40:d0:9c:71:fb:5c:65:
ff:2a:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:34:28 2026 by rpki-client