
$ rpki-client -vvvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3137322e39362e302f32322d3234203d3e20323033.roa
File: 34352e3137322e39362e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier: j//spBABASme2/rwYwxB3SISK/N6EANQTSAMudQVmlo=
Subject key identifier: 47:77:3F:6C:CD:76:16:EE:C7:14:D1:27:90:FA:56:F4:1E:38:53:BB
Certificate issuer: /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial: 0A69FE1DE7CCBA4C2EA1218AECBE83A145C5BC98
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3137322e39362e302f32322d3234203d3e20323033.roa
Signing time: Fri 11 Sep 2026 13:53:49 +0000
ROA not before: Fri 11 Sep 2026 13:48:49 +0000
ROA not after: Fri 10 Sep 2027 13:53:49 +0000
asID: 203
IP address blocks: 45.172.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Sep 2026 04:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:69:fe:1d:e7:cc:ba:4c:2e:a1:21:8a:ec:be:83:a1:45:c5:bc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Validity
Not Before: Sep 11 13:48:49 2026 GMT
Not After : Sep 10 13:53:49 2027 GMT
Subject: CN=47773F6CCD7616EEC714D12790FA56F41E3853BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:81:d4:da:d9:a4:69:04:56:9c:12:89:f7:
60:0f:30:57:e8:98:7a:d5:a2:77:5f:14:7a:4d:10:
2d:8a:90:61:94:6b:7b:22:a4:9f:db:c5:a9:57:ad:
25:c6:33:22:e2:e9:3c:84:0f:9b:b4:f2:df:dd:15:
bb:43:ac:3d:c9:3e:60:2c:74:ce:89:4f:34:dc:97:
79:6f:1e:8c:0d:34:9a:92:5a:06:fb:b9:31:91:82:
81:78:08:bd:c0:08:bc:57:93:da:98:99:0f:a8:d7:
f0:02:36:60:0d:8a:30:68:94:07:71:9c:94:57:ae:
09:72:04:fb:a4:b3:e6:9e:8a:eb:1a:5d:65:a7:3c:
f8:d3:4d:e6:d5:de:d2:17:ca:e3:32:aa:3f:23:5c:
07:18:32:06:26:3b:23:77:99:52:52:32:57:91:6e:
a5:22:2e:fd:a4:79:39:1d:48:c9:c8:57:4b:77:ca:
ae:a1:a2:4a:7d:bb:9b:c3:1f:3b:e6:5a:7b:a7:bd:
d3:9c:aa:1b:95:7d:39:02:4a:a6:0e:15:97:07:dc:
db:9e:3f:e6:98:f9:b1:56:dc:b5:04:c2:b7:ad:68:
e6:2f:86:19:53:37:3e:c4:b7:a4:2c:6f:bb:d8:ab:
0b:04:9b:c2:d5:33:dd:f0:76:47:cc:f6:37:62:66:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:3F:6C:CD:76:16:EE:C7:14:D1:27:90:FA:56:F4:1E:38:53:BB
X509v3 Authority Key Identifier:
keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3137322e39362e302f32322d3234203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.96.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ec:a2:b0:d8:e2:eb:74:e0:f0:68:e5:76:bd:70:46:8a:8d:
d4:6f:10:5a:5d:ab:09:74:63:dc:e5:b2:90:72:a7:bd:04:4e:
2b:9e:94:02:1a:98:f6:76:4b:4c:bd:a1:41:d0:a8:a7:b1:80:
57:82:dc:4a:3a:be:a1:26:db:bf:aa:14:75:f3:27:ab:4d:1c:
91:43:27:37:06:74:40:7c:e9:46:ea:04:2b:0b:26:12:ec:c8:
cb:8f:12:f1:e2:1b:58:ce:3e:e5:4d:34:fb:d3:b1:d1:2c:0c:
42:b1:8b:b4:4c:b8:d9:04:4d:0f:a8:cc:7c:75:87:50:42:7d:
69:7e:79:2c:76:bb:f5:7e:21:7f:6a:74:03:38:6a:48:e4:4f:
f9:27:0e:35:ec:e6:4a:26:1f:d6:10:81:7a:43:fa:e8:e9:95:
09:24:94:0b:3c:76:31:40:34:da:9c:a8:e8:60:03:44:4e:5c:
9b:a0:b4:d2:34:6f:cc:87:84:a7:b5:86:fb:a4:70:5c:21:cd:
7c:e6:b2:64:59:56:10:68:e3:77:e2:c7:f8:dc:08:f1:6b:c3:
0c:a1:79:4b:4c:c2:d1:c1:f8:49:ce:3e:d3:e3:9b:9f:cc:13:
9d:ae:3e:c2:c8:c4:45:14:0f:ff:e8:7c:68:08:92:73:5d:3f:
68:c2:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:56:49 2026 by rpki-client