
$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
File: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (raw, json)
Hash identifier: C4luBKFLpt/AxKj4LeuNKUIt1Gx1K/ckGbksOyY3xd8=
Subject key identifier: 97:43:F2:33:61:D2:58:6C:FB:FC:20:74:16:F4:37:54:BC:7A:FF:E1
Certificate issuer: /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial: 35762529D995383F891950CC56F7BB9C205D7E2D
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
Signing time: Mon 27 Apr 2026 14:00:27 +0000
ROA not before: Mon 27 Apr 2026 13:55:27 +0000
ROA not after: Mon 26 Apr 2027 14:00:27 +0000
asID: 268668
IP address blocks: 45.164.220.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 07:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:76:25:29:d9:95:38:3f:89:19:50:cc:56:f7:bb:9c:20:5d:7e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FF3BD981631E49037509A952007559286688690
Validity
Not Before: Apr 27 13:55:27 2026 GMT
Not After : Apr 26 14:00:27 2027 GMT
Subject: CN=9743F23361D2586CFBFC207416F43754BC7AFFE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:c9:fb:5b:3b:a2:d7:20:d2:d0:21:b1:fa:
26:cb:5f:bf:b0:49:b0:b7:a7:75:fc:e7:b2:0a:85:
e2:71:06:d1:7a:b4:5e:3d:bd:04:08:8c:77:48:5a:
a5:d9:69:38:5c:ff:ad:3a:38:4b:ac:81:58:28:1b:
f3:91:c8:db:d2:7a:89:04:fb:34:d0:54:1d:ef:b8:
05:a3:ad:0b:26:d5:02:3e:a6:cf:e4:8c:2a:a7:75:
00:59:a2:fc:10:5c:c1:6a:ad:90:f5:83:48:19:31:
b9:ad:33:0e:3a:49:60:4a:8b:ad:ab:61:a6:b3:fd:
7c:4c:f5:7d:5b:c0:4d:9d:ed:aa:e7:d6:2a:ba:bc:
68:7b:52:8f:05:fb:84:06:bf:fc:4e:b6:17:fc:81:
9c:be:0e:c2:a9:88:8b:81:87:01:39:d0:50:cf:6a:
b8:ae:2a:87:06:2f:de:12:ce:5c:96:86:82:6a:ba:
1c:27:29:45:ab:ba:4f:a9:25:a9:a2:f7:ad:49:fb:
cd:6a:33:42:c5:c3:18:8f:a9:98:03:e1:d6:05:cc:
ac:d8:53:d8:f1:69:55:4a:b7:90:43:06:af:0e:62:
4c:63:28:c1:da:e3:26:0e:f0:bf:dd:f7:e8:48:c1:
76:21:ca:d1:2a:72:70:c6:fa:ae:a0:c6:c4:7d:c3:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:F2:33:61:D2:58:6C:FB:FC:20:74:16:F4:37:54:BC:7A:FF:E1
X509v3 Authority Key Identifier:
keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e9:da:74:5d:d2:a3:34:d9:dd:a2:0d:cc:09:0e:b2:6f:17:
02:78:55:64:3d:a4:cc:09:66:50:53:2f:80:93:25:6c:3e:75:
89:43:0c:83:28:61:ee:8b:20:13:92:17:af:38:ca:e2:23:cd:
07:92:f9:0d:a2:74:9f:83:8b:2d:a5:a9:0c:eb:92:c1:81:32:
71:10:69:a6:fd:6b:88:36:86:d9:b6:8d:ad:ce:ad:06:e2:3e:
ab:6b:63:12:d6:1d:89:a6:64:c0:17:b1:6a:5c:53:9b:7e:71:
69:00:73:9b:a3:8e:74:58:20:01:08:1f:9d:52:a6:ed:52:28:
45:37:e8:94:c5:f8:b6:df:ba:dd:22:62:df:de:96:90:66:29:
43:d2:bc:8c:b6:84:06:9f:6d:5d:8b:31:7c:92:e4:2f:9a:1f:
2d:66:6b:88:70:af:5e:51:ff:79:c9:af:bf:37:af:a1:6b:bd:
66:c2:f7:24:78:aa:81:24:c6:be:2c:a0:90:ad:a0:3d:36:39:
00:7c:54:ee:18:65:0f:48:be:68:ac:9e:e0:6a:1e:e2:ba:9b:
d0:49:03:77:d8:e4:17:13:c1:76:90:1b:25:da:2c:a4:b0:2d:
a8:16:b3:11:ae:55:cd:c1:92:a9:e8:29:e4:80:4f:f8:73:bb:
0b:dd:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:21:13 2026 by rpki-client