
$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
File: 34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier: LtH1npRubJPfCD0dTFJ+QL7XZclFrlUXK5wIhF1zuXo=
Subject key identifier: 80:E2:6A:67:7E:71:8A:D2:86:2E:C2:41:32:19:5A:85:9A:C2:26:A5
Certificate issuer: /CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
Certificate serial: 1C97BAA42BBDD9475EBD00E4013DF84E4A2F3586
Authority key identifier: E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
Signing time: Thu 12 Mar 2026 17:24:22 +0000
ROA not before: Thu 12 Mar 2026 17:19:22 +0000
ROA not after: Thu 11 Mar 2027 17:24:22 +0000
asID: 269096
IP address blocks: 45.175.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl
rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:97:ba:a4:2b:bd:d9:47:5e:bd:00:e4:01:3d:f8:4e:4a:2f:35:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
Validity
Not Before: Mar 12 17:19:22 2026 GMT
Not After : Mar 11 17:24:22 2027 GMT
Subject: CN=80E26A677E718AD2862EC24132195A859AC226A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:d3:6d:d2:9f:d8:e2:c7:fa:2f:18:f0:35:
bf:6a:a9:be:09:16:2c:2a:c1:17:4e:be:e5:b4:fb:
8c:86:20:8d:1a:ad:ac:98:82:ce:4c:99:e0:77:be:
97:b8:07:8e:ad:97:de:4d:8d:56:bb:56:ad:a7:1d:
6d:31:3b:01:ad:da:7e:ac:54:79:6a:ec:b7:d2:f7:
05:cc:a7:26:5d:68:34:61:53:42:d6:98:32:fd:04:
ed:6b:b6:e1:f2:f4:17:58:0b:58:bd:3a:e1:63:91:
0b:ea:c6:b6:d4:16:73:8c:11:ab:74:ec:20:be:3e:
88:f5:73:11:f1:68:81:97:83:f0:d4:2c:67:55:04:
77:0f:31:59:40:ca:3d:6d:ce:86:28:77:cf:16:00:
2e:84:f1:eb:bd:40:b2:ab:77:1e:0f:40:0e:9e:8c:
8f:66:29:e4:a5:f3:51:c7:a3:9f:24:54:bb:07:76:
6d:76:04:06:5c:36:b8:e6:2b:48:50:17:25:f7:14:
a7:83:3e:fb:36:13:3c:98:3c:e4:02:2c:06:58:9a:
32:ae:3b:ef:79:18:3e:85:02:6f:74:58:62:3d:d0:
6d:97:c6:2d:51:3a:c2:4f:6f:d9:77:8b:c9:ca:ec:
a2:b6:99:e2:2e:15:4e:ef:4d:a0:31:43:85:ca:b4:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E2:6A:67:7E:71:8A:D2:86:2E:C2:41:32:19:5A:85:9A:C2:26:A5
X509v3 Authority Key Identifier:
keyid:E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.248.0/22
Signature Algorithm: sha256WithRSAEncryption
37:61:89:d4:b5:40:9f:cd:e3:d6:00:70:67:1b:7b:29:db:04:
cf:c7:7f:fe:af:36:48:51:2f:3f:eb:91:59:d8:8c:da:94:3c:
fb:41:23:8e:9a:41:15:c9:5e:1c:76:a3:c4:2f:71:a9:9e:20:
60:c0:84:21:92:6e:17:48:9b:55:4f:f6:54:0e:03:7f:72:66:
16:e7:5f:ff:dc:a2:54:33:c7:af:cb:18:e5:e7:cf:77:fb:92:
0f:88:24:a6:39:a5:e8:0b:20:e4:d6:e4:91:ff:88:3e:5b:7f:
e2:b0:a3:4c:a3:86:5a:d4:05:51:94:b6:76:7a:21:d7:9e:e6:
39:14:db:ba:e6:03:66:8b:65:d7:cb:34:ed:88:4b:b2:9b:43:
be:f1:d0:e6:2f:29:e3:b2:85:f4:04:56:fe:42:8a:85:3f:ce:
77:61:a8:72:88:45:68:95:59:e1:69:71:09:43:c6:93:a7:b4:
f1:48:a9:96:86:2f:0a:9f:70:22:de:ad:fa:82:78:d6:de:77:
60:6e:ad:0e:cb:3c:d1:4f:17:c1:7d:fd:13:4b:dc:01:e5:f9:
82:fa:06:0a:cb:62:a4:82:5b:95:4c:c1:29:df:2d:94:c7:b6:
19:6c:80:ef:0f:92:e9:b3:3a:d4:55:c6:a7:f2:8f:8b:f7:00:
83:1f:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:32 2026 by rpki-client