
$ rpki-client -vvf rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa
File: 34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa (raw, json)
Hash identifier: ISeRK1FWIx5z8dIgaTS3diy3PwlzLJ8QR9PKV8/8RZY=
Subject key identifier: CB:87:4C:28:FA:B5:21:A5:37:6A:B2:EB:8A:F0:13:18:7B:AD:D8:B8
Certificate issuer: /CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3
Certificate serial: 10B986EE249C1DF5A1987FA300C21DE4D03AF293
Authority key identifier: CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa
Signing time: Fri 13 Mar 2026 22:22:42 +0000
ROA not before: Fri 13 Mar 2026 22:17:42 +0000
ROA not after: Fri 12 Mar 2027 22:22:42 +0000
asID: 268196
IP address blocks: 45.235.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl
rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 10:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b9:86:ee:24:9c:1d:f5:a1:98:7f:a3:00:c2:1d:e4:d0:3a:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3
Validity
Not Before: Mar 13 22:17:42 2026 GMT
Not After : Mar 12 22:22:42 2027 GMT
Subject: CN=CB874C28FAB521A5376AB2EB8AF013187BADD8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:36:b9:d2:34:d4:c4:66:d5:93:06:e8:70:
ae:f0:81:e0:66:98:bd:80:5a:0a:c1:b2:45:8a:a1:
f0:46:73:a8:3c:42:56:31:b3:0b:b7:ed:ec:9a:fd:
0d:28:d6:bb:fe:ca:86:fa:3b:ec:a7:16:f9:3b:62:
b5:d5:f1:d1:77:75:3b:be:b2:65:0e:bc:d0:57:6e:
ba:e1:d4:94:aa:c2:d7:28:c8:5d:dd:0d:22:e9:db:
2c:30:cd:c0:60:8d:82:91:f2:a4:e7:14:d2:fc:5a:
b8:35:c4:c7:f9:56:7a:af:72:72:58:09:96:43:95:
34:8f:62:c3:c1:79:af:cb:2c:eb:cb:aa:d6:3b:3a:
17:e0:6f:fc:c8:d3:69:f9:61:6b:2a:f8:8f:61:00:
9a:04:19:ce:c1:64:b4:35:b9:bf:aa:c2:66:f5:75:
c9:a6:60:0d:ff:42:54:65:39:c4:34:74:12:83:f6:
06:a7:19:59:8c:d8:bf:2f:23:38:3c:b5:3a:ad:31:
ac:0c:df:f9:94:99:4d:b4:57:0b:b7:42:01:d0:99:
3e:49:0e:44:da:6e:ce:97:9b:cb:1e:12:44:f2:dc:
dd:46:7a:76:3d:45:88:d4:5f:ac:37:4f:21:7a:4d:
7e:ab:1b:00:a9:b9:43:0c:b6:6c:27:4c:29:ce:7f:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:4C:28:FA:B5:21:A5:37:6A:B2:EB:8A:F0:13:18:7B:AD:D8:B8
X509v3 Authority Key Identifier:
keyid:CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:fb:42:bb:7c:84:c7:f2:9f:1c:83:a7:e6:23:5d:07:33:
76:9b:01:67:20:8e:7e:51:48:81:f9:f1:79:ce:57:9d:8b:84:
27:03:92:23:2f:dc:5e:fa:73:2e:7e:e4:e8:b8:ce:de:3c:e4:
4e:3f:85:4d:10:ef:0f:e5:ec:ab:8c:40:75:3e:7b:6c:57:b8:
77:03:20:08:72:39:58:ff:44:e6:7d:b1:a4:ae:60:20:65:8f:
ea:11:23:83:bf:32:63:59:2c:7e:25:55:81:76:a9:06:07:7d:
3d:27:40:5a:e0:29:97:d0:3b:17:08:73:7e:9d:71:38:e6:b0:
43:bd:64:f5:13:52:50:6a:26:41:b2:05:12:9b:9b:6c:62:18:
52:ab:14:ab:e8:43:78:ae:47:18:ab:28:25:b0:8f:ee:ed:f0:
be:15:b8:5b:3c:48:69:ee:b6:2a:3b:98:5a:6c:c6:3e:05:23:
ce:25:a7:4f:17:1e:fd:84:c0:ff:28:3a:4d:ec:ee:4d:0e:f4:
fb:ad:9e:0f:95:1f:81:dd:7e:40:31:84:ee:4f:93:d7:a0:13:
56:1f:bf:e6:b7:48:a7:01:cc:5d:7e:aa:de:2e:23:88:83:b2:
df:f3:84:ca:f3:85:fd:be:61:e1:c4:4d:1f:62:3c:3d:2a:02:
70:d8:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:07 2026 by rpki-client