
$ rpki-client -vvf rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa
File: 34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa (raw, json)
Hash identifier: 6lvmmZ59NKMW53nElGXIfEn4zrI0F1yMEVjOt6rBmvI=
Subject key identifier: CB:BA:BF:E4:3F:A8:7E:6D:8E:2F:5E:06:F8:BF:C5:CD:83:F2:D1:75
Certificate issuer: /CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
Certificate serial: 0A95D6D80DBD5E7E21E92A47ABBB295D70FC7DA1
Authority key identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa
Signing time: Sat 18 Apr 2026 16:33:58 +0000
ROA not before: Sat 18 Apr 2026 16:28:58 +0000
ROA not after: Sat 17 Apr 2027 16:33:58 +0000
asID: 268327
IP address blocks: 45.238.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl
rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:95:d6:d8:0d:bd:5e:7e:21:e9:2a:47:ab:bb:29:5d:70:fc:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
Validity
Not Before: Apr 18 16:28:58 2026 GMT
Not After : Apr 17 16:33:58 2027 GMT
Subject: CN=CBBABFE43FA87E6D8E2F5E06F8BFC5CD83F2D175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:4b:f3:83:d8:3a:75:84:4f:ea:b8:19:13:
47:1e:19:86:30:32:90:bb:25:d3:a0:6b:eb:77:48:
13:ff:8e:c9:86:48:a4:f8:0f:e4:97:49:b8:10:7b:
68:f1:91:61:8c:c6:04:2d:37:49:6f:ab:f2:dc:ed:
a8:95:a1:d9:1e:17:bc:91:94:5b:dc:e6:49:06:91:
7f:e7:9c:54:6a:54:d6:7a:14:6d:2f:99:a5:44:53:
85:db:d5:77:35:64:08:ec:75:54:00:ec:ec:20:30:
2c:e1:56:ee:54:21:0e:55:64:a3:d1:61:76:db:4b:
48:ce:ea:cf:12:ca:cf:3b:ab:97:37:d8:35:45:91:
73:be:94:46:3c:34:aa:87:6a:90:ab:9c:ed:c9:9b:
47:6f:4d:6a:3e:a7:60:a3:07:77:f4:b1:c1:49:3c:
cf:83:26:5d:4c:90:77:09:86:71:f8:9b:10:68:78:
49:a9:9e:9c:70:f0:66:1b:ca:d2:10:78:ca:8c:84:
09:f9:5b:a1:e8:49:86:eb:e0:3a:53:41:0b:42:71:
f9:29:82:7f:ba:a2:91:b3:5d:c1:5c:a4:4b:04:10:
4a:e7:84:9f:fd:1c:41:3f:ea:f7:10:be:45:d5:f2:
4f:54:5f:cf:47:fa:09:68:c1:74:a2:f3:c9:21:39:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:BF:E4:3F:A8:7E:6D:8E:2F:5E:06:F8:BF:C5:CD:83:F2:D1:75
X509v3 Authority Key Identifier:
keyid:45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/34352e3233382e3133342e302f32332d3233203d3e20323638333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.134.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:8e:6f:f3:df:04:b8:fc:ff:77:ed:39:78:09:74:e2:53:27:
04:f2:f1:76:0e:ff:a5:8a:c8:03:ec:0a:3e:68:b3:7d:36:36:
93:25:15:98:6d:99:13:4c:26:59:3a:94:78:0b:65:54:12:af:
39:5a:5a:44:40:f2:ca:1a:84:b1:f7:69:09:36:4c:79:da:5f:
02:5d:49:4f:c6:2e:92:a0:f0:e4:eb:a2:f5:71:93:29:14:a0:
12:8e:13:bc:ac:72:ae:75:ac:c2:cf:42:6b:ad:fc:11:b2:b5:
3e:56:48:a0:bf:33:bc:18:3b:00:5f:e9:36:48:31:f2:33:3d:
b1:db:22:7b:8f:17:3f:ec:5d:e7:e7:eb:51:c3:0d:77:89:10:
a4:04:4d:25:ba:17:6c:0e:1b:46:cc:76:86:6f:d4:46:f6:d7:
b7:60:38:aa:b4:7b:7b:f1:3a:76:d2:ce:84:9d:20:fd:43:63:
22:2e:8b:cb:58:f7:f4:7b:b4:5d:74:58:16:5d:2c:23:14:5c:
05:22:04:da:f0:3f:44:89:c7:e5:b1:c5:6d:47:77:ea:f8:c8:
a5:75:18:38:9f:10:46:ef:da:3c:cf:ad:03:ca:ce:76:26:7a:
8d:d2:cd:96:89:34:d3:c7:93:3d:7f:9d:5c:cb:63:dc:bb:60:
63:c9:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:05 2026 by rpki-client