
$ rpki-client -vvf rsync.nex3.com.br/repo/AS269115/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
File: 34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa (raw, json)
Hash identifier: L4tBdHg0F4r+IQz2aB2bht/B4ra7Hp1kKxvaU44liBk=
Subject key identifier: B3:F7:ED:13:EA:AE:71:FB:F8:7B:1B:AA:18:A3:81:06:07:3F:AB:7D
Certificate issuer: /CN=B775879547BAC5F677A7B482DDB82E88568B21AE
Certificate serial: 720795F9F2972717A304DB56D30369A08B1560A9
Authority key identifier: B7:75:87:95:47:BA:C5:F6:77:A7:B4:82:DD:B8:2E:88:56:8B:21:AE
Authority info access: rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
Subject info access: rsync://rsync.nex3.com.br/repo/AS269115/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
Signing time: Wed 25 Mar 2026 01:10:06 +0000
ROA not before: Wed 25 Mar 2026 01:05:06 +0000
ROA not after: Wed 24 Mar 2027 01:10:06 +0000
asID: 269115
IP address blocks: 45.178.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.crl
rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.mft
rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.crl
rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 19:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:07:95:f9:f2:97:27:17:a3:04:db:56:d3:03:69:a0:8b:15:60:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B775879547BAC5F677A7B482DDB82E88568B21AE
Validity
Not Before: Mar 25 01:05:06 2026 GMT
Not After : Mar 24 01:10:06 2027 GMT
Subject: CN=B3F7ED13EAAE71FBF87B1BAA18A38106073FAB7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:ad:de:d2:08:83:6b:42:66:a0:44:0b:04:
c4:7f:21:5e:f9:7c:21:4c:e1:53:35:61:2a:02:6e:
ad:e8:c5:11:e5:46:da:83:be:78:a0:6d:1b:85:27:
75:e7:dd:4e:4b:09:c9:2f:f3:c9:a8:f6:37:74:3b:
3e:67:92:d8:c2:a1:db:28:26:07:e2:bb:0d:99:4a:
1f:3f:73:38:da:95:f2:51:a0:92:31:c2:96:64:47:
d0:da:df:82:8c:0b:ec:f7:c4:b5:2c:b2:45:da:0b:
6b:67:e0:8f:8f:97:f8:44:4f:a4:55:5e:03:6f:14:
84:9b:83:97:bd:fe:e1:2d:68:3d:8d:f5:cb:38:83:
43:7d:e1:2d:9b:81:40:6e:36:99:ad:db:f8:08:ed:
de:a1:d9:72:2b:b6:d2:8e:5f:72:96:53:4e:41:89:
a5:d8:5b:2f:50:26:7e:bd:f2:3b:00:8e:36:62:4a:
fd:3e:47:1c:da:ca:da:dc:21:a8:b0:8f:94:cf:32:
ab:c0:74:94:05:4f:c8:c7:c5:43:12:71:35:00:43:
b3:b1:a1:6d:04:0e:09:4b:12:d8:ed:35:a8:b2:62:
54:f4:75:c1:c1:51:20:42:22:ec:63:d3:8d:c1:fd:
0f:72:f2:ae:56:02:fd:ab:d4:e5:98:36:e4:b3:5d:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:ED:13:EA:AE:71:FB:F8:7B:1B:AA:18:A3:81:06:07:3F:AB:7D
X509v3 Authority Key Identifier:
keyid:B7:75:87:95:47:BA:C5:F6:77:A7:B4:82:DD:B8:2E:88:56:8B:21:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS269115/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.240.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:e6:f2:7f:c4:06:53:e6:0f:24:2b:73:68:cb:ce:fb:6b:62:
d7:c7:25:2f:22:59:68:dd:9f:bd:10:f1:bd:a1:f6:2f:d0:98:
f5:15:63:72:08:09:a8:73:25:7a:a7:17:75:a8:01:3b:fc:85:
d1:09:11:05:a0:6c:c4:2a:e2:eb:0d:20:84:a7:3e:a7:7c:bb:
ea:a2:1a:40:8c:8d:75:d0:04:13:f3:30:df:c7:e2:7b:71:34:
d2:58:f3:46:df:0c:34:67:ca:c7:db:6b:4a:65:cb:0e:7f:c4:
fc:52:6c:16:44:2f:c0:3b:78:24:f4:f2:b5:47:4e:9f:e2:b5:
fa:8f:9e:03:4f:fb:1e:d5:40:8d:0b:31:64:85:45:6c:9d:9b:
89:e4:96:e2:b4:06:a6:c1:78:7a:ae:da:c5:4b:84:54:72:68:
1d:a6:90:d5:3d:ba:3e:d5:b9:a1:1c:c0:87:ee:8b:2c:25:35:
f0:2a:e1:69:b3:43:84:b6:0b:15:69:3a:2c:fd:df:e5:7b:57:
df:65:bd:c2:51:08:98:48:22:85:d8:c3:7e:69:b3:9c:97:51:
32:9f:22:2c:e4:a2:c5:e8:a3:fa:31:fc:33:28:f5:64:74:7d:
0f:46:ec:ea:c7:06:9d:ce:e8:58:70:7a:07:35:18:72:14:46:
da:fc:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:11 2026 by rpki-client