
$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa
File: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (raw, json)
Hash identifier: kSiwVkFSht5sHqzzFD1P2mJQVYUOoEbi/B67iFq/CGA=
Subject key identifier: 59:FE:36:AD:F6:3E:14:7E:49:AD:B4:16:DB:A9:26:17:C5:5B:96:12
Certificate issuer: /CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0
Certificate serial: 3A9745648F1C8CDF1BB7F37DC2A1B1D78C7F67DC
Authority key identifier: FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa
Signing time: Fri 27 Mar 2026 19:28:21 +0000
ROA not before: Fri 27 Mar 2026 19:23:21 +0000
ROA not after: Fri 26 Mar 2027 19:28:21 +0000
asID: 268295
IP address blocks: 45.237.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl
rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 01:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:97:45:64:8f:1c:8c:df:1b:b7:f3:7d:c2:a1:b1:d7:8c:7f:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0
Validity
Not Before: Mar 27 19:23:21 2026 GMT
Not After : Mar 26 19:28:21 2027 GMT
Subject: CN=59FE36ADF63E147E49ADB416DBA92617C55B9612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:98:0b:5a:a8:8d:72:a4:f1:00:17:70:39:
d9:83:f3:27:0e:30:fb:c8:89:58:2c:1c:cb:b3:43:
6b:4d:ca:8e:cf:f4:b0:26:0c:47:f1:5e:b0:29:cc:
f6:40:90:bf:13:84:cc:49:92:a6:5e:af:23:aa:df:
95:ca:81:f2:e5:58:1b:c2:81:b9:1c:39:82:d2:aa:
64:77:11:fb:10:28:e3:df:2d:8d:ff:c6:35:be:a3:
0a:c0:1f:c6:39:b3:eb:17:4e:ae:40:e7:62:2c:6d:
bb:1a:b0:e1:9d:72:1f:3c:42:fa:34:29:a8:a2:63:
79:3e:c0:e7:41:63:40:3b:41:c8:60:fa:4a:b5:9a:
36:2f:4b:47:3b:27:7f:5f:b4:0a:17:a4:06:3a:b6:
e4:ec:8f:cf:9b:fc:d8:02:ed:b1:36:4f:2f:9c:a0:
5a:02:93:94:21:13:5f:a9:e5:b6:5b:b4:28:40:6f:
e4:4d:b4:4d:3b:ff:c0:e4:9a:23:36:c3:9a:60:5f:
db:d5:42:4b:01:bc:68:e8:2a:c3:94:8f:49:82:d4:
3c:56:6c:ea:71:68:6d:70:1a:31:fa:30:d6:48:e1:
82:47:e9:2e:cb:7d:46:78:34:f2:82:7f:ba:21:31:
41:37:e5:e5:fa:60:97:e4:41:49:be:e0:91:08:09:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:36:AD:F6:3E:14:7E:49:AD:B4:16:DB:A9:26:17:C5:5B:96:12
X509v3 Authority Key Identifier:
keyid:FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.236.0/22
Signature Algorithm: sha256WithRSAEncryption
31:aa:f8:65:2f:89:6f:22:35:1d:8e:73:f1:bd:cb:71:14:07:
9a:86:a5:1b:44:9a:24:37:af:42:80:8a:47:87:2e:1d:b4:d5:
b1:d1:5c:89:a7:76:63:5e:26:58:bb:59:ca:c5:d1:6e:5d:9c:
87:0b:ea:93:d4:48:fb:5e:99:e7:5f:3d:89:b0:4b:91:8e:4c:
13:80:73:74:64:7a:bc:04:6e:72:01:39:e5:5b:a5:be:5d:8f:
fb:8b:4c:1e:e9:51:99:53:15:d1:5b:48:63:e8:92:ba:60:b3:
12:c2:31:6f:9e:a9:d0:bf:c1:af:7c:b0:36:7a:a9:b2:aa:cb:
61:e0:49:07:ca:6a:f0:1d:c6:68:8f:9a:c8:d4:ab:c4:cb:8b:
e2:19:0a:1a:44:ac:44:35:d5:bf:1b:84:b5:3e:6b:de:7c:70:
99:74:14:a1:7f:83:20:96:97:fa:79:0f:b7:a0:83:65:3d:e3:
c6:cf:53:77:3f:39:00:87:6c:51:25:e8:64:ad:8a:3d:b7:10:
74:f0:58:3e:dd:69:6f:26:e6:ee:31:51:98:78:d7:74:b8:16:
27:82:a7:82:11:75:1a:01:14:65:09:04:76:3b:74:cd:a5:52:
0a:1c:34:97:24:55:76:8c:ba:b9:56:15:c3:2f:7b:24:76:fc:
7a:50:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:24:02 2026 by rpki-client