
$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa
File: 34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa (raw, json)
Hash identifier: 8wEara377XPQumsAXh40y3NuQyXukFQ08ktQ+FCcVOc=
Subject key identifier: 43:BA:0F:AB:3E:09:DF:B6:7A:B5:B9:11:E7:A0:73:11:79:4F:43:7E
Certificate issuer: /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial: 357C330A373FDB95BB47AE4288D629DD5ED8916F
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa
Signing time: Mon 06 Apr 2026 13:38:52 +0000
ROA not before: Mon 06 Apr 2026 13:33:52 +0000
ROA not after: Mon 05 Apr 2027 13:38:52 +0000
asID: 269002
IP address blocks: 45.176.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 04:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:7c:33:0a:37:3f:db:95:bb:47:ae:42:88:d6:29:dd:5e:d8:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Validity
Not Before: Apr 6 13:33:52 2026 GMT
Not After : Apr 5 13:38:52 2027 GMT
Subject: CN=43BA0FAB3E09DFB67AB5B911E7A07311794F437E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:24:9a:2d:15:e5:e3:c5:c6:40:0e:02:f2:
02:e0:9f:62:44:58:7c:11:21:ba:d8:7d:03:e8:34:
b3:dd:86:95:1e:79:2f:df:d2:b7:29:9f:c8:08:ad:
72:7a:0d:63:5d:c0:72:8d:ac:f3:26:38:4e:a1:24:
0f:86:92:73:2f:a9:c3:fa:76:14:1f:5b:05:da:16:
bb:fc:d2:ac:7c:38:a0:2e:39:30:73:29:18:03:0e:
cd:32:9d:b3:46:26:85:1b:8f:de:49:63:b4:6d:a5:
b5:1b:b2:0e:5d:80:0d:a3:b5:d6:58:1a:bc:32:90:
46:10:ed:cc:67:1e:6d:f9:0c:60:0e:62:9f:db:cf:
13:22:b3:8f:12:d6:aa:55:d8:ff:70:31:fc:62:9d:
0c:8b:67:44:1b:d9:4d:3d:86:c4:b0:89:bc:75:ee:
cf:d4:5f:96:d5:f7:7c:fb:a7:c5:77:1d:49:e4:bb:
8f:d5:d7:60:f8:f6:56:6c:a2:6c:84:0e:f7:82:75:
dc:ce:48:7d:34:6f:d3:5e:f8:0d:4d:ff:bf:be:70:
1d:9d:ee:45:4f:7f:60:16:bf:c6:80:e0:27:7a:e3:
e8:98:b7:0a:dd:c9:34:0a:88:af:d6:d6:3e:3c:b3:
48:60:1b:f0:63:f9:32:3b:fc:6b:18:c3:a1:2d:24:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:0F:AB:3E:09:DF:B6:7A:B5:B9:11:E7:A0:73:11:79:4F:43:7E
X509v3 Authority Key Identifier:
keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:b6:0f:64:ec:91:20:96:98:15:68:a9:c9:8a:5f:d5:e6:b9:
e3:b4:f0:aa:7f:d6:83:e7:63:66:a8:c7:2e:c7:40:3b:ea:6c:
dd:1e:8f:04:62:0c:b3:70:f4:b4:aa:2d:dc:5d:16:07:89:74:
bb:dc:f8:93:e3:25:24:d6:82:48:ef:5c:3f:7a:34:86:4c:c6:
d4:6a:f7:6e:7b:e7:32:65:35:77:d7:e8:9c:11:38:ca:ad:46:
48:27:6e:80:1b:90:59:18:74:b5:b8:43:24:5a:87:df:90:1f:
cc:68:e3:1e:2c:dc:97:4d:84:a2:b0:d7:ff:c7:71:ee:88:fc:
1d:40:d7:e0:ad:d6:0b:3a:b8:fc:c6:44:d5:55:40:5f:07:d8:
87:4e:4d:7a:27:bc:4a:b6:38:6b:fc:48:4f:c7:a3:c2:de:46:
6f:4b:0c:56:ea:d2:c4:f8:56:75:3c:9a:b7:4d:6f:92:db:db:
f1:34:96:6e:1f:73:c8:17:1f:84:21:30:99:8b:84:e2:40:88:
25:8c:04:e3:24:45:8b:ba:07:3c:63:25:b2:b3:59:8f:3f:c5:
9e:8d:07:b5:62:a8:8d:cc:76:c2:9b:40:dd:2f:db:f8:ea:c1:
b1:84:24:89:78:9d:fa:92:94:60:99:67:bd:e7:46:a0:86:37:
56:12:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:33:14 2026 by rpki-client