
$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
File: 34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier: ks2SkLXQtXuKQ8Qopfq1HXbJ1m6Yeer0UhsyFSotn8o=
Subject key identifier: E7:57:72:BC:DD:D1:91:28:A0:A6:54:FC:95:E5:68:19:DE:27:F5:A9
Certificate issuer: /CN=B20E70F81B422B7960B3939928B1B16370431917
Certificate serial: 4B6BBA7914F2B1CB51DC20275DFF265E00801BB5
Authority key identifier: B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
Signing time: Sat 04 Apr 2026 02:01:40 +0000
ROA not before: Sat 04 Apr 2026 01:56:40 +0000
ROA not after: Sat 03 Apr 2027 02:01:40 +0000
asID: 268729
IP address blocks: 45.171.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.crl
rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 01:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6b:ba:79:14:f2:b1:cb:51:dc:20:27:5d:ff:26:5e:00:80:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B20E70F81B422B7960B3939928B1B16370431917
Validity
Not Before: Apr 4 01:56:40 2026 GMT
Not After : Apr 3 02:01:40 2027 GMT
Subject: CN=E75772BCDDD19128A0A654FC95E56819DE27F5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:a7:98:b2:83:e6:21:aa:a0:62:0e:1b:22:
bc:2c:66:9f:f1:d5:c0:1a:6c:12:e8:e3:3e:7f:2f:
e0:09:7e:db:fc:ae:1b:e0:83:74:c4:89:27:55:d4:
66:8b:60:85:12:cb:52:14:1b:30:ed:5f:55:c5:27:
74:92:f3:d8:26:cc:f9:7b:4e:c8:61:9c:e3:a6:5d:
63:20:00:31:b6:d4:7e:ab:e3:64:a3:bb:c0:98:c0:
1f:16:8a:18:92:c1:9c:25:c2:e3:92:00:14:39:08:
87:f1:4e:f2:94:3d:e1:a5:8e:77:5d:78:ea:46:c0:
b7:ad:ed:47:1c:ed:ff:ea:de:2e:e3:6e:16:fa:16:
c4:a7:52:9d:c4:be:96:c8:bc:b8:f2:06:5c:5b:94:
2a:16:ca:d8:67:b1:99:58:f9:76:a3:7e:a8:95:12:
81:14:12:44:15:fc:d3:ca:e8:9c:d2:90:f5:9b:36:
b4:40:5d:e6:0c:53:c7:66:b2:a4:6d:7e:0d:16:9b:
58:13:d1:11:f3:91:38:6d:40:a6:82:9e:d1:46:1b:
e8:ce:f3:7d:6c:f3:e2:70:64:1c:98:ca:49:f3:db:
c3:51:21:90:aa:f9:2b:b1:8d:d2:10:a1:d8:c4:4b:
2c:83:fe:2c:5c:45:f7:b2:9e:8e:50:5c:1b:a8:95:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:57:72:BC:DD:D1:91:28:A0:A6:54:FC:95:E5:68:19:DE:27:F5:A9
X509v3 Authority Key Identifier:
keyid:B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2d:49:56:68:c3:e5:49:70:2a:67:c2:c4:a8:ca:58:66:95:
27:6f:fa:7a:d9:cd:0b:ac:ae:80:de:44:9d:eb:51:c3:6b:69:
9a:e2:84:63:cb:d1:87:a6:aa:c6:c2:ab:85:27:2f:7b:e9:11:
e4:a1:18:fd:fb:bd:2c:f8:35:a8:71:f8:80:42:1a:8c:9e:5b:
7b:2b:25:e1:9a:29:d3:40:80:22:e6:b6:8e:1d:1c:00:29:1c:
b1:ef:0e:d8:0f:5d:25:8a:09:10:38:f4:33:7b:e5:78:82:5b:
9e:67:6a:5b:26:e7:9f:ba:e0:04:5d:4f:ef:7e:5d:72:b4:93:
6a:5e:fd:60:6e:8c:02:f8:83:ac:e9:46:c1:d1:ed:ba:ed:a1:
de:9b:c3:fd:0e:33:c7:eb:dd:9e:b1:8d:7c:12:c4:38:e1:44:
ed:1f:1e:db:8c:a2:7b:90:05:1e:08:db:5c:57:55:e9:55:9e:
c4:35:10:a8:55:a6:6c:f9:ec:3b:dd:d1:e1:1f:04:2a:8f:aa:
35:1b:11:f3:8f:c1:70:8d:74:43:3c:62:74:60:23:b6:e6:57:
b5:85:68:92:fd:8a:91:9c:ae:ae:58:fe:85:58:15:f6:47:79:
7d:4d:5e:53:ba:21:33:b6:b3:87:f2:68:ff:c4:83:bf:6f:63:
b4:32:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:26:13 2026 by rpki-client