
$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/34352e3233302e39322e302f32322d3234203d3e20323637313734.roa
File: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (raw, json)
Hash identifier: TxJRIV/t8yEpIgN+ZLpKu5QCFBVwqlhmR+oA07SrS70=
Subject key identifier: 61:95:8B:A3:BF:5F:D8:1C:B1:47:A7:66:46:22:AE:E4:A3:E9:E4:3D
Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial: 350487ED8408A6357F31171657B6F2349C66B5C2
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/34352e3233302e39322e302f32322d3234203d3e20323637313734.roa
Signing time: Wed 07 Jan 2026 18:53:06 +0000
ROA not before: Wed 07 Jan 2026 18:48:06 +0000
ROA not after: Wed 06 Jan 2027 18:53:06 +0000
asID: 267174
IP address blocks: 45.230.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Feb 2026 20:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:04:87:ed:84:08:a6:35:7f:31:17:16:57:b6:f2:34:9c:66:b5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Validity
Not Before: Jan 7 18:48:06 2026 GMT
Not After : Jan 6 18:53:06 2027 GMT
Subject: CN=61958BA3BF5FD81CB147A7664622AEE4A3E9E43D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:80:3e:00:ad:e7:06:00:ae:30:82:c3:56:
cf:19:b7:71:b0:82:07:06:86:eb:d5:c8:c4:d2:d8:
6c:f9:11:a7:d1:89:f5:c4:7c:7f:a7:3c:9a:2a:c3:
dd:10:b3:cf:d2:30:54:61:3d:12:ed:92:31:e5:66:
e3:ef:d5:69:30:2a:4e:b3:ac:c2:45:23:bf:ba:89:
42:ba:71:d8:da:60:84:c3:3f:65:d6:83:d2:f2:45:
18:1b:7b:19:41:40:3a:c4:2d:93:a9:20:ff:f6:ca:
8e:71:bf:b5:a2:b6:b2:a0:17:aa:28:54:e9:c5:9e:
60:3b:ef:22:30:82:ba:ae:9e:33:f7:1a:75:09:06:
fc:06:e0:f4:e1:61:d4:c7:f8:ad:3c:f8:f7:ca:65:
e2:a4:22:a0:32:81:76:1e:94:50:cb:80:25:0c:74:
c1:fb:8f:19:ef:9a:8a:60:7d:49:2d:24:04:65:c7:
03:17:1a:55:10:ac:11:8b:75:e0:b2:f5:55:10:c4:
6f:5b:e0:55:cf:9b:88:07:63:ee:5a:8f:03:39:20:
b6:e8:81:c3:52:08:d4:7a:5d:b1:b9:b6:fd:11:06:
eb:f1:71:62:04:50:82:14:13:b8:5a:a5:a9:fe:f8:
07:b1:09:31:51:54:71:8a:79:36:e1:5d:46:7e:de:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:8B:A3:BF:5F:D8:1C:B1:47:A7:66:46:22:AE:E4:A3:E9:E4:3D
X509v3 Authority Key Identifier:
keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/34352e3233302e39322e302f32322d3234203d3e20323637313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ee:f6:43:35:5b:2e:31:48:6b:ef:98:25:c8:6c:ee:dc:2c:
16:a5:84:8c:76:19:c4:c1:f6:05:37:99:3b:cc:a1:cf:31:5d:
2e:63:55:d0:62:86:1d:8e:d7:da:41:20:5a:23:c5:4d:b2:6d:
36:c7:f3:f1:89:18:9b:13:db:e2:5d:28:29:f5:93:89:42:e5:
c6:63:e8:03:e5:ad:3c:40:bc:ca:e7:95:98:61:7c:11:28:f5:
d7:e6:c8:d6:07:2c:9c:1a:c0:6f:de:82:30:1a:59:1a:15:c4:
04:c1:d6:41:e6:c5:24:98:25:19:e1:b0:5f:af:ff:34:3f:db:
6e:85:6f:ec:04:60:42:47:61:2f:44:b6:42:77:27:12:be:74:
91:09:dc:f8:8f:5d:3b:72:31:d8:a1:4c:62:ca:02:32:93:65:
31:d0:e4:ab:f5:da:13:95:7b:fa:0a:6c:98:11:03:4a:00:7b:
db:6e:be:cd:2c:3b:6a:ad:eb:6e:2b:46:1d:d9:b7:23:7c:dc:
23:dc:af:1e:90:3e:1e:ba:0d:f5:49:2c:8e:9b:80:a0:ea:33:
d8:4f:54:b5:6f:88:7b:dc:de:7d:cb:58:32:ef:e0:d1:bc:b0:
3d:22:89:d5:dd:a7:e0:64:58:73:69:ce:1a:93:ff:b6:6c:b5:
b1:be:79:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNQSH7YQIpjV/MRcWV7byNJxmtcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE
Q0EwMDE1NjAeFw0yNjAxMDcxODQ4MDZaFw0yNzAxMDYxODUzMDZaMDMxMTAvBgNV
BAMTKDYxOTU4QkEzQkY1RkQ4MUNCMTQ3QTc2NjQ2MjJBRUU0QTNFOUU0M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRoA+AK3nBgCuMILDVs8Zt3Gw
ggcGhuvVyMTS2Gz5EafRifXEfH+nPJoqw90Qs8/SMFRhPRLtkjHlZuPv1WkwKk6z
rMJFI7+6iUK6cdjaYITDP2XWg9LyRRgbexlBQDrELZOpIP/2yo5xv7WitrKgF6oo
VOnFnmA77yIwgrqunjP3GnUJBvwG4PThYdTH+K08+PfKZeKkIqAygXYelFDLgCUM
dMH7jxnvmopgfUktJARlxwMXGlUQrBGLdeCy9VUQxG9b4FXPm4gHY+5ajwM5ILbo
gcNSCNR6XbG5tv0RBuvxcWIEUIIUE7hapan++AexCTFRVHGKeTbhXUZ+3hrBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYZWLo79f2ByxR6dmRiKu5KPp5D0wHwYDVR0j
BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4
bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC
QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYSkxCYW12eXNoellQZ0JFc3l3cFJyRzVGb0VlWk5tdmdBRGM2ZXg4OG5lLzEv
MzQzNTJlMzIzMzMwMmUzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeZcMA0GCSqGSIb3DQEBCwUAA4IBAQA97vZDNVsu
MUhr75glyGzu3CwWpYSMdhnEwfYFN5k7zKHPMV0uY1XQYoYdjtfaQSBaI8VNsm02
x/PxiRibE9viXSgp9ZOJQuXGY+gD5a08QLzK55WYYXwRKPXX5sjWByycGsBv3oIw
GlkaFcQEwdZB5sUkmCUZ4bBfr/80P9tuhW/sBGBCR2EvRLZCdycSvnSRCdz4j107
cjHYoUxiygIyk2Ux0OSr9doTlXv6CmyYEQNKAHvbbr7NLDtqretuK0Yd2bcjfNwj
3K8ekD4eug31SSyOm4Cg6jPYT1S1b4h73N59y1gy7+DRvLA9IonV3afgZFhzac4a
k/+2bLWxvnkf
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:47 2026 by rpki-client