
$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
File: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (raw, json)
Hash identifier: Igudsal6h1RZDfnLDpAJumP/Wak/0xv5Rr+DAHgaI04=
Subject key identifier: A4:84:1B:F4:14:4D:00:70:1C:EA:B6:20:BE:A5:1C:E1:12:79:81:EC
Certificate issuer: /CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Certificate serial: 6BE4D5D02969D60713461E2D38284BFF2139309F
Authority key identifier: 97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
Signing time: Wed 01 Apr 2026 22:21:56 +0000
ROA not before: Wed 01 Apr 2026 22:16:56 +0000
ROA not after: Wed 31 Mar 2027 22:21:56 +0000
asID: 268398
IP address blocks: 45.160.24.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 15:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e4:d5:d0:29:69:d6:07:13:46:1e:2d:38:28:4b:ff:21:39:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Validity
Not Before: Apr 1 22:16:56 2026 GMT
Not After : Mar 31 22:21:56 2027 GMT
Subject: CN=A4841BF4144D00701CEAB620BEA51CE1127981EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:2e:64:18:3c:97:6a:af:6e:6f:e8:4f:68:
57:c0:29:d9:33:d1:b0:b3:38:b4:72:bc:7d:1a:d7:
5d:db:4f:26:a5:b3:b6:69:af:69:f1:04:34:30:8d:
2c:71:6a:08:7c:9e:1a:36:93:13:c9:7f:38:0f:1a:
c6:63:22:03:87:ce:b0:d2:95:cd:f0:5e:53:bf:88:
94:e6:7d:28:d3:ae:e8:36:0a:be:b8:24:30:3c:87:
e4:0d:5e:41:45:38:a0:ed:83:cf:ff:a3:47:0e:be:
99:59:d6:4c:1a:fa:42:ab:4e:2a:d9:af:ec:72:c3:
4b:8a:88:ff:d5:5b:25:78:c1:c8:e1:9f:d0:43:30:
15:16:5f:ad:35:18:9c:68:2f:31:90:f6:29:c1:e7:
b3:06:89:a9:45:a3:da:11:01:4a:d9:1b:75:81:4b:
2c:f8:bb:58:c6:8b:7d:33:ed:35:96:d8:97:25:30:
33:8c:4b:4a:92:15:a7:0d:3f:41:89:dc:47:b2:eb:
75:98:53:58:5e:89:65:f7:62:48:e1:b6:43:a1:4b:
3d:24:28:2a:71:1c:70:aa:41:45:46:14:02:f6:0f:
73:83:b6:85:b7:c5:da:94:37:fa:f4:7d:57:16:ea:
97:8d:ef:d0:3f:75:f1:bf:f3:31:f2:f9:b1:db:bb:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:1B:F4:14:4D:00:70:1C:EA:B6:20:BE:A5:1C:E1:12:79:81:EC
X509v3 Authority Key Identifier:
keyid:97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.24.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1d:3e:ce:98:2d:16:83:90:9b:27:06:58:6d:c0:c9:5c:c3:
a3:d1:0e:e6:06:b3:9b:81:7f:01:99:35:cc:a5:d6:eb:a3:cb:
6b:01:69:5e:b7:c9:34:a2:bd:7c:63:66:1f:3f:1f:d2:65:d0:
d1:2c:0b:9b:62:27:af:82:9e:15:7a:27:1d:8b:43:18:2f:d5:
19:78:34:9b:4c:ba:d0:e9:ff:ad:20:d2:2d:08:8e:38:b6:c0:
58:44:80:1a:c3:3c:f2:48:f2:a7:17:77:69:09:5f:22:ad:01:
79:8b:d2:53:c1:af:b1:bf:5c:67:ed:d3:9f:60:6f:fc:10:90:
61:f9:18:31:34:36:b9:26:94:ae:c2:2e:a5:8f:66:45:01:c3:
c5:02:98:88:42:5e:f2:93:b4:88:4f:a1:3d:72:e9:9f:60:64:
0f:7c:cc:6c:2b:d8:32:65:80:9f:4d:2c:8b:75:42:9b:0a:b0:
88:2e:21:10:88:ec:bc:6c:4e:bb:07:dc:3d:7a:21:a7:2e:83:
84:97:1b:90:47:c3:1c:89:a3:ce:09:c2:a7:2e:8d:cc:cc:81:
3b:92:fe:94:e5:b8:8f:d4:95:50:00:43:a7:b4:96:d1:fc:8b:
9d:41:fe:b8:d3:3a:2d:72:85:31:02:b5:ab:74:8f:6b:6d:8b:
0b:a7:a1:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa+TV0Clp1gcTRh4tOChL/yE5MJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0RjM4MjQxQUFGRjk0NEMwMUZFRTQwNkVGRThGNURE
QkRGRjJCNjAeFw0yNjA0MDEyMjE2NTZaFw0yNzAzMzEyMjIxNTZaMDMxMTAvBgNV
BAMTKEE0ODQxQkY0MTQ0RDAwNzAxQ0VBQjYyMEJFQTUxQ0UxMTI3OTgxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8C5kGDyXaq9ub+hPaFfAKdkz
0bCzOLRyvH0a113bTyals7Zpr2nxBDQwjSxxagh8nho2kxPJfzgPGsZjIgOHzrDS
lc3wXlO/iJTmfSjTrug2Cr64JDA8h+QNXkFFOKDtg8//o0cOvplZ1kwa+kKrTirZ
r+xyw0uKiP/VWyV4wcjhn9BDMBUWX601GJxoLzGQ9inB57MGialFo9oRAUrZG3WB
Syz4u1jGi30z7TWW2JclMDOMS0qSFacNP0GJ3Eey63WYU1heiWX3YkjhtkOhSz0k
KCpxHHCqQUVGFAL2D3ODtoW3xdqUN/r0fVcW6peN79A/dfG/8zHy+bHbux+RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpIQb9BRNAHAc6rYgvqUc4RJ5gewwHwYDVR0j
BBgwFoAUl084JBqv+UTAH+5Abv6PXdvf8rYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFSdTNYS3c3YUhuNGNDNlJyVmVKZjJBUWhTRWRNaGNiaHVwODJrNzNG
SlkvMC85NzRGMzgyNDFBQUZGOTQ0QzAxRkVFNDA2RUZFOEY1RERCREZGMkI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NEYzODI0MUFBRkY5NDRD
MDFGRUU0MDZFRkU4RjVEREJERkYyQjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBUnUzWEt3N2FIbjRjQzZSclZlSmYyQVFoU0VkTWhjYmh1cDgyazczRkpZLzAv
MzQzNTJlMzEzNjMwMmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaAYMA0GCSqGSIb3DQEBCwUAA4IBAQBVHT7OmC0W
g5CbJwZYbcDJXMOj0Q7mBrObgX8BmTXMpdbro8trAWlet8k0or18Y2YfPx/SZdDR
LAubYievgp4Veicdi0MYL9UZeDSbTLrQ6f+tINItCI44tsBYRIAawzzySPKnF3dp
CV8irQF5i9JTwa+xv1xn7dOfYG/8EJBh+RgxNDa5JpSuwi6lj2ZFAcPFApiIQl7y
k7SIT6E9cumfYGQPfMxsK9gyZYCfTSyLdUKbCrCILiEQiOy8bE67B9w9eiGnLoOE
lxuQR8MciaPOCcKnLo3MzIE7kv6U5biP1JVQAEOntJbR/IudQf640zotcoUxArWr
dI9rbYsLp6FI
-----END CERTIFICATE-----
Generated at Wed Apr 8 18:19:23 2026 by rpki-client