
$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3332203d3e20323638313533.roa
File: 34352e3137302e37322e302f32322d3332203d3e20323638313533.roa (raw, json)
Hash identifier: GKA4YAk9DANxL+BkDjLRYUYfY9wIR7metCm6Mo8Wpnc=
Subject key identifier: 09:21:45:10:BB:F6:95:E8:92:87:53:C7:25:A7:B5:0A:B9:AA:CC:C6
Certificate issuer: /CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F
Certificate serial: 236AA88844ED7F8D4D00B886BD646D5B4AE1FA15
Authority key identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3332203d3e20323638313533.roa
Signing time: Wed 01 Apr 2026 16:31:32 +0000
ROA not before: Wed 01 Apr 2026 16:26:32 +0000
ROA not after: Wed 31 Mar 2027 16:31:32 +0000
asID: 268153
IP address blocks: 45.170.72.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl
rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 08 Apr 2026 23:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6a:a8:88:44:ed:7f:8d:4d:00:b8:86:bd:64:6d:5b:4a:e1:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F
Validity
Not Before: Apr 1 16:26:32 2026 GMT
Not After : Mar 31 16:31:32 2027 GMT
Subject: CN=09214510BBF695E8928753C725A7B50AB9AACCC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:d5:34:d6:bb:f8:2e:e3:2f:0a:0c:a1:f6:
09:57:54:8d:e9:a9:ea:06:a1:c3:9d:d1:8e:99:fc:
12:e1:ad:91:9f:66:bf:79:85:c4:cc:15:a3:ed:cb:
6b:bc:b3:ff:e0:db:49:b1:47:a9:f2:ef:28:5c:e1:
68:af:64:96:95:ee:e1:3b:56:73:10:aa:14:b6:bf:
78:ee:d5:ce:de:7f:5e:d5:dd:5a:e5:47:e6:f6:36:
ae:8b:dd:12:7c:64:1d:06:4b:63:95:f1:b1:db:82:
c2:05:64:e9:04:3d:e0:8d:d1:6e:66:7c:41:69:d5:
c4:66:fb:ea:77:12:e5:58:0b:de:c8:e6:fd:7b:5d:
8a:2b:eb:48:3a:a1:27:6d:f3:16:53:82:e2:a9:cc:
55:0e:ae:da:e7:49:41:f5:57:87:a9:f1:0b:58:1e:
e2:1f:c8:31:ea:8b:fa:9e:9b:23:dc:ff:a8:70:5a:
ce:e1:09:01:0c:a7:98:3e:da:72:c6:57:7d:43:9e:
4c:37:b0:33:02:10:63:10:41:4e:f5:63:e4:d1:9d:
0d:79:a3:5c:e1:3f:46:b0:c1:89:39:c2:c5:4c:83:
3c:ec:ce:0d:dd:c8:45:f1:fa:a3:09:0b:88:8e:c9:
27:c6:8d:28:b9:e8:63:4e:88:a8:29:5d:d7:45:50:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:45:10:BB:F6:95:E8:92:87:53:C7:25:A7:B5:0A:B9:AA:CC:C6
X509v3 Authority Key Identifier:
keyid:5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32322d3332203d3e20323638313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.72.0/22
Signature Algorithm: sha256WithRSAEncryption
06:6c:e3:f7:63:44:27:d8:af:88:27:8a:5b:a6:05:b1:11:7b:
35:88:5d:7f:9e:1c:07:dc:06:6f:5e:db:16:51:2b:1a:7e:69:
2b:f3:d2:36:ce:f8:ed:f4:32:47:a3:71:a6:8d:eb:66:69:b0:
27:f5:41:5d:5d:b5:01:64:4c:83:0d:89:7b:a7:8d:7f:18:3b:
83:6c:86:3e:04:2f:a4:9a:1b:7a:a1:1c:5e:74:26:b0:c4:ba:
b3:b8:ed:6d:7f:9c:7b:d4:d1:fc:19:f8:97:5b:85:4d:de:c6:
4b:09:1c:18:8a:69:df:88:15:40:7f:22:60:73:08:ac:0a:d8:
0b:51:71:5c:b8:68:05:33:57:00:f3:b8:ac:00:d7:7e:cb:ca:
ec:40:f2:d1:b5:75:d8:eb:fa:ab:8e:35:5f:24:0d:5a:c8:0a:
db:56:0b:58:cf:18:61:8f:02:f3:dd:c3:9f:d0:ef:ae:b1:40:
b4:62:42:2b:d5:c5:52:76:de:e3:89:48:34:da:4b:3c:94:7a:
10:e8:a7:56:3d:ac:b3:72:ac:cf:c0:d0:2d:c4:58:de:f7:ae:
bf:65:d5:5f:6e:2d:86:4a:e7:47:f9:10:1e:c2:16:dd:36:85:
08:91:2f:e1:e5:b6:c5:1b:af:20:d8:05:17:98:10:4d:b9:39:
7f:91:c3:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI2qoiETtf41NALiGvWRtW0rh+hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBN0NCQkJEMUQxRjc5NTEzQzJFRkQ1MjQ3QzNBQTQy
RkQwRTc2RjAeFw0yNjA0MDExNjI2MzJaFw0yNzAzMzExNjMxMzJaMDMxMTAvBgNV
BAMTKDA5MjE0NTEwQkJGNjk1RTg5Mjg3NTNDNzI1QTdCNTBBQjlBQUNDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrNU01rv4LuMvCgyh9glXVI3p
qeoGocOd0Y6Z/BLhrZGfZr95hcTMFaPty2u8s//g20mxR6ny7yhc4WivZJaV7uE7
VnMQqhS2v3ju1c7ef17V3VrlR+b2Nq6L3RJ8ZB0GS2OV8bHbgsIFZOkEPeCN0W5m
fEFp1cRm++p3EuVYC97I5v17XYor60g6oSdt8xZTguKpzFUOrtrnSUH1V4ep8QtY
HuIfyDHqi/qemyPc/6hwWs7hCQEMp5g+2nLGV31Dnkw3sDMCEGMQQU71Y+TRnQ15
o1zhP0awwYk5wsVMgzzszg3dyEXx+qMJC4iOySfGjSi56GNOiKgpXddFUMYdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCSFFELv2leiSh1PHJae1CrmqzMYwHwYDVR0j
BBgwFoAUX6fLu9HR95UTwu/VJHw6pC/Q528wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4
SzEvMC81RkE3Q0JCQkQxRDFGNzk1MTNDMkVGRDUyNDdDM0FBNDJGRDBFNzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTdDQkJCRDFEMUY3OTUx
M0MyRUZENTI0N0MzQUE0MkZEMEU3NkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FENjhvdlFNZ0tmUzg1QjdUNXM2S293WWNxTDM0VWRIdkVoMmNCems5OEsxLzAv
MzQzNTJlMzEzNzMwMmUzNzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLapIMA0GCSqGSIb3DQEBCwUAA4IBAQAGbOP3Y0Qn
2K+IJ4pbpgWxEXs1iF1/nhwH3AZvXtsWUSsafmkr89I2zvjt9DJHo3GmjetmabAn
9UFdXbUBZEyDDYl7p41/GDuDbIY+BC+kmht6oRxedCawxLqzuO1tf5x71NH8GfiX
W4VN3sZLCRwYimnfiBVAfyJgcwisCtgLUXFcuGgFM1cA87isANd+y8rsQPLRtXXY
6/qrjjVfJA1ayArbVgtYzxhhjwLz3cOf0O+usUC0YkIr1cVSdt7jiUg02ks8lHoQ
6KdWPayzcqzPwNAtxFje966/ZdVfbi2GSudH+RAewhbdNoUIkS/h5bbFG68g2AUX
mBBNuTl/kcP0
-----END CERTIFICATE-----
Generated at Wed Apr 8 15:49:56 2026 by rpki-client