
$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
File: 34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (raw, json)
Hash identifier: QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=
Subject key identifier: BA:A7:F2:AC:65:E0:05:DF:2B:3F:25:72:BF:24:83:59:62:D3:52:69
Certificate issuer: /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial: 0E2D59DBC6239A8E09559EFBEEA77F030085E738
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
Signing time: Wed 04 Feb 2026 20:00:01 +0000
ROA not before: Wed 04 Feb 2026 19:55:01 +0000
ROA not after: Wed 03 Feb 2027 20:00:01 +0000
asID: 267334
IP address blocks: 45.233.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 00:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2d:59:db:c6:23:9a:8e:09:55:9e:fb:ee:a7:7f:03:00:85:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
Validity
Not Before: Feb 4 19:55:01 2026 GMT
Not After : Feb 3 20:00:01 2027 GMT
Subject: CN=BAA7F2AC65E005DF2B3F2572BF24835962D35269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:ca:95:13:e0:7a:27:1c:69:31:e7:ab:ba:
e9:21:01:85:b0:0c:18:c2:7f:38:ed:f4:4d:bf:b5:
77:6f:81:ca:58:62:84:38:55:56:75:b7:b3:e9:75:
c1:33:94:41:fd:9b:3b:30:c1:76:73:1b:4c:9b:04:
f0:3b:36:97:ec:1f:4f:51:31:16:86:31:90:40:85:
7b:95:16:c0:5d:9e:fd:e4:c7:e4:4d:41:53:42:b3:
68:41:3a:65:55:95:e6:fb:bf:9e:5c:7b:c6:a7:0d:
dc:8d:64:97:9b:f3:c0:49:97:e4:1d:db:6e:1c:60:
68:15:3c:57:de:85:ff:20:cf:0e:fc:fc:d1:c5:b4:
f5:41:ce:9a:d4:f6:d5:8b:d8:b9:c1:23:07:c7:c1:
05:4f:4b:97:da:34:1e:7e:9e:1d:50:f8:4a:ef:27:
d8:55:0c:55:6f:4d:2f:3a:86:4c:87:1c:38:e3:25:
3c:03:c2:26:43:b3:36:df:44:b5:14:01:48:81:db:
c8:74:4f:ad:27:06:ad:50:28:d8:82:e4:17:50:50:
d0:35:9b:9f:46:e3:fd:0f:9d:bf:d3:10:02:86:4b:
90:90:23:74:75:19:4a:b3:33:dc:ce:bb:4e:78:8c:
57:d1:ee:4a:e3:99:10:c7:e3:5f:56:b9:2c:ca:1c:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:F2:AC:65:E0:05:DF:2B:3F:25:72:BF:24:83:59:62:D3:52:69
X509v3 Authority Key Identifier:
keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:7b:6d:df:71:48:14:2a:a7:79:6f:43:56:57:25:0e:e4:bf:
01:4a:e3:3e:d8:10:ee:f2:67:d2:77:f1:3c:1e:97:09:bf:19:
2d:08:4a:55:9f:a8:8b:7e:d3:fb:b4:f5:4a:27:52:46:28:a1:
74:88:4a:ca:d5:0b:af:b8:e4:34:39:fe:e5:e2:a2:04:8e:79:
7e:1a:05:b0:b9:a0:cd:3f:6f:26:d4:b6:73:5b:d6:8c:c9:f9:
2f:4e:57:70:c4:41:ea:2c:43:fd:f0:3f:fc:40:fa:17:3f:72:
cb:a9:02:08:78:40:7f:00:54:e1:92:f5:28:61:43:91:e7:19:
e4:5b:42:c7:81:2a:3d:47:de:d0:d4:0d:37:65:7a:7d:fd:5a:
18:85:18:5b:a3:83:c9:2b:a2:e1:26:12:28:dc:00:13:7b:20:
46:d9:7b:a2:d8:bd:10:2d:d4:52:ae:75:12:cb:89:72:82:7a:
e7:7f:a4:fe:20:cd:1e:09:0f:70:eb:52:d5:e7:a8:d5:b6:b0:
fe:bd:29:1b:c9:e2:ad:07:93:74:fb:19:fc:7d:47:59:cf:95:
18:b3:8b:5f:cd:f0:90:12:48:62:2b:cc:40:6e:58:7e:9f:ab:
2e:14:5d:b4:19:1d:cb:74:97:da:11:61:d7:fe:ba:7e:24:17:
91:c0:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:58 2026 by rpki-client