
$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
File: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (raw, json)
Hash identifier: wlYX9LT4oAF2XaLjWHRwh1BF2XSf3RHpXlcHZvG8Qf8=
Subject key identifier: E3:60:9C:09:4D:D6:A0:07:F2:40:8A:6F:CE:A3:ED:90:72:54:00:1E
Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial: 405E4DBEE28DA7BC9A0CA23348D778D871F0E346
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
Signing time: Thu 05 Feb 2026 11:00:12 +0000
ROA not before: Thu 05 Feb 2026 10:55:12 +0000
ROA not after: Thu 04 Feb 2027 11:00:12 +0000
asID: 266084
IP address blocks: 45.5.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 13:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5e:4d:be:e2:8d:a7:bc:9a:0c:a2:33:48:d7:78:d8:71:f0:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Validity
Not Before: Feb 5 10:55:12 2026 GMT
Not After : Feb 4 11:00:12 2027 GMT
Subject: CN=E3609C094DD6A007F2408A6FCEA3ED907254001E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e7:40:29:24:71:d3:03:cd:ec:28:60:e4:9a:
dc:4f:57:b9:2b:03:65:50:39:d4:cc:30:af:34:d8:
18:1b:e6:d5:bb:5b:f5:8a:ab:2d:86:4a:13:d8:1c:
6e:a2:e7:4e:56:69:de:bd:48:5a:ba:22:0d:e9:d6:
7f:58:d9:f0:82:76:82:91:cf:17:8a:10:64:75:50:
be:26:78:e1:1a:4c:33:a7:eb:4c:76:4e:5c:85:1f:
f2:ba:4b:49:29:fc:4b:f7:6f:90:04:c2:51:e8:b2:
00:5e:b9:95:ce:3a:0b:f8:0b:9d:1f:90:cc:32:25:
c7:c6:16:ce:99:af:6d:e0:ba:85:61:4d:2f:12:4a:
a2:ea:c9:74:7c:44:7e:9c:a5:2a:f6:ed:cb:1e:d1:
e5:b4:3e:21:c0:93:d4:c2:64:aa:f5:d8:d0:b2:1d:
9e:ba:ad:29:a0:7d:9c:b6:84:ba:48:8d:ae:52:07:
05:60:48:74:1b:07:14:d8:30:72:68:4e:30:e2:06:
13:13:20:0f:79:d1:69:13:28:2a:72:8f:2e:2a:ec:
1d:fa:7e:c5:3c:49:9d:f1:13:89:a5:bc:68:bf:56:
3c:74:44:5b:8e:55:a7:3b:7d:29:e2:01:43:2e:4f:
5a:96:14:40:45:27:69:9b:eb:5a:fb:84:ee:03:21:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:9C:09:4D:D6:A0:07:F2:40:8A:6F:CE:A3:ED:90:72:54:00:1E
X509v3 Authority Key Identifier:
keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/34352e352e38382e302f32322d3232203d3e20323636303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.88.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f4:14:fd:66:9f:91:d9:ba:e8:92:1c:76:65:d2:d1:c6:b5:
f2:f5:c4:72:3c:15:44:c0:6f:d2:48:3f:e7:3e:3b:69:31:37:
41:bf:21:93:57:ca:7f:e8:52:5d:9e:e3:ef:8c:dd:e8:b9:0b:
e1:8d:0a:8e:15:96:36:53:a9:f3:13:79:4f:2c:79:8b:5e:16:
d3:56:f4:a2:d3:e9:49:42:b7:f6:f0:71:1b:06:a9:d4:35:99:
ad:59:63:fe:71:f3:6a:46:7f:05:a5:65:53:89:76:c3:0a:19:
67:d5:71:b5:71:52:d2:b1:a9:21:61:f5:ef:7a:c6:db:0f:6e:
e9:a3:e3:e3:b2:e4:90:91:44:e7:25:2f:cf:b6:f0:10:ce:43:
19:3c:b6:25:4a:e5:0a:fd:08:82:27:49:5f:d5:18:8a:c6:bc:
67:7c:bb:2c:29:bd:66:d3:9e:00:05:18:42:f1:c1:f0:32:c6:
7a:e7:1d:1f:1a:e9:e9:36:1e:39:e8:cc:2b:6a:3c:60:a1:5d:
56:60:72:7f:d8:ae:af:dc:3a:d9:dd:75:e0:aa:a0:0b:ba:35:
78:91:41:b1:9a:8a:cb:20:1f:64:70:50:cc:86:0b:61:e0:f8:
80:73:f7:60:35:6c:aa:47:c3:09:03:ee:57:f1:e1:26:3e:14:
35:16:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:33 2026 by rpki-client