
$ rpki-client -vvf rsync.nex3.com.br/repo/AS265905/0/34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa
File: 34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (raw, json)
Hash identifier: zm4WXI2Pwre/9cHmzMcZ+pzE2Scf9sXpdlGEW8/8qcY=
Subject key identifier: 11:22:C6:0A:31:9C:4C:3A:9B:00:41:C9:F0:CD:F8:7D:E1:4F:2F:28
Certificate issuer: /CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69
Certificate serial: 7D192157D2B455E325C5C2B3C192CEDD75CF49A5
Authority key identifier: 49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69
Authority info access: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer
Subject info access: rsync://rsync.nex3.com.br/repo/AS265905/0/34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa
Signing time: Wed 01 Apr 2026 12:36:22 +0000
ROA not before: Wed 01 Apr 2026 12:31:22 +0000
ROA not after: Wed 31 Mar 2027 12:36:22 +0000
asID: 265905
IP address blocks: 45.161.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.crl
rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.mft
rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer
rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.crl
rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55160920FAD15286842154881A52D710EE4ABA4A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 03:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:19:21:57:d2:b4:55:e3:25:c5:c2:b3:c1:92:ce:dd:75:cf:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69
Validity
Not Before: Apr 1 12:31:22 2026 GMT
Not After : Mar 31 12:36:22 2027 GMT
Subject: CN=1122C60A319C4C3A9B0041C9F0CDF87DE14F2F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:56:ce:b0:2a:75:e2:d5:3d:f0:52:ac:02:
34:37:89:f3:31:41:0c:1c:d5:41:b0:fc:4d:df:b8:
e4:99:93:07:4c:a0:d7:54:59:34:2a:29:f2:91:c8:
4d:89:36:cd:23:94:bd:71:2d:93:16:8f:49:18:bc:
13:ee:16:a5:45:a5:fc:69:76:20:a4:0b:8b:dc:05:
3b:76:bd:d3:2e:c3:40:56:85:32:d9:85:a6:ef:c2:
fb:4e:20:03:2e:b8:15:89:92:41:d0:c5:44:d6:c7:
c2:8a:09:76:f0:cb:e0:56:1d:1b:ef:8d:96:ae:91:
cf:9c:36:24:8f:63:8b:5a:a7:39:93:02:95:0f:ff:
bd:9e:81:e9:cf:b6:5b:df:30:f9:d8:fd:df:55:e4:
41:31:11:7d:4a:46:53:e5:45:c5:0b:cb:02:96:a1:
e6:da:d8:5f:3f:4e:f5:26:10:f9:0d:4d:0a:5c:3f:
7d:6c:79:ca:37:22:89:b5:ac:87:cc:f8:46:89:eb:
1f:cc:14:2d:ed:52:bc:5d:e4:eb:a8:fb:be:48:7a:
a1:8a:18:a4:84:f1:e0:9f:5a:ba:12:76:21:5c:f6:
bd:51:41:4e:b1:49:83:5f:7c:12:12:32:b1:1b:33:
20:77:68:3c:0d:49:46:ac:58:f6:71:a0:c9:ff:90:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:C6:0A:31:9C:4C:3A:9B:00:41:C9:F0:CD:F8:7D:E1:4F:2F:28
X509v3 Authority Key Identifier:
keyid:49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS265905/0/34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.196.0/22
Signature Algorithm: sha256WithRSAEncryption
99:7e:51:8f:66:3d:66:65:48:27:65:95:e4:47:e1:58:24:91:
34:55:c7:0d:66:ab:00:7e:5b:15:a4:0b:a7:24:e1:7f:af:c5:
6a:4e:44:76:d3:4c:9c:c2:73:01:23:5a:12:9f:41:03:a6:50:
47:f1:0d:93:11:7c:57:a8:08:5f:44:22:ed:92:d3:c0:5e:86:
36:64:7b:f9:ba:b9:ff:40:2f:0b:48:68:e8:c2:de:74:5e:f6:
09:b6:0d:6b:3f:e5:04:b7:61:de:e7:85:f2:ea:fd:40:ee:26:
72:d3:10:00:fa:36:4d:fc:be:f6:d5:ff:9d:74:2a:72:86:8d:
d9:02:9b:ee:32:c8:d9:e0:8d:2b:cb:f9:0b:20:ca:1f:2a:44:
3a:95:b7:f2:1c:b2:3c:5a:84:9c:34:23:0d:22:06:d8:d8:f9:
4b:1a:6d:c4:82:d4:be:d9:56:c7:52:ed:dc:9b:d6:cf:48:c6:
bc:55:eb:9b:dd:b8:fa:c9:59:d0:b3:9d:63:67:58:f3:20:7f:
5f:b6:39:2e:98:f3:d3:5e:43:5f:cc:3a:4e:29:61:47:c3:67:
11:1b:0a:89:f3:5e:5b:41:82:7a:dd:a6:8d:fc:87:0f:ad:1c:
7f:91:93:fe:1e:21:f9:d9:19:95:8c:3b:a0:8f:f3:95:89:03:
b5:d8:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:14 2026 by rpki-client