
$ rpki-client -vvvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa
File: 34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa (raw, json)
Hash identifier: +KWf+JSluy3jrrTumkHtiZ4miZXOrr6qpV3O0ZfbVig=
Subject key identifier: 67:B7:88:2F:A6:D8:8A:47:B7:25:2A:8A:63:2C:A8:5E:6A:98:2C:E5
Certificate issuer: /CN=A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1
Certificate serial: 7C8518A51469EE166EAB1957987D8537A86F7AFB
Authority key identifier: A2:71:60:72:0E:9C:D1:E1:6E:0C:B5:E6:33:AA:48:5B:DA:1E:A8:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa
Signing time: Wed 21 Oct 2026 13:00:36 +0000
ROA not before: Wed 21 Oct 2026 12:55:36 +0000
ROA not after: Wed 20 Oct 2027 13:00:36 +0000
asID: 263047
IP address blocks: 45.174.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.crl
rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 16:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:85:18:a5:14:69:ee:16:6e:ab:19:57:98:7d:85:37:a8:6f:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1
Validity
Not Before: Oct 21 12:55:36 2026 GMT
Not After : Oct 20 13:00:36 2027 GMT
Subject: CN=67B7882FA6D88A47B7252A8A632CA85E6A982CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:f4:e6:e4:ca:2e:85:58:e1:9d:6f:4e:c0:
da:32:6b:4e:b5:43:16:d3:32:c4:a4:c4:79:a6:1f:
36:e9:bf:7f:69:3f:23:ad:16:b5:18:ed:1b:e3:19:
33:f7:1b:69:df:5f:9b:15:19:ca:f1:3f:5f:bc:ea:
06:d0:c8:ed:6c:41:f1:26:d4:76:4f:44:5a:41:de:
9e:7d:35:bf:2d:b6:45:c0:63:8b:c8:67:24:ea:ad:
6e:d7:6d:4d:19:9a:df:0d:ab:fc:1f:cd:25:7a:80:
ca:d9:6e:95:1d:82:bc:86:ce:ca:ef:0a:e9:01:01:
75:6c:ee:14:6a:87:dc:c9:2b:d3:e2:da:47:bb:52:
72:5d:90:f1:d8:fd:a3:b0:94:1b:bd:2c:e6:7b:90:
9b:54:90:8b:e9:eb:68:1f:7e:c1:0f:e7:e1:f4:d2:
ed:75:00:6d:59:36:9a:81:49:6d:4a:32:46:54:a0:
9e:87:97:36:3f:8c:9d:b6:17:85:5e:b8:f0:b2:8b:
be:57:43:1e:d7:09:ef:b5:13:5a:9d:25:05:b0:66:
b0:73:65:91:09:a6:75:00:ea:41:63:33:ea:62:dc:
d8:f4:1a:fc:f5:52:03:1e:e3:34:45:9a:69:bd:72:
13:5f:2a:78:92:69:95:79:85:b3:97:00:d8:50:96:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B7:88:2F:A6:D8:8A:47:B7:25:2A:8A:63:2C:A8:5E:6A:98:2C:E5
X509v3 Authority Key Identifier:
keyid:A2:71:60:72:0E:9C:D1:E1:6E:0C:B5:E6:33:AA:48:5B:DA:1E:A8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27160720E9CD1E16E0CB5E633AA485BDA1EA8C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.140.0/22
Signature Algorithm: sha256WithRSAEncryption
48:3d:70:37:be:5e:91:c5:ae:1f:d1:d5:d9:a7:75:5a:5b:83:
da:9a:db:17:ec:b1:40:66:7a:2b:ce:08:b3:6c:29:77:89:4d:
f2:87:06:91:98:25:b9:b3:9c:14:ca:9b:c9:06:09:55:0a:79:
7d:69:9d:fe:ca:45:38:a4:17:21:b0:db:40:3a:9d:b4:66:ff:
7b:a9:e7:83:48:9e:0b:e7:f8:9a:04:f3:7a:23:d9:6c:c9:0f:
c9:11:54:16:c0:54:9e:cf:39:34:eb:23:52:49:48:e0:59:07:
dc:ec:33:a1:36:04:34:b7:ae:2a:28:b0:54:c8:57:36:2f:46:
e6:c3:22:96:2a:e7:c7:85:b6:03:2a:d2:86:8e:fc:b1:c1:3d:
ac:58:0e:68:34:fd:42:17:8f:66:28:ea:93:25:df:eb:6d:33:
1b:b0:ac:76:7d:ee:11:cd:d6:62:10:a7:23:d7:d4:dc:95:66:
67:e9:e4:97:a2:27:0b:15:ab:a5:b2:cb:2b:32:13:97:91:1d:
90:41:22:e3:f8:b8:d2:ed:8f:e1:a7:0d:6b:e5:7d:8c:04:3c:
60:d5:a8:0b:18:1d:29:5f:98:01:81:90:54:06:93:24:2e:39:
b3:95:dc:62:b9:4f:a6:bf:fa:5e:bf:cc:6d:06:a1:60:94:06:
94:c3:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:57:31 2026 by rpki-client