
$ rpki-client -vvvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/34352e3233392e382e302f32322d3234203d3e20323634353632.roa
File: 34352e3233392e382e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier: +A2KlcAHuTpZuEXT4FJeaCdLkKdjYqk/zScV0RLpNVA=
Subject key identifier: A7:7B:A2:3D:AC:B3:0F:7A:90:C6:47:F9:75:DA:2E:C2:06:0D:68:E8
Certificate issuer: /CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
Certificate serial: 40D053D9BB177D800B64161E9E8FACAE7E1F8C5E
Authority key identifier: 0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/34352e3233392e382e302f32322d3234203d3e20323634353632.roa
Signing time: Sat 05 Sep 2026 18:46:11 +0000
ROA not before: Sat 05 Sep 2026 18:41:11 +0000
ROA not after: Sat 04 Sep 2027 18:46:11 +0000
asID: 264562
IP address blocks: 45.239.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl
rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Sep 2026 00:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d0:53:d9:bb:17:7d:80:0b:64:16:1e:9e:8f:ac:ae:7e:1f:8c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
Validity
Not Before: Sep 5 18:41:11 2026 GMT
Not After : Sep 4 18:46:11 2027 GMT
Subject: CN=A77BA23DACB30F7A90C647F975DA2EC2060D68E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:05:17:0f:eb:aa:8c:cd:57:e2:91:23:52:
6b:f0:f6:bb:c6:9b:2e:50:f6:d8:cd:30:72:cb:23:
66:05:97:5a:56:0a:60:fc:71:fa:cd:ec:74:cb:6f:
5d:2f:81:79:38:f5:ab:8f:37:44:d0:42:f3:3c:65:
58:c3:cf:34:ab:4a:17:b0:7e:57:9c:f2:e7:13:fb:
e6:a8:f1:c4:8d:4a:d2:d8:15:50:53:19:31:0e:9c:
76:0c:f8:d5:40:cf:35:14:0a:1f:86:aa:b8:d7:3a:
a6:a9:24:af:56:ed:d1:ba:da:8b:79:ab:ba:4e:fe:
c5:ef:9d:27:a9:35:50:9d:6b:c8:aa:73:68:18:42:
2d:ae:3a:73:06:c8:f4:99:c3:c6:9a:da:21:f2:63:
98:59:05:d9:a9:dc:c4:a1:ec:87:18:b9:0b:9c:7d:
6b:cd:d9:31:8d:a1:13:98:a9:d3:fd:7f:c2:e7:ab:
e0:13:5a:1e:ac:26:54:91:9b:db:f7:d4:97:cf:b1:
81:4e:18:f2:b0:7e:38:be:b0:03:79:0a:59:82:e2:
fd:4c:8e:3b:b2:13:91:9c:36:17:1f:68:e3:9b:27:
b0:b7:18:73:23:59:d2:01:76:d8:5b:1b:93:d0:7d:
d1:e9:9a:01:f5:03:50:37:31:f7:95:46:78:fa:19:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:A2:3D:AC:B3:0F:7A:90:C6:47:F9:75:DA:2E:C2:06:0D:68:E8
X509v3 Authority Key Identifier:
keyid:0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/34352e3233392e382e302f32322d3234203d3e20323634353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
61:90:00:ec:ef:9c:8c:9a:8e:f2:d6:e0:1f:8d:72:5d:7e:f0:
0a:e1:10:4e:f0:0c:05:d7:8a:55:30:56:5f:88:8f:46:e3:d6:
3f:ad:7d:ee:a8:c2:48:93:dd:0e:74:56:25:27:88:a1:fa:5e:
9f:87:52:22:bb:f9:31:7e:c7:f4:a0:91:c1:5b:7d:71:38:55:
75:29:28:60:19:9e:99:08:4a:62:c7:cb:22:c5:46:9d:3b:c9:
2d:c8:a6:aa:ef:40:be:78:a6:ee:31:ca:90:0b:7f:c4:55:cf:
2f:71:92:f2:e7:2f:92:2a:45:68:1b:8b:4d:5d:82:ae:05:79:
27:4b:d0:1d:1f:5b:6e:ad:0f:d7:d9:b7:82:ec:1e:02:0e:99:
92:40:12:76:b3:e3:96:7a:ff:38:ec:81:a9:ac:d1:d1:71:19:
9d:7a:6c:d0:36:16:13:fa:f4:29:a9:db:af:d0:fd:5d:12:20:
a6:1b:ba:39:9c:de:c3:9b:06:74:d6:4a:f6:e4:e9:0c:ff:13:
a0:25:88:fc:3c:72:25:15:e0:52:7a:b4:ea:a4:4d:76:b8:30:
aa:a8:cb:15:de:90:1b:26:40:dd:6b:ee:d5:27:e8:65:b4:f4:
0a:35:ad:d9:c1:77:56:b9:6e:95:51:29:1e:e7:24:8b:b4:df:
05:9c:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:14:13 2026 by rpki-client