
$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/34352e3136302e3130382e302f32322d3233203d3e203134383638.roa
File: 34352e3136302e3130382e302f32322d3233203d3e203134383638.roa (raw, json)
Hash identifier: ZoYm82w9Z7BRBxk7pbs78HXGbu+M0cy/w+uy8uA+Z5U=
Subject key identifier: 07:30:07:AD:5A:63:8D:B8:B4:9D:2D:8C:B9:33:06:91:E5:00:86:81
Certificate issuer: /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial: 4657F2610F658167C13945097010A528C1268CCC
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/34352e3136302e3130382e302f32322d3233203d3e203134383638.roa
Signing time: Mon 17 Aug 2026 17:48:33 +0000
ROA not before: Mon 17 Aug 2026 17:43:33 +0000
ROA not after: Mon 16 Aug 2027 17:48:33 +0000
asID: 14868
IP address blocks: 45.160.108.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 08:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:57:f2:61:0f:65:81:67:c1:39:45:09:70:10:a5:28:c1:26:8c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
Validity
Not Before: Aug 17 17:43:33 2026 GMT
Not After : Aug 16 17:48:33 2027 GMT
Subject: CN=073007AD5A638DB8B49D2D8CB9330691E5008681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:4d:53:7f:f2:7c:e1:a9:16:e1:20:4c:ff:
46:e5:f6:de:d8:89:2b:82:1b:c0:2f:69:3e:69:9f:
fa:16:ac:ce:69:27:e2:73:6d:ad:05:12:c3:0f:af:
77:ae:40:0a:3a:13:4a:de:1c:07:62:ed:7e:8e:52:
5a:4c:06:40:ca:53:28:7f:79:b0:44:76:be:4c:69:
c6:2b:e2:44:0f:c4:23:1d:3b:ee:f8:b1:70:ba:bd:
a2:dd:34:34:4c:7c:ad:8a:44:45:78:fc:73:ea:8f:
db:a4:cc:05:fb:1e:0a:e6:9b:a3:79:21:fd:ae:f1:
fa:75:cc:bd:be:33:8e:6a:cb:93:e6:2b:c1:e4:0b:
4c:3b:30:bd:7b:69:7c:61:2d:c2:cf:28:2f:7b:86:
22:95:d2:db:51:7b:02:ab:df:3e:19:7b:ce:38:9a:
e8:f3:89:e9:e0:fd:01:8a:ef:3c:f9:55:01:78:76:
24:49:31:15:3e:7a:fe:a2:0c:eb:4f:17:d9:07:89:
55:d5:ff:92:0a:fe:fe:fd:8f:b8:3b:42:46:45:9e:
61:f2:73:b5:2d:ac:e1:5b:18:a5:9a:90:2e:45:50:
40:f3:b8:e9:37:d6:f4:55:b1:ec:b4:1c:92:65:23:
be:c3:4e:9f:3a:20:9a:5b:d8:c7:8f:8b:f7:30:14:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:07:AD:5A:63:8D:B8:B4:9D:2D:8C:B9:33:06:91:E5:00:86:81
X509v3 Authority Key Identifier:
keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/34352e3136302e3130382e302f32322d3233203d3e203134383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.108.0/22
Signature Algorithm: sha256WithRSAEncryption
37:0a:7d:cb:e4:d0:85:9d:0b:d0:47:f3:43:3d:38:ee:3e:22:
19:cd:9b:b9:17:45:da:b2:36:1e:02:4c:9f:9c:8e:37:d8:63:
77:33:e0:d3:39:97:c7:e0:6c:b9:da:13:e5:69:19:16:45:35:
0a:79:09:de:8a:7b:01:10:d9:15:8d:36:a7:d5:30:69:a7:ab:
49:60:aa:36:7d:98:80:8b:86:c9:45:38:bf:d5:ab:5f:4e:da:
35:8f:70:40:2d:0f:4e:56:ad:c9:6f:ac:b9:67:cd:8c:d8:60:
19:47:8e:d6:51:0a:73:5c:f4:ac:7d:f6:6d:6c:a3:7f:49:9a:
6f:14:a4:55:d6:e9:11:ae:a7:7a:a7:f1:53:50:0f:d9:c8:a0:
db:eb:b0:cb:5b:3d:f2:17:b5:1f:93:cb:44:19:37:7d:3d:7a:
16:9d:ce:68:66:61:2f:da:50:b0:a1:0a:f9:c8:77:f4:17:c4:
9d:d0:e3:d0:aa:03:f6:09:23:51:ab:3a:22:fb:66:03:6a:5d:
0e:28:7e:a1:9d:a3:c2:76:b2:4f:3f:72:32:81:01:95:05:a7:
a5:91:34:ba:03:63:64:23:d1:19:6b:35:78:1f:37:38:6a:a0:
31:58:c5:ce:cc:fb:85:4e:34:7a:07:13:b7:9f:fe:ac:07:39:
b1:42:83:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURlfyYQ9lgWfBOUUJcBClKMEmjMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyMDY1NzUwOEQ5MDYwQzNDNkU5Mzk0Mjc4ODNBNDcx
RjREQTM0RjAeFw0yNjA4MTcxNzQzMzNaFw0yNzA4MTYxNzQ4MzNaMDMxMTAvBgNV
BAMTKDA3MzAwN0FENUE2MzhEQjhCNDlEMkQ4Q0I5MzMwNjkxRTUwMDg2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BU1Tf/J84akW4SBM/0bl9t7Y
iSuCG8AvaT5pn/oWrM5pJ+Jzba0FEsMPr3euQAo6E0reHAdi7X6OUlpMBkDKUyh/
ebBEdr5MacYr4kQPxCMdO+74sXC6vaLdNDRMfK2KREV4/HPqj9ukzAX7Hgrmm6N5
If2u8fp1zL2+M45qy5PmK8HkC0w7ML17aXxhLcLPKC97hiKV0ttRewKr3z4Ze844
mujzieng/QGK7zz5VQF4diRJMRU+ev6iDOtPF9kHiVXV/5IK/v79j7g7QkZFnmHy
c7UtrOFbGKWakC5FUEDzuOk31vRVsey0HJJlI77DTp86IJpb2MePi/cwFHwZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBzAHrVpjjbi0nS2MuTMGkeUAhoEwHwYDVR0j
BBgwFoAUmSBldQjZBgw8bpOUJ4g6Rx9No08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGtmTExzaE5BOEtCVjFtaUpNZ2p2OTV2Z2ZrdmE4V3pndktVNEFvaGM3
WWovMi85OTIwNjU3NTA4RDkwNjBDM0M2RTkzOTQyNzg4M0E0NzFGNERBMzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MjA2NTc1MDhEOTA2MEMz
QzZFOTM5NDI3ODgzQTQ3MUY0REEzNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRrZkxMc2hOQThLQlYxbWlKTWdqdjk1dmdma3ZhOFd6Z3ZLVTRBb2hjN1lqLzIv
MzQzNTJlMzEzNjMwMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMTM0
MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaBsMA0GCSqGSIb3DQEBCwUAA4IBAQA3Cn3L5NCF
nQvQR/NDPTjuPiIZzZu5F0XasjYeAkyfnI432GN3M+DTOZfH4Gy52hPlaRkWRTUK
eQneinsBENkVjTan1TBpp6tJYKo2fZiAi4bJRTi/1atfTto1j3BALQ9OVq3Jb6y5
Z82M2GAZR47WUQpzXPSsffZtbKN/SZpvFKRV1ukRrqd6p/FTUA/ZyKDb67DLWz3y
F7Ufk8tEGTd9PXoWnc5oZmEv2lCwoQr5yHf0F8Sd0OPQqgP2CSNRqzoi+2YDal0O
KH6hnaPCdrJPP3IygQGVBaelkTS6A2NkI9EZazV4Hzc4aqAxWMXOzPuFTjR6BxO3
n/6sBzmxQoPP
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:19:41 2026 by rpki-client