
$ rpki-client -vvvf rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/34352e3232352e37362e302f32322d3332203d3e20323731303235.roa
File: 34352e3232352e37362e302f32322d3332203d3e20323731303235.roa (raw, json)
Hash identifier: 7XoeoCiY5+JuCxuWHQyBMsTHt76XiXNE0aja0yrNKgY=
Subject key identifier: 90:4C:06:76:B3:8C:9B:1D:0B:E7:71:B3:C6:1C:3E:3B:00:C0:DF:DC
Certificate issuer: /CN=C233E20BEB58B6C635AD312442B2CCA24D2469B8
Certificate serial: 10D5C71D8FA51320ED06F39E0379C1477DA77ECC
Authority key identifier: C2:33:E2:0B:EB:58:B6:C6:35:AD:31:24:42:B2:CC:A2:4D:24:69:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C233E20BEB58B6C635AD312442B2CCA24D2469B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/34352e3232352e37362e302f32322d3332203d3e20323731303235.roa
Signing time: Mon 24 Aug 2026 12:56:03 +0000
ROA not before: Mon 24 Aug 2026 12:51:03 +0000
ROA not after: Mon 23 Aug 2027 12:56:03 +0000
asID: 271025
IP address blocks: 45.225.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/C233E20BEB58B6C635AD312442B2CCA24D2469B8.crl
rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/C233E20BEB58B6C635AD312442B2CCA24D2469B8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C233E20BEB58B6C635AD312442B2CCA24D2469B8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 02:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d5:c7:1d:8f:a5:13:20:ed:06:f3:9e:03:79:c1:47:7d:a7:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C233E20BEB58B6C635AD312442B2CCA24D2469B8
Validity
Not Before: Aug 24 12:51:03 2026 GMT
Not After : Aug 23 12:56:03 2027 GMT
Subject: CN=904C0676B38C9B1D0BE771B3C61C3E3B00C0DFDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:c6:a7:5f:13:68:e8:04:35:17:e6:ce:e9:
01:98:1b:4c:7c:5f:61:83:57:f0:6f:1b:93:e2:83:
15:fb:1e:d8:9a:e9:8b:57:02:a6:98:57:c3:a9:d3:
a8:34:9e:85:ec:d7:58:80:20:dd:e0:cf:d4:d1:ed:
3f:d1:c6:f2:29:cc:e1:74:cd:c1:26:a8:61:07:97:
bb:8d:38:99:1b:56:bb:fe:28:6c:58:4c:c5:8e:cc:
07:4e:b5:5b:69:0c:50:68:cb:a9:8d:2b:ba:37:c0:
34:9d:d4:fc:f5:0a:d2:76:5c:db:c6:ed:83:8f:74:
e9:cd:46:07:2b:f0:44:74:f6:f3:c6:46:ec:c5:f6:
ea:9f:aa:89:5b:43:6c:1f:f3:57:04:df:37:f8:e5:
80:ec:4c:ca:db:20:4c:a8:f7:86:da:3f:c3:9f:e7:
99:3a:22:c7:48:a5:7b:ea:db:7d:e5:c8:b8:a2:12:
eb:35:b0:22:1f:63:16:d5:15:3d:6f:ae:a6:39:af:
29:a2:7e:3a:a4:f0:20:a9:1d:95:a3:13:b4:40:f0:
ae:b8:63:91:dc:9f:bc:b8:23:a5:0b:e8:2e:af:ca:
18:34:60:e7:00:87:6c:79:71:90:9a:6c:72:c3:20:
45:9c:41:ea:17:64:bf:1a:ab:07:2a:65:74:13:71:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:06:76:B3:8C:9B:1D:0B:E7:71:B3:C6:1C:3E:3B:00:C0:DF:DC
X509v3 Authority Key Identifier:
keyid:C2:33:E2:0B:EB:58:B6:C6:35:AD:31:24:42:B2:CC:A2:4D:24:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/C233E20BEB58B6C635AD312442B2CCA24D2469B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C233E20BEB58B6C635AD312442B2CCA24D2469B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/34352e3232352e37362e302f32322d3332203d3e20323731303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.76.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ba:7d:81:81:70:44:f2:f3:dc:28:e2:38:4b:04:5c:a2:4c:
6e:66:fe:eb:1d:a2:71:bd:3e:e3:f8:75:6c:a9:53:95:21:f4:
b8:e5:d7:7d:ec:86:05:bb:28:9e:b7:b8:9a:4c:09:87:92:16:
27:af:90:9f:65:30:97:1f:2a:3c:2a:fb:e8:55:c3:0a:2b:da:
db:7a:30:d2:d6:31:38:3d:a9:dc:61:4d:11:e3:8e:95:f0:5d:
1c:5c:ad:25:fe:49:db:5a:39:c4:e9:02:4f:ce:46:73:7f:0f:
cd:f4:fa:74:ec:97:54:74:26:08:28:e1:33:2d:3f:b2:b6:f1:
dd:cc:b8:f0:7d:d4:39:2d:98:d4:56:72:b8:a9:55:f0:df:5a:
e0:2d:19:aa:cd:65:be:1b:2f:e7:3d:1f:2e:57:c9:9c:f7:84:
a0:1e:56:e9:c2:59:37:34:e9:34:a0:88:67:0f:e0:5b:9e:2c:
fd:08:83:e1:e0:b6:50:e7:95:18:b4:cc:67:12:cd:88:72:7c:
3b:1e:d0:0b:f4:fd:f6:a3:cb:8c:08:d1:f6:ee:de:cd:0f:13:
41:0b:98:ee:06:c9:6a:97:67:75:82:a9:0b:b6:53:cb:92:6e:
70:6a:96:89:56:04:18:da:86:f3:60:21:9c:92:85:c8:43:c9:
31:17:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:32:08 2026 by rpki-client