
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
File: 34352e37302e3230372e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier: Hnl5PuYVxtXLxGfPFZbl4CJd4bWbhN7T7wl2tab5KI0=
Subject key identifier: 43:DD:12:1A:BA:32:71:FD:EA:01:A4:85:4E:77:47:64:65:6E:F6:6C
Certificate issuer: /CN=1E240D6445B519D0AD6DBAB1529023E200344D71
Certificate serial: 325E9923D3E17650CF9833027F28E0F78D9BB518
Authority key identifier: 1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
Signing time: Wed 25 Mar 2026 21:25:13 +0000
ROA not before: Wed 25 Mar 2026 21:20:13 +0000
ROA not after: Wed 24 Mar 2027 21:25:13 +0000
asID: 267586
IP address blocks: 45.70.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl
rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 11:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5e:99:23:d3:e1:76:50:cf:98:33:02:7f:28:e0:f7:8d:9b:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E240D6445B519D0AD6DBAB1529023E200344D71
Validity
Not Before: Mar 25 21:20:13 2026 GMT
Not After : Mar 24 21:25:13 2027 GMT
Subject: CN=43DD121ABA3271FDEA01A4854E774764656EF66C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:bd:59:6f:6d:a4:eb:32:8c:bc:ff:61:b2:
77:50:88:ee:9e:37:ec:7b:ad:be:fa:ed:62:83:eb:
95:09:b2:3b:c9:77:7c:25:e3:07:70:6f:e4:d8:4e:
b1:d2:3d:07:1d:6e:c6:14:3e:79:db:5a:25:24:22:
5d:80:36:a0:8b:e6:aa:e0:95:d4:1e:a8:f7:65:15:
7e:c2:46:32:83:47:5f:20:ec:5e:1d:8b:56:52:82:
8e:56:b7:22:3a:3c:77:e3:b7:81:ca:66:b3:38:e3:
fa:c9:30:58:b3:71:87:3e:af:83:33:55:6a:7e:9b:
3c:d2:94:d2:de:4b:40:88:2d:98:c7:d2:ad:b0:a8:
19:05:6c:a8:8d:9d:43:db:a6:6c:76:6f:90:d8:fb:
0a:25:a3:18:9d:84:90:d0:78:f7:61:c8:02:5c:4d:
13:f0:ae:db:59:33:aa:bd:78:10:5a:53:1c:ae:d8:
76:64:85:3b:2a:45:8f:25:a0:58:17:e9:78:de:b4:
7a:da:f3:d6:9c:e1:6b:3b:58:bc:6c:5a:1d:c2:40:
c3:17:6a:8c:24:69:f9:b3:6e:92:b0:d7:c3:e6:5d:
1a:c5:b9:df:06:9f:13:f5:d2:55:c1:54:c0:9d:52:
36:70:84:2e:c1:f9:26:da:e1:5a:0f:ed:06:8c:a9:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:12:1A:BA:32:71:FD:EA:01:A4:85:4E:77:47:64:65:6E:F6:6C
X509v3 Authority Key Identifier:
keyid:1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.207.0/24
Signature Algorithm: sha256WithRSAEncryption
50:60:96:5b:e1:9c:57:e2:92:ee:26:cd:a5:74:6c:08:a3:15:
ba:28:d6:57:9f:ec:69:3b:d3:ce:a7:1e:9c:d1:13:2c:fe:69:
8a:34:6b:cc:e4:fa:e8:94:f5:33:09:13:48:d1:2c:98:5a:9e:
a4:11:fe:ea:ee:63:95:5f:af:31:df:b4:60:80:5a:17:4c:f5:
03:49:d0:59:cc:5f:01:d8:3b:cc:31:9d:44:bd:f3:40:8c:e1:
58:dc:8c:09:b8:8c:48:e9:bc:f6:aa:7f:b6:d2:11:2c:4d:71:
50:5d:71:b7:4e:d9:fb:2e:d2:5e:f2:c1:a1:f1:02:ff:c5:51:
3c:5a:f4:e5:82:e9:b4:1c:96:0a:d5:57:c2:28:4d:c3:53:49:
e8:c5:58:cc:83:55:05:db:03:bb:e3:ae:d2:93:ce:1b:09:5f:
d8:4f:af:6b:74:85:be:7d:23:83:a7:f8:b2:b8:39:eb:c3:9c:
bc:1a:d4:c6:94:fd:2f:54:e1:94:00:d9:a4:07:cd:2e:e0:30:
3c:5f:0f:a4:93:87:10:8c:37:59:4a:e6:4c:a0:da:52:22:ff:
12:62:8a:e5:71:99:c6:a6:db:6a:26:85:0e:a8:4b:7e:fe:f0:
62:1d:ec:b2:ef:a2:42:fc:ff:e5:84:0f:e7:3f:33:a5:95:bb:
8e:c1:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:45:18 2026 by rpki-client