
$ rpki-client -vvvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
File: 34352e3232382e33372e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier: 64W7QdFra9AOWOBvAgKchn4cSCrRUEM04mGU54FE9co=
Subject key identifier: 70:2A:84:49:80:3C:F5:76:7B:D3:51:6C:4F:22:4F:0D:9E:EE:8F:34
Certificate issuer: /CN=903B05A529B3321EF7CBA80EA0C91BBAC698B824
Certificate serial: 225891B953932AFA848767E3BD56C50B6086264B
Authority key identifier: 90:3B:05:A5:29:B3:32:1E:F7:CB:A8:0E:A0:C9:1B:BA:C6:98:B8:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
Signing time: Fri 31 Jul 2026 12:41:23 +0000
ROA not before: Fri 31 Jul 2026 12:36:23 +0000
ROA not after: Fri 30 Jul 2027 12:41:23 +0000
asID: 271699
IP address blocks: 45.228.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.crl
rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 21:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:58:91:b9:53:93:2a:fa:84:87:67:e3:bd:56:c5:0b:60:86:26:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903B05A529B3321EF7CBA80EA0C91BBAC698B824
Validity
Not Before: Jul 31 12:36:23 2026 GMT
Not After : Jul 30 12:41:23 2027 GMT
Subject: CN=702A8449803CF5767BD3516C4F224F0D9EEE8F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:18:ac:9f:f8:ad:36:59:da:26:63:dd:91:
9e:84:8f:24:a1:69:5c:21:77:f6:95:92:9e:4c:a8:
47:e8:ea:80:4e:3d:98:24:82:ff:23:79:83:ef:55:
cc:6e:57:9d:27:86:9f:85:cd:e1:f5:b7:2e:0a:62:
d9:76:bd:a5:30:fb:fb:f1:f2:9c:be:e6:f8:cf:24:
b8:b0:cb:6b:08:74:ee:59:87:70:4f:95:83:23:3f:
dc:e3:73:46:43:34:80:20:4a:47:18:ef:cc:5e:65:
f7:ee:c3:d2:ad:b8:f4:b0:6e:54:3d:1f:cd:89:de:
2a:1f:93:ea:99:fd:fc:26:4c:e6:3c:bc:b1:e4:f4:
96:61:97:e3:92:90:8f:18:19:e8:44:47:80:e2:90:
51:1b:05:55:cf:46:bb:f5:d7:ef:ed:20:d4:8f:25:
b3:48:9e:4d:9f:08:4c:d3:e1:9d:6b:a3:cb:1d:66:
0a:22:b5:0b:79:d7:05:ca:d7:b5:de:86:ed:00:b4:
ff:53:b5:1a:d0:50:78:1b:5a:2d:8e:6b:c6:b8:35:
a0:9c:b7:92:20:ba:e2:8c:17:84:27:45:3b:1f:04:
0b:96:f2:cd:85:be:eb:7b:cf:d0:7e:c6:a5:51:39:
bc:e2:a8:0b:6c:73:2d:12:97:bc:f0:3a:61:38:c6:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:84:49:80:3C:F5:76:7B:D3:51:6C:4F:22:4F:0D:9E:EE:8F:34
X509v3 Authority Key Identifier:
keyid:90:3B:05:A5:29:B3:32:1E:F7:CB:A8:0E:A0:C9:1B:BA:C6:98:B8:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.37.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a8:6c:dd:31:99:35:a3:32:4c:f5:e3:47:e2:44:6c:50:02:
a0:28:23:06:6f:da:be:91:c8:41:3e:80:29:e6:83:0b:fc:44:
e4:56:aa:e2:67:0c:c6:00:2b:72:27:2f:85:c0:4e:41:13:95:
c0:2a:c7:e6:e6:ac:59:b6:be:af:cb:14:e1:6c:ca:c1:cc:2e:
1b:cf:e1:f7:be:93:74:5a:07:ad:85:7c:85:10:16:ab:b8:c6:
8c:98:e4:9b:46:07:f8:0e:89:76:c7:64:48:8a:7c:c7:47:dd:
15:fe:73:bf:e6:21:45:32:eb:19:11:97:a8:97:c9:84:1f:ff:
51:81:68:6b:d7:2f:b3:51:13:64:d6:c4:5c:44:d1:42:c2:9c:
ef:8c:f4:6e:ca:85:e7:ad:da:9b:aa:27:cd:93:20:1e:b7:0f:
e9:d2:5f:d7:08:2d:4d:08:03:21:f1:0b:31:1f:43:25:76:7c:
46:eb:5e:ee:61:d3:b3:23:56:1b:37:1b:35:3a:af:27:44:38:
84:23:ec:65:d5:d5:23:b0:a2:6f:c5:04:6b:d1:97:e2:af:4f:
39:7e:89:81:44:57:20:73:b1:fc:18:9f:3b:96:bd:3c:59:67:
01:0a:10:22:37:c7:8c:39:d4:f5:8e:8f:88:4f:cd:29:cd:c0:
a0:6b:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:29:31 2026 by rpki-client