
$ rpki-client -vvvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
File: 34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (raw, json)
Hash identifier: ehTL3l6riFSXB5vXSMNDnibQbQiO8aGFbRxrohfYbgA=
Subject key identifier: E9:84:86:66:FE:E7:5C:AA:73:3D:EC:8C:6C:8D:8D:4F:57:18:6A:86
Certificate issuer: /CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
Certificate serial: 0221FC0EEC801ABF7DA076A3159C2F7DD09A0E11
Authority key identifier: 10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
Signing time: Fri 28 Aug 2026 23:21:45 +0000
ROA not before: Fri 28 Aug 2026 23:16:45 +0000
ROA not after: Fri 27 Aug 2027 23:21:45 +0000
asID: 268464
IP address blocks: 45.161.120.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 12:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:21:fc:0e:ec:80:1a:bf:7d:a0:76:a3:15:9c:2f:7d:d0:9a:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
Validity
Not Before: Aug 28 23:16:45 2026 GMT
Not After : Aug 27 23:21:45 2027 GMT
Subject: CN=E9848666FEE75CAA733DEC8C6C8D8D4F57186A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:97:07:4d:4c:9b:60:bf:1c:dc:88:9c:81:
8f:e2:3f:04:0b:ea:cc:e8:26:a8:a4:de:2c:71:f7:
83:f1:27:fc:5e:24:1f:72:7b:35:75:09:d5:f3:8c:
d6:a7:84:58:8d:f4:7d:35:95:1e:a4:44:8d:12:96:
22:1e:59:a9:e7:5c:7b:bc:db:66:26:29:f0:f8:c1:
f3:dc:9c:76:3d:c9:47:83:d2:cb:fb:89:88:23:e9:
46:86:bc:0f:c2:46:d5:83:b4:2c:f7:bc:2b:4a:8f:
0c:57:a8:c7:de:9e:03:37:c6:10:34:b0:45:b6:0e:
46:fe:9e:23:b6:ce:f8:4d:0d:94:af:ce:4c:6d:06:
7b:46:a3:e2:df:0a:d9:f7:f3:54:79:42:5c:0a:35:
e2:b0:75:fb:87:9b:7c:c9:32:32:52:d9:04:b1:a6:
f7:81:9e:e8:5e:8a:21:6e:24:40:96:49:9e:7a:ba:
a2:5a:74:51:6a:0d:2e:2b:af:f8:b2:df:85:e2:33:
9b:e9:5a:16:d0:d0:cf:5c:3d:b1:68:64:e3:58:0f:
59:17:a3:f9:f2:83:d8:2f:fe:71:47:9f:d5:66:34:
7e:e4:a1:65:75:a9:a0:4a:f4:0c:35:e0:ed:ed:c8:
3c:e6:e1:77:24:97:90:0d:ec:b1:d0:bc:1e:6d:de:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:86:66:FE:E7:5C:AA:73:3D:EC:8C:6C:8D:8D:4F:57:18:6A:86
X509v3 Authority Key Identifier:
keyid:10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:92:f1:d4:d4:dc:f3:c0:32:16:55:0c:eb:4b:89:73:04:da:
5d:8b:5e:a6:91:96:b2:a0:a1:fd:68:eb:9d:95:f3:ef:fb:e6:
5a:3d:2a:2a:1b:ce:8e:c6:e8:f3:21:c9:3f:6e:64:51:57:55:
f8:14:2f:61:7f:97:41:8d:7e:58:9c:57:db:1d:fe:58:d4:20:
d2:df:74:c8:db:32:de:0c:4d:8f:24:74:e2:16:c5:eb:a2:e3:
b5:c6:05:90:cb:7f:ec:2e:0c:d7:ed:5e:37:b8:cb:0f:3b:9e:
a8:c6:d2:93:22:5d:f8:46:52:19:2b:29:80:10:b5:d1:63:9b:
74:c3:ac:71:01:01:fd:4a:6e:ed:c7:bd:f6:e3:fc:02:fa:44:
e1:22:8f:81:2c:09:35:eb:ce:85:f5:13:15:e9:17:d6:8f:02:
0d:8f:7b:5c:1a:38:50:8c:29:1f:1e:1a:82:b1:40:a0:6c:ac:
cc:39:df:90:fe:3e:6b:22:d6:2f:de:fa:10:81:09:57:a6:e3:
e2:30:32:83:39:b0:78:38:b0:cb:fe:e3:fb:75:98:c5:6a:73:
70:36:62:e2:ad:d9:c8:93:23:dc:46:60:26:d1:b8:45:76:0e:
38:d4:3a:a0:e8:f5:04:bf:22:74:92:97:c2:51:ec:89:3f:2f:
75:83:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:19:51 2026 by rpki-client