
$ rpki-client -vvvf rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa
File: 34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa (raw, json)
Hash identifier: OFpeN5Ato1Nt0wSJaQL2RPzf+mQ2YMCrvt9fNPVRyqw=
Subject key identifier: 86:A3:CF:7A:40:D5:2F:9F:12:31:8E:50:86:38:C2:9F:51:A4:5F:B4
Certificate issuer: /CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
Certificate serial: 07A07F2D18902B6D9C354CDC88D4F0B03FA6529A
Authority key identifier: 0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa
Signing time: Wed 23 Sep 2026 00:40:11 +0000
ROA not before: Wed 23 Sep 2026 00:35:11 +0000
ROA not after: Wed 22 Sep 2027 00:40:11 +0000
asID: 267397
IP address blocks: 45.233.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl
rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 02:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a0:7f:2d:18:90:2b:6d:9c:35:4c:dc:88:d4:f0:b0:3f:a6:52:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
Validity
Not Before: Sep 23 00:35:11 2026 GMT
Not After : Sep 22 00:40:11 2027 GMT
Subject: CN=86A3CF7A40D52F9F12318E508638C29F51A45FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:f4:b8:ed:a0:46:0a:26:df:57:23:58:52:
6f:4c:70:95:f5:8b:9f:06:ba:7e:3d:95:ea:22:c7:
bf:f8:dc:7b:75:75:33:d8:98:90:aa:fc:c2:b5:d1:
09:10:8d:9b:6f:01:a9:25:60:b7:e4:27:2f:60:c1:
d9:d0:06:79:27:ed:18:8a:5d:21:8e:a3:3d:76:d0:
48:7e:d8:23:13:44:cd:6b:a2:51:a3:ec:ac:68:fb:
c2:41:6a:cc:d9:85:3d:19:fd:9d:ce:cf:9c:9a:8c:
37:61:93:fc:11:d9:f0:3c:80:9d:9a:a1:24:00:22:
80:4e:b7:1e:46:54:dc:b3:47:ee:9b:4a:64:87:54:
f7:c4:8f:ae:1b:7a:04:f4:83:89:41:a1:b6:40:31:
8c:b6:b2:0e:75:77:95:65:3f:3c:c2:76:a9:5c:ec:
9f:c6:cb:ba:86:28:54:67:79:d8:c8:c4:f9:3e:84:
a3:11:f8:0b:bb:28:0c:27:08:ae:78:6f:50:1a:1b:
1a:07:65:88:55:f8:f2:2e:d5:eb:56:ee:f0:fa:25:
fe:b9:27:eb:c5:42:c5:5c:8c:02:18:4f:d6:e4:98:
24:37:0f:fa:03:2a:c8:f3:18:bb:ad:c4:bd:ba:f9:
8e:94:03:d6:e0:84:ac:8d:71:a4:6f:40:ce:b4:66:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:CF:7A:40:D5:2F:9F:12:31:8E:50:86:38:C2:9F:51:A4:5F:B4
X509v3 Authority Key Identifier:
keyid:0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230342e302f32322d3232203d3e20323637333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:ec:c9:39:33:a1:0d:2c:69:36:e4:99:85:3e:78:fa:cc:aa:
ac:2d:28:27:a8:74:48:43:a8:dd:4c:04:ce:b5:23:7d:5e:a2:
37:ed:a9:f6:39:ae:d9:4d:f1:ef:2f:a2:cb:9a:eb:cd:40:8a:
46:1e:2f:bc:47:54:e1:fb:81:92:10:c5:56:6f:3a:99:78:ef:
3e:f1:8c:ac:77:10:a5:f1:c5:be:2a:fd:51:80:a8:f9:82:e3:
e0:12:72:bd:63:26:eb:a2:8c:63:1b:83:46:f1:63:ae:05:a0:
4b:0f:87:bb:df:09:c7:73:22:52:b7:3c:d4:cd:f2:74:9f:70:
79:15:02:b6:68:1a:a1:37:68:d1:9c:02:e1:15:9c:49:fd:f5:
e9:a9:c5:07:bd:f2:17:60:9f:db:9b:bd:6f:d5:a7:4a:34:c0:
93:5c:16:82:05:e3:f3:ef:66:6c:b5:5b:28:13:0a:c7:e9:a5:
41:bd:77:65:19:0a:2d:71:fd:6f:fc:39:8d:a3:2c:3f:b2:9b:
a4:98:75:cc:5a:c3:6b:9e:f7:d6:c4:fa:a8:97:18:df:06:c8:
51:24:af:b5:9e:f3:bb:c1:5d:0e:52:56:56:c3:30:39:aa:d9:
9f:78:07:02:17:47:f7:10:bf:e0:7c:ee:5d:ea:0f:0d:6d:2d:
5b:98:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:34:28 2026 by rpki-client