
$ rpki-client -vvvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
File: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier: zsQQwHgM6IVcP19CcTxYippI+VLkCUZFWjTMf1HgdXk=
Subject key identifier: B5:3B:70:3E:E0:A2:41:22:4B:A6:7F:44:5B:F8:2A:7D:7A:14:B0:F2
Certificate issuer: /CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
Certificate serial: 7285D152D8F219E80A5E1417D668E28DB5750557
Authority key identifier: EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
Signing time: Wed 02 Sep 2026 21:07:01 +0000
ROA not before: Wed 02 Sep 2026 21:02:01 +0000
ROA not after: Wed 01 Sep 2027 21:07:01 +0000
asID: 267596
IP address blocks: 45.71.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl
rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 03:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:85:d1:52:d8:f2:19:e8:0a:5e:14:17:d6:68:e2:8d:b5:75:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
Validity
Not Before: Sep 2 21:02:01 2026 GMT
Not After : Sep 1 21:07:01 2027 GMT
Subject: CN=B53B703EE0A241224BA67F445BF82A7D7A14B0F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:32:fa:71:ec:51:6d:be:b5:66:0b:ae:93:
1e:c5:ed:27:1a:c3:44:62:44:b2:3f:54:29:77:6b:
fd:b9:3e:1a:fd:6b:b6:6a:1d:1b:46:f2:da:e5:38:
bb:c2:ec:2b:83:89:56:98:a5:1e:34:4b:eb:b8:c1:
a2:23:a6:92:10:87:d2:81:9d:93:a0:21:13:89:d9:
86:3b:5c:4a:f1:d3:a1:bf:4c:4a:5e:ac:9b:a3:e8:
98:77:38:53:c8:a8:d2:d3:79:c5:d2:94:ca:cc:3c:
1f:32:65:dc:a8:24:8d:50:62:d9:9f:c1:3c:bb:69:
12:95:46:9b:e8:e8:93:80:90:51:cf:e5:57:5d:15:
8c:ae:29:1a:0f:6c:a8:cd:2c:90:9b:5e:76:ec:37:
51:51:45:44:5e:02:10:10:17:f4:30:14:6b:3c:fa:
54:2d:50:ed:2c:63:5f:39:ad:14:56:b4:fd:ab:39:
2b:81:84:40:f3:0e:94:d6:52:33:63:84:ce:7f:02:
1a:9a:12:bb:15:b7:9b:a6:24:f6:fa:be:da:b8:d7:
ab:6c:23:7e:c7:00:48:10:67:39:3d:59:c6:6d:a0:
d8:64:be:a9:71:e4:56:ed:fb:d7:3b:d3:b6:37:eb:
ee:01:bf:0d:23:7e:b7:41:4d:1a:4b:9e:c4:09:a3:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:70:3E:E0:A2:41:22:4B:A6:7F:44:5B:F8:2A:7D:7A:14:B0:F2
X509v3 Authority Key Identifier:
keyid:EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32332d3233203d3e20323637353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.20.0/23
Signature Algorithm: sha256WithRSAEncryption
af:5a:ee:0b:62:93:40:1a:e6:e9:24:8f:d1:88:fa:f2:69:d9:
60:ae:9d:df:a7:11:12:5e:64:ec:28:fd:90:d1:03:09:99:33:
50:a2:e4:05:e5:e3:f1:bc:d0:c8:d5:9d:15:a8:5d:79:54:a7:
9f:1f:c6:53:50:44:4d:04:42:4b:25:bb:22:c1:69:8e:25:e7:
6a:49:c9:e9:a1:4b:df:33:c4:aa:ef:3c:5c:32:14:5a:fd:01:
a8:95:55:df:64:d0:fc:84:7c:6a:d0:6b:4d:78:82:ee:b9:a1:
91:aa:8e:2c:42:30:67:17:e4:68:ae:d6:17:24:4b:80:23:13:
42:e5:13:a5:cf:61:a0:11:8a:93:60:26:3b:b3:80:ee:50:a3:
8e:ee:c9:61:48:17:d2:2b:9b:bb:38:8e:a8:c9:a0:9f:ed:37:
5e:cd:88:c8:53:04:e7:a6:e9:2e:08:70:08:78:b7:04:83:51:
c2:fd:7e:46:dd:3f:fa:d8:5e:0f:90:56:5c:c2:9a:78:6e:55:
71:d0:60:66:4b:dd:f5:aa:9e:5d:c8:ff:80:99:70:94:b8:aa:
00:1e:1c:5d:dd:85:d4:58:86:f6:b7:7e:2f:40:7d:bc:47:9c:
ff:e9:74:b2:3f:f3:09:00:14:c5:82:15:fc:a2:9c:53:99:50:
83:87:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:21:46 2026 by rpki-client