
$ rpki-client -vvvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32322d3234203d3e20323638373436.roa
File: 34352e3137312e3232382e302f32322d3234203d3e20323638373436.roa (raw, json)
Hash identifier: tEz0p+H27tdiZuhSSK7kUmnMXwsu9eiD3h/FUQN6Hu0=
Subject key identifier: 96:EA:51:05:5D:0E:4C:2C:D2:5A:53:97:90:5E:BC:17:21:1A:AC:85
Certificate issuer: /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial: 2A8AC4AB0180B679A43324326B7AC859A3D05779
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32322d3234203d3e20323638373436.roa
Signing time: Mon 03 Aug 2026 19:22:20 +0000
ROA not before: Mon 03 Aug 2026 19:17:20 +0000
ROA not after: Mon 02 Aug 2027 19:22:20 +0000
asID: 268746
IP address blocks: 45.171.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 11:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8a:c4:ab:01:80:b6:79:a4:33:24:32:6b:7a:c8:59:a3:d0:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Validity
Not Before: Aug 3 19:17:20 2026 GMT
Not After : Aug 2 19:22:20 2027 GMT
Subject: CN=96EA51055D0E4C2CD25A5397905EBC17211AAC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ea:4c:a6:b6:b6:b4:dc:fb:dd:53:5f:cf:15:
97:34:68:4e:4d:2f:e4:0e:fa:df:df:f0:7a:fa:ce:
70:0d:d6:d8:2c:31:4d:fb:12:ef:15:43:9e:68:54:
be:ce:ca:6c:51:47:17:42:39:19:0a:a3:62:22:04:
cf:54:ff:e2:e0:58:db:8d:0e:cb:f3:94:c7:b5:d7:
9f:f2:61:ff:4e:f0:40:51:cf:73:dc:52:ab:c4:e5:
7d:92:75:85:64:eb:c5:1f:cd:7f:5b:81:eb:8c:b5:
05:53:33:b0:7c:7b:c8:b3:94:5a:f5:1a:9b:0a:6e:
91:9c:f1:8a:a4:df:26:67:d4:7f:a9:25:70:62:01:
03:28:c9:17:64:9f:a5:35:48:54:d5:19:3d:00:b7:
ea:da:8e:20:00:e0:be:16:f7:b6:fd:35:81:4f:a6:
5e:68:6b:40:df:23:70:d9:52:c7:f3:f4:73:90:4b:
42:f6:44:40:42:5c:9d:0f:e3:ac:d5:8a:d2:af:2b:
9c:09:99:a7:4b:34:bf:e9:6a:1c:3a:80:c7:55:52:
85:30:11:5c:75:5a:05:eb:a0:64:fc:50:8c:67:fb:
ef:50:cb:8e:c6:9b:a8:4d:53:95:ad:93:0d:14:98:
91:cd:d6:22:c9:80:f5:6a:9b:a9:cd:3a:e7:56:fb:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:51:05:5D:0E:4C:2C:D2:5A:53:97:90:5E:BC:17:21:1A:AC:85
X509v3 Authority Key Identifier:
keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32322d3234203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.228.0/22
Signature Algorithm: sha256WithRSAEncryption
58:c8:f8:69:a5:88:02:c6:5f:17:1d:0f:5c:f3:4e:83:48:4c:
44:e5:df:02:53:8f:7c:fa:0e:8f:3f:ae:ae:95:59:c6:f3:e4:
90:3d:51:ca:9c:97:17:63:40:25:42:68:6e:20:df:49:47:43:
c4:ae:44:ca:3d:a1:d0:14:ed:f1:83:3c:63:1f:5c:1e:c4:e1:
58:1e:5b:9e:65:75:e1:4c:32:b3:fd:39:b6:31:d5:85:b5:48:
61:af:b5:de:dd:03:7f:93:9e:e7:4f:18:20:1b:78:ad:16:9a:
e9:94:dd:a0:ae:33:07:ec:2a:4c:bc:4d:af:9f:c1:c3:d2:86:
14:93:eb:31:09:c5:9b:ab:30:d0:9f:19:e8:57:ef:40:e7:5e:
8a:58:82:88:a0:a9:02:9c:55:0a:c8:77:f5:51:09:61:25:ca:
74:e4:fc:8b:b1:63:91:81:9b:58:e7:25:48:cc:e2:ba:9d:38:
bf:ca:8e:7f:dd:c0:70:fd:52:06:64:6c:5c:07:3f:7e:9d:46:
16:a0:fa:d5:31:a6:63:1c:41:4b:94:c6:67:a9:02:09:de:eb:
fd:c5:e0:40:51:f4:8a:79:4e:cd:5a:fc:8c:10:ea:52:82:79:
cf:d7:f0:13:9f:b5:07:58:3e:73:d4:b5:3d:9b:df:33:00:95:
47:cc:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:02 2026 by rpki-client