
$ rpki-client -vvvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
File: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier: Xc9xjXdJWnC/EwkLyGzFNcwy5enAD545f4Z3H5rjfXQ=
Subject key identifier: CF:EF:0D:78:E8:6C:44:32:50:CE:FD:8A:8C:3B:25:84:E2:BD:8E:23
Certificate issuer: /CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Certificate serial: 6C8A73F95A212192A7992554F72910278B98803B
Authority key identifier: 02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
Signing time: Wed 14 Oct 2026 18:10:55 +0000
ROA not before: Wed 14 Oct 2026 18:05:55 +0000
ROA not after: Wed 13 Oct 2027 18:10:55 +0000
asID: 267373
IP address blocks: 45.234.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 00:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:73:f9:5a:21:21:92:a7:99:25:54:f7:29:10:27:8b:98:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Validity
Not Before: Oct 14 18:05:55 2026 GMT
Not After : Oct 13 18:10:55 2027 GMT
Subject: CN=CFEF0D78E86C443250CEFD8A8C3B2584E2BD8E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:69:88:87:dd:bf:8e:16:28:70:1b:1d:97:
46:db:6a:90:ad:3b:13:ff:4d:12:03:b1:10:07:b9:
65:83:ff:df:0d:e1:7b:b1:c0:fd:ee:63:60:1d:ca:
08:3f:33:35:9b:ae:6b:87:a1:39:b5:f4:d5:13:3a:
e0:74:53:3b:12:05:1c:c9:74:86:5a:13:57:f1:c1:
62:ad:b1:00:4d:25:04:81:ed:7c:e0:54:3f:73:1e:
67:73:76:5f:85:49:1a:84:78:d9:7a:da:c4:c1:47:
cf:15:12:c7:db:0b:89:59:cd:c4:93:3d:f7:cc:c6:
09:05:76:e2:cd:a2:f8:86:22:0b:9d:86:ed:3a:35:
cd:1e:a4:9c:3d:cb:c6:e2:c3:d4:e8:5c:92:f9:c0:
a2:6b:08:b8:73:8c:3e:bc:73:c1:7d:ff:fe:13:f1:
f8:4d:ad:94:b6:88:e8:1d:2a:bf:d3:ba:dd:63:07:
8d:59:e1:83:25:d8:55:ab:72:23:6c:8a:28:45:70:
2c:7a:d6:3e:34:d2:f0:af:a7:dd:54:a9:77:fb:cf:
62:26:c7:e7:37:f1:8e:3d:38:b3:1c:9f:b8:0e:34:
36:e5:fc:65:fa:88:af:17:ff:61:80:d8:96:67:85:
eb:1a:37:c8:70:2c:1c:24:3c:28:25:f4:3a:a1:4b:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:0D:78:E8:6C:44:32:50:CE:FD:8A:8C:3B:25:84:E2:BD:8E:23
X509v3 Authority Key Identifier:
keyid:02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.213.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:95:7d:cc:4b:60:51:4f:22:60:49:43:9b:8b:61:16:da:
fc:00:bb:92:54:b5:cc:9a:03:6b:9d:d3:16:ea:8a:fc:37:96:
6e:d8:4a:67:73:0b:0d:f4:f0:b6:fe:eb:d5:cc:f2:b1:e4:1a:
26:ef:d7:da:3b:78:1a:a0:22:48:9f:1c:3c:cb:ee:90:cd:00:
66:14:c1:fd:0b:7e:28:3a:ef:db:00:eb:93:6d:2b:36:e8:a7:
e8:27:a3:2b:ad:fc:76:9c:14:59:9a:81:20:9f:95:de:65:0d:
ad:90:7f:c8:62:27:fb:95:26:0d:9d:25:e0:29:f0:8e:ec:31:
c9:46:df:8c:82:3f:1f:53:dd:e7:3b:4b:76:a7:2d:22:ef:da:
91:42:cf:73:9f:12:6e:76:f3:7a:1e:ae:24:a1:3e:05:14:4c:
e3:b3:d9:4b:29:9d:5f:29:94:ad:57:f8:ff:27:02:58:d3:9c:
de:3b:45:e8:a7:72:76:12:3a:44:96:e9:01:01:68:bb:30:72:
24:9c:a3:fc:36:3c:41:7c:bf:a4:8c:6f:5e:61:0a:f2:3e:88:
be:3f:34:4b:dc:a5:66:cb:6d:4b:d0:20:ed:1a:f8:19:dd:f3:
c8:94:fc:e5:82:22:78:66:7d:ef:8f:81:e6:fc:20:28:99:e6:
1a:0a:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:10:34 2026 by rpki-client