
$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
File: 34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier: Lsb1ZWUKPGH+vGmNmMhTIQVvv5OguHf9Nn9OXNWOZnk=
Subject key identifier: AD:96:DC:A8:45:B5:C2:E1:87:20:66:B4:1E:71:B5:DF:9C:18:B4:D1
Certificate issuer: /CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
Certificate serial: 3F0AEC0CA7221EE09DAAC96DCA8CFF747330497C
Authority key identifier: 86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
Signing time: Mon 23 Feb 2026 19:22:30 +0000
ROA not before: Mon 23 Feb 2026 19:17:30 +0000
ROA not after: Mon 22 Feb 2027 19:22:30 +0000
asID: 269595
IP address blocks: 45.188.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl
rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 11:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0a:ec:0c:a7:22:1e:e0:9d:aa:c9:6d:ca:8c:ff:74:73:30:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865E4084EB9CC37490D84CAD248A42FB9B96C698
Validity
Not Before: Feb 23 19:17:30 2026 GMT
Not After : Feb 22 19:22:30 2027 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:bf:77:e5:36:b8:da:36:1e:f4:86:f3:2b:
0d:0f:04:f5:76:8c:b8:03:8c:73:f9:44:fc:3a:1e:
e9:6d:4e:c2:a8:a4:76:be:44:40:b1:03:66:c7:e3:
e4:33:fe:15:69:fd:10:36:2a:f3:87:c9:4d:c3:48:
53:c2:32:0a:54:c0:ff:83:32:99:1c:4a:2b:78:ad:
4c:3e:d4:25:cd:a9:ff:1f:c8:d7:2b:1c:29:85:32:
a1:7f:c2:87:7d:b1:3d:1e:a5:39:74:be:5b:68:c6:
d6:f3:4b:c6:17:1e:be:0e:a8:00:d7:db:2e:69:88:
f9:79:c1:7d:ac:94:55:94:ac:9d:fa:f1:c4:9c:7d:
7a:1d:57:dd:7f:d9:3e:46:f7:f3:c6:4f:49:38:fd:
f6:73:93:74:07:a6:f4:74:f3:05:38:4e:d6:9a:1c:
46:8c:90:ae:c3:02:9c:93:de:81:b9:be:19:ea:45:
2d:51:f9:89:3a:88:8d:12:be:ea:e5:0e:21:e2:e8:
ea:8f:45:80:43:d9:7e:6b:05:32:ee:99:ca:5b:52:
25:d4:e2:e2:f9:f7:ac:fc:b6:3c:6c:ab:05:3d:68:
cf:f3:6e:1e:8e:2f:ce:71:9f:d3:c7:47:28:34:1a:
b6:17:4c:c9:63:3b:f7:8f:96:49:7b:b9:cd:34:d5:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:DC:A8:45:B5:C2:E1:87:20:66:B4:1E:71:B5:DF:9C:18:B4:D1
X509v3 Authority Key Identifier:
keyid:86:5E:40:84:EB:9C:C3:74:90:D8:4C:AD:24:8A:42:FB:9B:96:C6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/865E4084EB9CC37490D84CAD248A42FB9B96C698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/865E4084EB9CC37490D84CAD248A42FB9B96C698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.238.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:93:f7:b7:47:19:9b:52:bf:47:82:f9:63:58:45:cf:08:e8:
29:a6:c5:77:35:91:63:e5:49:4d:f1:21:c2:ff:46:93:a7:e7:
d3:7d:9d:ac:ea:98:a2:ce:36:48:b4:69:0c:59:5b:db:2d:da:
f6:6f:27:88:2d:4f:ca:cc:ce:b8:26:1b:28:c4:84:5d:4f:fd:
b9:a1:66:f2:ed:57:bc:fc:b0:8c:23:95:e3:61:0c:6b:c6:79:
96:86:4c:2a:f8:8d:7a:61:b0:71:87:ec:e9:b3:11:a4:5d:55:
e3:5e:20:aa:2e:e5:59:ae:bf:fb:20:a9:ed:ba:2b:a5:62:74:
f8:fe:27:7d:fa:d6:b1:a7:c5:b2:0c:41:e5:9a:fb:b0:15:ab:
7d:b9:cb:79:fe:9d:ce:4c:ea:cf:bc:9e:a5:18:85:96:49:67:
88:8f:47:f4:9d:a7:da:d2:88:bb:31:ea:94:82:49:da:28:57:
5a:8d:74:7f:08:15:12:28:c9:57:9d:f7:15:4a:cd:e0:2f:9d:
29:f5:fb:d0:0a:fc:52:0a:45:e7:b2:d6:b1:74:5a:5b:6c:5b:
4a:a4:75:7e:99:1a:71:35:bb:ce:fc:0e:d2:b3:4e:13:e1:38:
f4:b7:a8:88:86:45:75:2c:8d:d4:aa:55:59:64:ce:90:33:04:
54:fe:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:23:26 2026 by rpki-client