
$ rpki-client -vvvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38302e302f32322d3332203d3e20323638313033.roa
File: 34352e3136392e38302e302f32322d3332203d3e20323638313033.roa (raw, json)
Hash identifier: enF5SyWo0/PSG0sb53j355Y/4MLLeIEHS/kxc94z8Rk=
Subject key identifier: 86:85:30:24:0E:8A:C1:E5:74:B6:F9:97:F5:33:5C:48:6B:19:A6:02
Certificate issuer: /CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB
Certificate serial: 7E9244D0B04D688CB2D99D6B8B774548C02A83C7
Authority key identifier: D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38302e302f32322d3332203d3e20323638313033.roa
Signing time: Tue 27 Oct 2026 20:00:30 +0000
ROA not before: Tue 27 Oct 2026 19:55:30 +0000
ROA not after: Tue 26 Oct 2027 20:00:30 +0000
asID: 268103
IP address blocks: 45.169.80.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl
rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 18:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:92:44:d0:b0:4d:68:8c:b2:d9:9d:6b:8b:77:45:48:c0:2a:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB
Validity
Not Before: Oct 27 19:55:30 2026 GMT
Not After : Oct 26 20:00:30 2027 GMT
Subject: CN=868530240E8AC1E574B6F997F5335C486B19A602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:c4:34:f2:5b:2f:f9:a0:35:30:f9:61:51:
9e:82:b6:a8:5f:1a:9c:c5:9b:5e:2b:e9:ba:54:e2:
6e:c3:af:93:b6:0c:ef:c5:71:5e:90:be:17:39:f3:
24:5e:1e:4c:6e:b4:d2:6d:9b:38:00:78:8b:08:91:
78:1d:28:0b:d7:f0:3a:4f:6d:aa:c2:7b:c2:3b:87:
2c:6b:6c:03:3b:6f:07:82:88:b5:42:c1:ca:eb:88:
93:73:65:c0:bb:ea:66:59:7d:0d:2b:a0:a3:77:7e:
3b:ba:fb:d1:e3:a3:ed:69:54:3c:b4:ca:50:c7:f0:
af:04:a5:f1:e8:3a:ce:32:7b:f5:4c:60:57:06:80:
04:6e:88:d4:cb:d9:00:f2:1c:19:ab:6b:40:b4:eb:
79:8d:e3:bb:ac:dc:7d:4c:60:51:24:28:82:1b:5f:
5d:f6:79:9d:3f:b1:e7:0c:55:59:4a:66:22:7b:a1:
9a:31:26:9e:27:72:b6:19:ff:9a:25:85:8e:f0:c6:
70:94:85:83:5c:84:37:57:f3:88:67:ac:91:94:df:
16:a6:00:bc:3f:38:e5:ff:5c:d2:64:80:f2:e7:5f:
c4:04:0a:57:8f:ff:9b:35:04:7f:85:c8:30:35:85:
3b:3e:0a:0e:47:a7:6f:70:9f:e2:d5:78:ef:65:c1:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:30:24:0E:8A:C1:E5:74:B6:F9:97:F5:33:5C:48:6B:19:A6:02
X509v3 Authority Key Identifier:
keyid:D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/34352e3136392e38302e302f32322d3332203d3e20323638313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.80.0/22
Signature Algorithm: sha256WithRSAEncryption
57:a4:3e:61:f3:7c:90:86:be:81:cc:97:13:92:01:6a:c6:12:
d2:4a:5c:a7:2f:a8:47:cc:d3:f6:e4:5d:a2:ef:d5:4c:10:a4:
c5:90:ee:64:37:3a:84:93:a3:98:3b:23:9d:60:7c:1e:16:e0:
b0:59:c0:e7:98:96:74:f2:fc:57:ca:2c:83:81:5e:ef:08:7a:
87:39:98:c9:72:5a:8b:04:71:cf:4a:df:40:ee:be:4e:8a:38:
89:73:9d:0d:be:b5:da:72:c2:dc:97:f6:bd:f6:da:47:0d:96:
6f:47:b9:17:64:b8:14:d1:b2:36:b8:f4:4c:73:ac:91:2b:27:
5e:be:7c:45:f6:0a:f2:07:b5:d1:be:ec:4a:8a:77:40:49:42:
d4:ca:97:c0:12:28:7c:53:cd:b0:69:28:53:92:9f:40:7c:18:
62:f9:da:af:6d:58:f1:dc:70:88:2b:d3:a5:1f:c9:db:a8:37:
66:f1:09:c9:9a:77:6c:63:28:e6:09:90:4a:10:2f:96:bb:7d:
e2:26:0d:42:01:0b:38:29:5d:45:95:a3:b3:79:8e:7c:57:0b:
0e:0f:7a:b0:bf:0c:09:6d:b0:21:ce:43:b4:86:4c:4a:93:35:
f4:11:80:53:d8:87:d6:f8:2f:a3:df:51:d2:ff:e3:d9:91:39:
4f:cb:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 21:46:20 2026 by rpki-client