
$ rpki-client -vvvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa
File: 34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier: 8kthbgYVS8QN8t4ScPO4cScWPebZpCiEl77rvlhcQXg=
Subject key identifier: FE:33:C6:4B:78:98:56:64:9A:53:38:02:77:A5:49:77:F7:0A:BB:27
Certificate issuer: /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial: 061F535BEADCE93933FDE4188D74E741AD7A8D1C
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa
Signing time: Wed 02 Sep 2026 21:06:33 +0000
ROA not before: Wed 02 Sep 2026 21:01:33 +0000
ROA not after: Wed 01 Sep 2027 21:06:33 +0000
asID: 269182
IP address blocks: 45.181.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 03:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:53:5b:ea:dc:e9:39:33:fd:e4:18:8d:74:e7:41:ad:7a:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Validity
Not Before: Sep 2 21:01:33 2026 GMT
Not After : Sep 1 21:06:33 2027 GMT
Subject: CN=FE33C64B789856649A53380277A54977F70ABB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:88:39:f3:ed:41:c0:e1:68:04:4c:0e:32:
f7:fe:7e:4f:eb:31:b4:cc:90:7d:cc:8e:5b:ac:d1:
bd:22:a5:ed:01:b3:7f:16:7f:4b:b4:8e:a0:33:bf:
c9:9c:20:ee:10:15:56:cc:1a:e5:bc:c7:7a:bb:74:
67:78:57:03:27:bc:01:30:2b:ed:fa:e1:4b:59:86:
15:f5:e3:7d:44:95:e1:f5:24:9e:34:76:c5:a6:ce:
f5:c7:be:a8:b2:3c:c7:2c:d2:95:58:99:e9:3e:e7:
ab:77:84:9b:e3:f8:e4:96:f8:05:4c:a2:a4:59:14:
86:a8:8d:7c:8c:b3:fc:d8:80:f3:ed:69:13:bb:3f:
a5:2b:29:bf:f4:e7:b5:a9:ab:79:79:1c:14:ee:05:
76:7d:bc:f8:97:e4:53:84:24:9c:e9:c2:f0:06:13:
d0:15:c7:93:fc:89:44:be:26:de:ed:d4:51:18:39:
7b:63:25:fd:c3:8b:0b:80:e2:0b:05:77:5a:f7:24:
1a:b0:74:a7:49:50:28:12:30:bd:77:2c:48:47:41:
8c:21:2a:cd:a9:72:ca:b7:71:59:0d:25:c9:51:43:
1b:18:fb:2f:85:58:c8:69:8e:69:01:bf:8c:55:5e:
7f:0f:0d:36:c3:69:77:23:30:69:0f:8d:8f:0e:b0:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:C6:4B:78:98:56:64:9A:53:38:02:77:A5:49:77:F7:0A:BB:27
X509v3 Authority Key Identifier:
keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.100.0/23
Signature Algorithm: sha256WithRSAEncryption
77:d2:ee:e0:d3:97:af:e0:88:6b:48:84:c3:f3:ab:2e:48:95:
c6:7c:62:d2:e0:2a:97:72:f2:b3:c7:fd:3c:63:4b:f6:7f:5e:
e1:ea:e2:eb:e8:c3:a1:40:fb:c9:35:dd:6e:5a:24:fb:9d:9b:
7e:f1:85:1b:bf:a4:96:eb:c0:cb:84:6d:a8:ee:67:1e:e0:9b:
66:3a:db:54:18:56:0d:59:77:76:a7:15:61:01:ef:e8:a5:64:
e2:7e:bc:10:7c:82:ef:f1:49:78:6c:d3:ab:65:5a:22:24:2d:
c5:45:ba:a0:ab:2a:e1:fd:67:31:3f:d8:57:42:35:2e:eb:75:
40:57:6d:7f:0d:ba:45:c5:4e:51:ba:e7:7b:28:2e:48:8b:a6:
c6:91:6e:e4:c5:02:f7:9c:b6:33:83:23:78:9d:3f:1a:b6:e9:
69:7f:91:21:5c:50:63:57:01:cd:ac:49:04:28:9e:f4:f3:49:
0d:07:c8:0f:ca:8e:78:92:c6:1b:25:ad:b9:92:d0:d7:d9:7a:
61:d1:88:e8:dd:e7:47:ef:f0:be:55:48:dd:d9:18:39:d6:c6:
4b:17:74:68:43:a2:11:bd:0c:20:21:fe:f4:62:2b:53:e4:49:
7f:4d:d5:77:30:ea:74:30:d0:e1:d6:9f:fa:1c:4b:3a:1d:34:
71:53:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:11:46 2026 by rpki-client