
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File: 34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: GE3gGVQeD3YNUf38ceAm6JSPmg08xuOGP4ggTgUw/aY=
Subject key identifier: D6:C2:D2:B5:AC:D6:34:8C:F1:E6:9A:24:B4:32:D3:0A:77:90:1E:83
Certificate issuer: /CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
Certificate serial: 0E89C39EC73D5845B2BD518C615A19DCEF8140AC
Authority key identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time: Thu 09 Apr 2026 12:58:10 +0000
ROA not before: Thu 09 Apr 2026 12:53:10 +0000
ROA not after: Thu 08 Apr 2027 12:58:10 +0000
asID: 53062
IP address blocks: 45.7.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl
rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 13 Apr 2026 16:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:89:c3:9e:c7:3d:58:45:b2:bd:51:8c:61:5a:19:dc:ef:81:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
Validity
Not Before: Apr 9 12:53:10 2026 GMT
Not After : Apr 8 12:58:10 2027 GMT
Subject: CN=D6C2D2B5ACD6348CF1E69A24B432D30A77901E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:bf:d8:ff:07:f8:c6:41:8a:8c:e2:6d:50:
e2:51:20:81:db:66:fc:5b:99:0d:a1:ea:e4:78:0d:
b0:ef:60:ac:22:73:43:dc:30:9b:bb:da:5e:69:20:
7f:0d:c0:99:14:76:26:e6:59:93:14:7d:7d:c6:23:
3a:8d:38:77:3f:6a:9a:eb:21:0c:8d:1d:7d:d7:35:
45:68:41:ba:d7:a0:13:72:54:64:58:51:c9:2e:fd:
bb:2f:4a:74:44:ab:38:5c:c1:cf:6c:41:3a:11:91:
9f:a0:0a:36:4e:f9:c6:71:9f:01:05:bf:d3:b4:a9:
ac:00:3c:29:cb:d6:e9:82:dd:77:1b:54:2f:0e:1d:
f1:c9:a4:2b:4f:b2:63:1b:59:43:93:a6:c5:c8:35:
ad:0c:4f:46:5c:7d:a5:1e:16:ea:07:0b:a6:32:6b:
1b:0d:30:c9:41:fb:c8:10:f6:41:c8:7d:6a:1b:42:
fc:22:07:9c:d3:ec:17:6c:ba:ea:bc:ea:d9:17:e4:
b4:8f:36:82:9f:3f:26:96:b3:fc:69:22:26:e9:1c:
3e:1f:f6:41:04:26:e8:26:b4:f2:19:df:66:1e:d5:
10:24:3f:46:05:a4:79:f0:cb:24:bc:4b:78:33:c0:
17:64:80:53:74:32:31:0a:84:42:6e:e9:c9:de:1e:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:D2:B5:AC:D6:34:8C:F1:E6:9A:24:B4:32:D3:0A:77:90:1E:83
X509v3 Authority Key Identifier:
keyid:D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
Signature Algorithm: sha256WithRSAEncryption
81:d3:a4:aa:a9:70:5d:5f:4c:99:ff:ca:21:f7:8a:3e:58:a9:
8d:cd:83:6b:c2:f2:69:c0:8d:36:76:19:b8:4f:b3:37:b9:6f:
68:60:2c:02:1c:87:c5:b9:76:31:f5:a3:b3:56:91:56:f7:f1:
98:b4:71:65:3c:81:fd:44:d4:80:68:35:03:4f:8b:08:52:77:
bc:23:80:a8:25:e1:60:2e:73:69:17:c3:b4:a0:00:4e:a4:e0:
5a:4f:77:e6:b7:66:dc:b8:df:e1:28:8f:17:94:1c:e3:56:e5:
32:2a:88:1e:22:79:2d:9d:c2:53:9e:ee:92:e9:e2:22:2f:9d:
08:26:d3:be:81:32:0a:20:1d:cb:61:5f:e1:fb:6a:a3:20:07:
35:3b:51:1c:09:91:bc:56:02:2f:5a:6d:6f:01:b7:fe:60:18:
c8:5c:46:f9:c9:5e:c8:1b:64:c4:3b:53:be:b3:97:45:72:73:
cf:79:d1:21:9c:af:16:ae:15:bc:cb:53:90:ab:c5:12:b7:58:
5b:05:7c:e8:a2:31:4d:2e:da:7f:d4:6b:6a:4f:42:65:58:11:
95:10:cd:21:0f:a0:b1:94:f2:fd:a7:b1:f0:e1:72:a4:67:4f:
8f:2c:41:ae:c5:c3:4e:56:b4:2b:25:a4:d3:74:5b:55:90:42:
67:15:73:e9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUDonDnsc9WEWyvVGMYVoZ3O+BQKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIzQTlBQjc0MzgyMTY4QjRCMEUwRjU3NzJCNEYyNUE0
NjFGOEI2MDAeFw0yNjA0MDkxMjUzMTBaFw0yNzA0MDgxMjU4MTBaMDMxMTAvBgNV
BAMTKEQ2QzJEMkI1QUNENjM0OENGMUU2OUEyNEI0MzJEMzBBNzc5MDFFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDj7/Y/wf4xkGKjOJtUOJRIIHb
ZvxbmQ2h6uR4DbDvYKwic0PcMJu72l5pIH8NwJkUdibmWZMUfX3GIzqNOHc/aprr
IQyNHX3XNUVoQbrXoBNyVGRYUcku/bsvSnREqzhcwc9sQToRkZ+gCjZO+cZxnwEF
v9O0qawAPCnL1umC3XcbVC8OHfHJpCtPsmMbWUOTpsXINa0MT0ZcfaUeFuoHC6Yy
axsNMMlB+8gQ9kHIfWobQvwiB5zT7Bdsuuq86tkX5LSPNoKfPyaWs/xpIibpHD4f
9kEEJugmtPIZ32Ye1RAkP0YFpHnwyyS8S3gzwBdkgFN0MjEKhEJu6cneHgCZAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU1sLStazWNIzx5poktDLTCneQHoMwHwYDVR0j
BBgwFoAU0jqat0OCFotLDg9XcrTyWkYfi2AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzQvRDIzQTlBQjc0MzgyMTY4QjRCMEUwRjU3NzJCNEYyNUE0NjFGOEI2MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMjNBOUFCNzQzODIxNjhCNEIw
RTBGNTc3MkI0RjI1QTQ2MUY4QjYwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzQvMzQz
NTJlMzcyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzMzMDM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAItB4AwDQYJKoZIhvcNAQELBQADggEBAIHTpKqpcF1fTJn/yiH3
ij5YqY3Ng2vC8mnAjTZ2GbhPsze5b2hgLAIch8W5djH1o7NWkVb38Zi0cWU8gf1E
1IBoNQNPiwhSd7wjgKgl4WAuc2kXw7SgAE6k4FpPd+a3Zty43+EojxeUHONW5TIq
iB4ieS2dwlOe7pLp4iIvnQgm076BMgogHcthX+H7aqMgBzU7URwJkbxWAi9abW8B
t/5gGMhcRvnJXsgbZMQ7U76zl0Vyc8950SGcrxauFbzLU5CrxRK3WFsFfOiiMU0u
2n/Ua2pPQmVYEZUQzSEPoLGU8v2nsfDhcqRnT48sQa7Fw05WtCslpNN0W1WQQmcV
c+k=
-----END CERTIFICATE-----
Generated at Sun Apr 12 23:23:25 2026 by rpki-client