
$ rpki-client -vvf rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/323830343a323733633a3a2f33322d3438203d3e20323633383836.roa
File:                     323830343a323733633a3a2f33322d3438203d3e20323633383836.roa (raw, json)
Hash identifier:          DOAiIdvA1TKawLCfjj0Glsl32HsKrbRoL+zLtScDaWw=
Subject key identifier:   18:5B:28:E4:12:06:5A:6B:F8:AA:69:E4:53:AD:D2:4C:E3:EA:6F:AB
Certificate issuer:       /CN=6C2438C730A4200897293A47493AF193498BB45F
Certificate serial:       177265FD34DF234723B706A41BCD1DD4D0B7AA27
Authority key identifier: 6C:24:38:C7:30:A4:20:08:97:29:3A:47:49:3A:F1:93:49:8B:B4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2438C730A4200897293A47493AF193498BB45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/323830343a323733633a3a2f33322d3438203d3e20323633383836.roa
Signing time:             Wed 29 Oct 2025 21:16:05 +0000
ROA not before:           Wed 29 Oct 2025 21:11:05 +0000
ROA not after:            Wed 28 Oct 2026 21:16:05 +0000
asID:                     263886
IP address blocks:        2804:273c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/6C2438C730A4200897293A47493AF193498BB45F.crl
                          rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/6C2438C730A4200897293A47493AF193498BB45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2438C730A4200897293A47493AF193498BB45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:28:37 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:72:65:fd:34:df:23:47:23:b7:06:a4:1b:cd:1d:d4:d0:b7:aa:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C2438C730A4200897293A47493AF193498BB45F
        Validity
            Not Before: Oct 29 21:11:05 2025 GMT
            Not After : Oct 28 21:16:05 2026 GMT
        Subject: CN=185B28E412065A6BF8AA69E453ADD24CE3EA6FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:e1:5c:35:27:01:e0:6b:71:b4:73:be:0c:
                    7a:bd:72:ae:9f:a5:fb:8b:e8:ad:78:1c:7b:81:00:
                    5e:e5:d5:cc:f0:24:1b:d0:e9:8c:51:76:a7:82:0f:
                    b9:94:7d:a2:1f:6c:29:da:8b:b0:f3:a4:26:a5:3f:
                    79:64:4a:a6:95:06:75:d1:d7:82:9b:00:3a:42:0f:
                    bc:39:7a:3b:51:6e:0f:bb:b1:0d:ed:fb:aa:2e:81:
                    03:8d:98:26:98:e8:31:bd:6a:b6:77:3d:72:21:37:
                    07:b1:21:22:e3:cb:ad:f1:ff:87:b1:e7:48:af:23:
                    10:e5:cb:a8:3f:db:36:a5:3d:63:71:d6:da:0d:4c:
                    30:39:9f:90:a0:da:37:dd:ac:15:dc:e4:86:44:67:
                    01:8f:a2:c4:ce:26:b5:b1:7e:4a:5f:8b:ed:d6:8a:
                    c9:78:d9:9f:0f:01:1b:7c:99:71:22:3c:1a:28:9b:
                    9d:a5:81:9e:60:ee:af:c3:e5:9e:e1:72:33:c1:bd:
                    5f:1a:89:f7:aa:28:72:ce:92:8e:73:2c:01:86:05:
                    1d:9f:60:d0:e6:83:5d:48:77:4a:f3:19:27:35:14:
                    3a:cd:98:06:ac:cc:7a:e0:f5:b1:69:73:9c:b4:62:
                    62:b6:91:ff:cc:23:6e:8a:03:80:ae:de:88:e9:c5:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5B:28:E4:12:06:5A:6B:F8:AA:69:E4:53:AD:D2:4C:E3:EA:6F:AB
            X509v3 Authority Key Identifier:
                keyid:6C:24:38:C7:30:A4:20:08:97:29:3A:47:49:3A:F1:93:49:8B:B4:5F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/6C2438C730A4200897293A47493AF193498BB45F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2438C730A4200897293A47493AF193498BB45F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fRJwMo9dxuCgxKGn9p33ErpMtGXMrcjqrNHe8HFQytk/0/323830343a323733633a3a2f33322d3438203d3e20323633383836.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:273c::/32
    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:f0:4b:a2:25:36:8d:e8:73:7d:e2:31:28:3d:60:d8:44:
         f5:63:4a:7f:0c:06:3c:c8:f1:13:b7:45:de:f0:92:bd:61:90:
         99:39:e9:97:a2:d7:ed:15:f1:0b:15:af:01:16:c9:a0:f4:78:
         d4:56:6f:15:f6:74:5d:6d:20:6a:59:ae:38:59:51:d5:58:81:
         71:90:6d:f8:2a:af:56:d8:fa:45:ba:9d:3e:03:85:61:b0:2b:
         5f:cb:83:11:9c:29:36:68:bf:81:ee:e0:07:09:08:e8:81:f5:
         1c:32:ea:c0:5b:cc:f5:07:17:46:7b:4e:3e:70:43:ac:b2:f6:
         2d:58:e2:3d:46:1b:5c:bd:9c:51:e3:d3:cc:f8:33:df:40:72:
         cb:ea:df:46:e0:b8:66:49:ec:2f:1f:ab:05:01:79:26:01:eb:
         27:e8:df:97:24:49:31:5a:a5:48:26:c1:83:4f:e3:f7:c4:83:
         bf:ed:03:81:90:05:ce:e1:77:49:26:39:4a:43:72:18:52:a6:
         a7:73:f9:7b:a6:3e:db:16:e8:60:68:fb:d0:1d:f5:a7:d7:48:
         d7:33:55:f9:b0:9b:e0:ec:07:5f:76:1c:b0:99:de:96:85:40:
         99:84:a2:86:4f:2b:77:aa:2c:59:1d:ac:f3:17:e3:46:b8:9c:
         e6:ea:55:57
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUF3Jl/TTfI0cjtwakG80d1NC3qicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMyNDM4QzczMEE0MjAwODk3MjkzQTQ3NDkzQUYxOTM0
OThCQjQ1RjAeFw0yNTEwMjkyMTExMDVaFw0yNjEwMjgyMTE2MDVaMDMxMTAvBgNV
BAMTKDE4NUIyOEU0MTIwNjVBNkJGOEFBNjlFNDUzQUREMjRDRTNFQTZGQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUeFcNScB4GtxtHO+DHq9cq6f
pfuL6K14HHuBAF7l1czwJBvQ6YxRdqeCD7mUfaIfbCnai7DzpCalP3lkSqaVBnXR
14KbADpCD7w5ejtRbg+7sQ3t+6ougQONmCaY6DG9arZ3PXIhNwexISLjy63x/4ex
50ivIxDly6g/2zalPWNx1toNTDA5n5Cg2jfdrBXc5IZEZwGPosTOJrWxfkpfi+3W
isl42Z8PARt8mXEiPBoom52lgZ5g7q/D5Z7hcjPBvV8aifeqKHLOko5zLAGGBR2f
YNDmg11Id0rzGSc1FDrNmAaszHrg9bFpc5y0YmK2kf/MI26KA4Cu3ojpxVOxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGFso5BIGWmv4qmnkU63STOPqb6swHwYDVR0j
BBgwFoAUbCQ4xzCkIAiXKTpHSTrxk0mLtF8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZSSndNbzlkeHVDZ3hLR245cDMzRXJwTXRHWE1yY2pxck5IZThIRlF5
dGsvMC82QzI0MzhDNzMwQTQyMDA4OTcyOTNBNDc0OTNBRjE5MzQ5OEJCNDVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDMjQzOEM3MzBBNDIwMDg5
NzI5M0E0NzQ5M0FGMTkzNDk4QkI0NUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmUkp3TW85ZHh1Q2d4S0duOXAzM0VycE10R1hNcmNqcXJOSGU4SEZReXRrLzAv
MzIzODMwMzQzYTMyMzczMzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnPDANBgkqhkiG9w0BAQsFAAOCAQEAXVvwS6Il
No3oc33iMSg9YNhE9WNKfwwGPMjxE7dF3vCSvWGQmTnpl6LX7RXxCxWvARbJoPR4
1FZvFfZ0XW0galmuOFlR1ViBcZBt+CqvVtj6RbqdPgOFYbArX8uDEZwpNmi/ge7g
BwkI6IH1HDLqwFvM9QcXRntOPnBDrLL2LVjiPUYbXL2cUePTzPgz30Byy+rfRuC4
ZknsLx+rBQF5JgHrJ+jflyRJMVqlSCbBg0/j98SDv+0DgZAFzuF3SSY5SkNyGFKm
p3P5e6Y+2xboYGj70B31p9dI1zNV+bCb4OwHX3YcsJneloVAmYSihk8rd6osWR2s
8xfjRric5upVVw==
-----END CERTIFICATE-----
Generated at Tue Nov  4 06:35:04 2025 by rpki-client