
$ rpki-client -vvf rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
File:                     3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa (raw, json)
Hash identifier:          aVpe9x63jz8Z/jD2LmUKqr4D6dFpdqMMv6wlyvjzNOA=
Subject key identifier:   36:78:C6:5B:24:88:C6:21:8D:F9:12:C5:7B:3E:2D:32:1F:8D:AB:FD
Certificate issuer:       /CN=D76580431FA15F4C3D598181DBE97B6443141E8C
Certificate serial:       7597AF82AD007BC27D2E2D2F599D6914A9798F9D
Authority key identifier: D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
Signing time:             Thu 30 Oct 2025 19:37:49 +0000
ROA not before:           Thu 30 Oct 2025 19:32:49 +0000
ROA not after:            Thu 29 Oct 2026 19:37:49 +0000
asID:                     267531
IP address blocks:        201.182.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl
                          rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:31:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:af:82:ad:00:7b:c2:7d:2e:2d:2f:59:9d:69:14:a9:79:8f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76580431FA15F4C3D598181DBE97B6443141E8C
        Validity
            Not Before: Oct 30 19:32:49 2025 GMT
            Not After : Oct 29 19:37:49 2026 GMT
        Subject: CN=3678C65B2488C6218DF912C57B3E2D321F8DABFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7e:26:3e:a5:bb:c1:7b:42:cd:f7:d0:e7:36:
                    f0:e4:01:26:03:55:71:70:f7:01:c2:2f:ea:99:0b:
                    19:f9:36:68:b4:5e:41:1c:a0:43:ca:8d:c4:2e:2d:
                    1b:9c:2b:f6:bf:9e:53:a8:78:05:11:ee:c8:00:7e:
                    e7:8c:f0:78:78:89:32:a2:74:1f:d3:01:d6:6a:8f:
                    7c:10:73:1c:74:93:34:32:a8:d6:9e:67:ac:3c:ae:
                    a8:82:39:80:cc:3d:a9:17:b4:1a:5d:6c:c9:47:06:
                    e1:64:e8:c2:c8:4a:65:74:dc:75:07:4a:c1:2b:a2:
                    50:8d:6d:3a:f9:c0:88:87:77:19:52:7f:27:5e:08:
                    a0:58:46:5d:75:24:a2:e5:72:fc:58:5d:0c:40:1f:
                    fb:b1:b7:02:cf:6c:b5:1b:14:8b:0f:32:fd:0c:d2:
                    e3:35:3a:6a:85:6b:ce:b8:95:91:70:27:cb:97:0f:
                    1a:33:bf:ac:31:8b:aa:ca:59:ee:89:cc:67:c7:25:
                    af:67:7a:a8:a3:92:c4:6d:21:1f:d7:30:59:58:db:
                    3e:79:58:e0:3b:a8:b5:2e:25:b1:e4:5f:c6:66:4d:
                    0c:76:14:bf:01:8e:26:8d:4f:04:c4:d0:2f:16:75:
                    8f:3e:1c:57:99:c7:ae:f3:ce:b2:6a:3f:35:07:08:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:C6:5B:24:88:C6:21:8D:F9:12:C5:7B:3E:2D:32:1F:8D:AB:FD
            X509v3 Authority Key Identifier:
                keyid:D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.196.0/22
    Signature Algorithm: sha256WithRSAEncryption
         05:9d:5e:b5:07:04:5c:01:14:b6:8d:c5:5c:95:4f:ab:bb:52:
         72:b6:63:18:91:b3:e1:bc:ab:19:7f:87:f2:d2:82:9b:a7:0c:
         af:3a:86:a3:e3:f6:f5:2c:2c:da:06:8c:dc:ba:84:45:3e:d3:
         5a:8c:e7:9c:7a:a3:d2:13:e3:23:0e:58:cb:d3:e6:5e:a0:0b:
         63:35:42:3b:d9:01:e5:ac:66:67:16:94:78:8d:97:a4:8e:5c:
         d7:52:50:74:a3:ed:dc:ca:aa:e0:fa:ff:ab:b4:b7:bb:0b:b4:
         b6:57:5a:05:22:6e:33:d0:41:f0:7c:8a:fe:c0:26:9f:86:0e:
         c7:61:4d:2a:91:85:41:89:6a:b5:55:27:de:b0:cc:63:f1:11:
         00:65:29:4e:7f:49:66:9d:bd:5f:ae:2d:ba:55:7f:56:87:d4:
         a5:69:42:f2:9b:f6:dc:54:27:cd:54:40:59:79:2b:86:2c:77:
         2a:98:4d:19:51:4f:40:e3:df:ff:0e:5a:a1:97:78:0c:95:da:
         e6:9e:57:0b:a1:0c:e1:89:2a:6c:e2:41:2f:24:86:53:c9:bf:
         26:52:00:8a:b2:d3:79:8b:b4:ef:ba:0b:b9:b2:cc:4b:53:93:
         ac:96:09:03:f7:3a:e3:b7:f0:a6:32:1d:6f:7a:e9:57:f6:6f:
         26:c8:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:23:56 2025 by rpki-client