
$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3332203d3e203238323034.roa
File:                     3138392e39312e34382e302f32302d3332203d3e203238323034.roa (raw, json)
Hash identifier:          mDfQLK61XcBdcZJh8AKS28XE2sEJ3Uz/m7Pd8PTtlc4=
Subject key identifier:   CB:47:69:77:57:B0:FC:D8:3A:E5:C3:41:2D:DC:9B:98:67:C0:E0:F5
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       316F5C71BA805195FDDB33B6811FA4FF589A874A
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3332203d3e203238323034.roa
Signing time:             Thu 09 Oct 2025 14:32:40 +0000
ROA not before:           Thu 09 Oct 2025 14:27:40 +0000
ROA not after:            Thu 08 Oct 2026 14:32:40 +0000
asID:                     28204
IP address blocks:        189.91.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:33:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6f:5c:71:ba:80:51:95:fd:db:33:b6:81:1f:a4:ff:58:9a:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Oct  9 14:27:40 2025 GMT
            Not After : Oct  8 14:32:40 2026 GMT
        Subject: CN=CB47697757B0FCD83AE5C3412DDC9B9867C0E0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:a7:58:55:19:6b:ad:80:79:dc:74:62:9f:
                    95:ec:3d:80:89:5a:c1:7c:45:7b:9c:39:d4:5e:d3:
                    be:c2:f0:25:c3:a1:33:3e:75:ee:3d:91:8d:e3:3b:
                    ed:f7:dc:a9:0f:f3:a4:7d:ab:bf:c1:be:44:77:69:
                    17:58:a6:61:13:e6:d2:35:72:e9:7d:b8:83:8a:11:
                    e9:15:0e:53:91:df:8c:91:ec:83:6a:9f:7c:2d:6d:
                    c2:01:d5:5f:85:f3:5f:bf:df:d7:d3:a3:38:b7:03:
                    48:6d:52:44:61:15:72:a1:a7:29:3d:7a:5e:5f:59:
                    3b:c7:65:f1:2c:7e:2c:a1:9a:5b:9b:71:23:5e:d2:
                    0d:9d:76:08:6a:10:2d:50:1d:d5:80:60:e9:18:df:
                    48:a1:6c:58:91:26:68:ec:86:0d:ed:69:5a:f1:fd:
                    a5:fa:a0:77:85:13:bf:8f:f7:1c:ac:4c:e0:64:bf:
                    90:9b:8f:15:84:a4:4e:5d:41:8b:9a:e5:e1:80:95:
                    5a:db:f4:d5:4d:7f:70:13:5f:e3:cb:10:22:a9:75:
                    99:7e:03:9d:5a:4d:47:e7:63:e7:c5:0d:fd:97:8d:
                    ea:8a:5d:76:16:c2:d0:84:26:be:0c:8f:22:66:94:
                    ed:ff:62:a3:d5:67:c5:b5:5e:1d:8e:39:1b:0d:b4:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:47:69:77:57:B0:FC:D8:3A:E5:C3:41:2D:DC:9B:98:67:C0:E0:F5
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e34382e302f32302d3332203d3e203238323034.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.48.0/20
    Signature Algorithm: sha256WithRSAEncryption
         1f:39:0a:1d:02:a3:4b:6f:ed:2d:52:44:f5:87:a9:56:6f:df:
         cb:37:90:c3:90:da:49:79:9d:3c:d6:55:ea:e9:72:48:7d:fd:
         88:56:df:63:35:8a:28:ce:79:21:c2:bc:fc:99:e7:06:29:8c:
         0e:92:a3:99:38:ab:25:6f:e1:59:69:ec:b8:af:28:67:df:09:
         4c:99:eb:2b:5b:48:a0:4c:67:0d:52:08:3c:91:8f:da:8c:58:
         44:bb:d8:9f:5c:40:a2:fb:93:1e:25:58:d3:05:7d:d9:44:5c:
         d0:6c:7b:d2:e1:34:8a:dc:95:ef:a5:62:a1:76:30:cd:a6:89:
         72:34:02:eb:fc:88:7d:9a:1c:c6:4f:08:50:fc:3c:b9:61:33:
         25:00:ea:5b:71:7f:22:61:93:0e:78:db:e9:07:d3:0f:f3:84:
         23:23:bd:6c:6f:7d:42:2c:93:3f:47:48:70:d6:04:ac:61:20:
         36:85:5b:dd:a5:39:3d:7a:d3:da:01:e2:c9:dc:b1:58:c7:b5:
         5e:14:9e:ed:52:4e:ec:24:d6:51:6d:1d:24:10:e9:f3:f7:b5:
         ba:6e:53:78:a5:71:98:c0:34:0d:c6:77:de:de:af:3a:fe:db:
         1d:66:5d:ec:3e:cf:45:62:09:e0:bb:d4:0a:f3:e7:92:31:a5:
         a7:7d:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:06:11 2025 by rpki-client