
$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (raw, json)
Hash identifier:          8Ip1mLJ0X42uGFNZKkZsn7bTlhijmzzP2BlHhWF8LpU=
Subject key identifier:   03:5B:2A:0B:5D:F6:59:B5:11:65:BB:F0:F6:9D:CA:88:00:C3:E0:29
Certificate issuer:       /CN=B50F71D69739DBF5914AAB576A379411D64051AB
Certificate serial:       107CE8BA730B7675459CC85132A78039EA10D253
Authority key identifier: B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
Signing time:             Tue 21 Oct 2025 14:00:19 +0000
ROA not before:           Tue 21 Oct 2025 13:55:19 +0000
ROA not after:            Tue 20 Oct 2026 14:00:19 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:48:21 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7c:e8:ba:73:0b:76:75:45:9c:c8:51:32:a7:80:39:ea:10:d2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50F71D69739DBF5914AAB576A379411D64051AB
        Validity
            Not Before: Oct 21 13:55:19 2025 GMT
            Not After : Oct 20 14:00:19 2026 GMT
        Subject: CN=035B2A0B5DF659B51165BBF0F69DCA8800C3E029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:e9:f7:db:31:46:61:5b:4e:d8:0d:d8:37:
                    f3:0f:05:51:6a:59:4a:39:4e:68:f9:1e:34:f3:f1:
                    61:ae:9b:7c:41:fd:0b:15:16:5e:ef:b1:27:b6:88:
                    81:93:7e:bd:3e:f4:58:4e:ed:8a:a4:3e:43:c2:59:
                    c3:a8:db:a2:c3:cb:ee:76:ec:db:b2:85:6a:bb:f8:
                    32:3d:3d:7b:25:26:eb:77:76:91:a5:20:f1:49:70:
                    5f:5c:16:8c:15:0d:31:5a:51:40:a6:c1:01:25:a0:
                    a7:79:76:5e:cf:fe:49:93:af:41:fc:dc:7d:3e:28:
                    95:74:a5:09:f6:d5:3e:1e:a8:d4:4a:e8:cb:57:45:
                    dd:54:6a:35:b8:6b:30:23:fd:d2:b9:55:25:83:ad:
                    f7:4c:9f:a6:1e:31:77:98:69:fb:79:bb:a8:93:6e:
                    13:06:4b:6e:23:b9:6a:71:db:d2:f6:02:97:e1:69:
                    5c:86:44:72:44:b6:3d:00:02:2c:5b:82:2e:23:f9:
                    bc:ca:37:8c:46:2c:43:85:f8:9f:9a:d6:7d:e3:84:
                    d5:f5:82:94:7f:b0:5e:39:84:62:32:ca:33:68:1b:
                    1d:64:9c:20:04:d2:bd:34:77:e6:12:b2:f0:c3:7d:
                    54:95:19:2c:a5:6e:4d:0b:9b:9f:de:49:36:7e:54:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:2A:0B:5D:F6:59:B5:11:65:BB:F0:F6:9D:CA:88:00:C3:E0:29
            X509v3 Authority Key Identifier:
                keyid:B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
    Signature Algorithm: sha256WithRSAEncryption
         cb:18:cd:9b:ff:21:53:89:fb:b8:ec:14:f6:8c:b2:01:13:ac:
         5d:11:7e:cf:fd:c5:70:56:72:e3:bf:11:26:e9:79:7e:7e:7a:
         5b:8e:b6:8e:c5:b8:f6:ed:05:a5:40:c4:44:1a:8c:bb:f7:e5:
         cb:21:23:aa:17:1e:70:82:c9:67:76:ab:74:5b:d8:4b:b4:f2:
         f8:21:57:82:bd:ca:fd:77:f4:73:54:62:9d:2a:35:b9:47:dd:
         b3:1d:41:2a:54:13:2d:c6:8e:1a:fa:bf:28:38:1c:cb:8b:9a:
         63:fc:af:fa:79:3c:4d:c9:b1:54:20:69:50:3e:73:d0:59:57:
         c9:43:27:5b:24:e6:3f:a2:b1:6f:af:ea:3b:82:b2:d4:76:14:
         d6:52:e1:53:24:f3:d6:2e:42:b1:5a:e8:27:91:1b:bb:28:c4:
         f2:9e:85:29:ec:ac:ef:87:4d:b7:c9:ab:73:21:f1:23:77:c8:
         48:8c:43:9f:74:a6:ea:de:32:e8:a7:39:6a:63:c9:1c:d7:ef:
         e2:7b:1c:5f:1e:dd:31:ed:42:25:8f:a0:30:80:5e:cb:c3:36:
         73:09:93:a6:a1:98:d9:cd:46:7b:db:50:e6:51:fb:7b:fd:c7:
         ab:7c:a9:cf:4a:fd:f9:69:43:5f:97:73:7f:bc:5f:2f:0a:1d:
         2d:2c:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:38:51 2025 by rpki-client