
$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
File:                     323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (raw, json)
Hash identifier:          jp3jh3cXGLRbte/PrsJ/rlc1qYfSMcCfJHgTskp8KeA=
Subject key identifier:   76:BD:DD:93:97:7A:6E:6F:B1:5C:6F:73:60:4C:70:0F:BA:41:E8:76
Certificate issuer:       /CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2
Certificate serial:       1D38E0EC74D9401CEA7BB77E0578F6571510A2FA
Authority key identifier: F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
Signing time:             Wed 29 Oct 2025 18:45:42 +0000
ROA not before:           Wed 29 Oct 2025 18:40:42 +0000
ROA not after:            Wed 28 Oct 2026 18:45:42 +0000
asID:                     267048
IP address blocks:        2804:475c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl
                          rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:10:48 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:38:e0:ec:74:d9:40:1c:ea:7b:b7:7e:05:78:f6:57:15:10:a2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2
        Validity
            Not Before: Oct 29 18:40:42 2025 GMT
            Not After : Oct 28 18:45:42 2026 GMT
        Subject: CN=76BDDD93977A6E6FB15C6F73604C700FBA41E876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:ce:da:bf:d0:be:66:04:dd:ef:a6:2b:05:
                    db:f5:06:78:f7:9e:80:16:6c:33:37:26:8a:9f:99:
                    d3:68:ab:24:ef:be:00:38:35:35:55:ba:23:3c:a4:
                    73:b1:7d:ee:ea:1b:d9:6a:19:f2:7c:24:33:ed:ef:
                    a9:99:45:1b:19:7c:05:18:18:48:a4:38:12:28:88:
                    a4:38:0b:f9:b1:62:13:c4:4a:a3:19:b8:17:1b:c1:
                    e4:ec:72:ac:bb:1c:d1:db:3e:64:d9:a2:f7:c4:26:
                    14:12:83:d9:d5:14:c9:9c:6b:46:c9:4e:d9:2c:73:
                    78:da:72:1e:aa:54:5e:85:39:18:0c:c0:28:5d:93:
                    f0:8d:97:d3:a5:08:7e:64:e7:4b:53:a7:e2:98:43:
                    8c:fc:af:08:e1:42:42:ec:ee:48:70:05:26:b6:73:
                    96:b4:34:19:a8:ed:61:cb:dd:c7:f6:68:45:a7:1d:
                    fb:b0:17:75:da:c6:29:12:dd:81:ce:47:c1:1e:0b:
                    f6:1f:5a:f8:fc:c5:23:ee:7a:07:a3:e7:4d:0b:ac:
                    e6:28:40:8a:30:55:71:04:03:06:52:62:50:b5:42:
                    b2:b9:0e:5c:c4:54:25:cf:90:09:da:67:b8:5d:59:
                    7f:2b:cb:d8:05:d0:6d:e2:63:52:e2:e6:bf:c3:74:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BD:DD:93:97:7A:6E:6F:B1:5C:6F:73:60:4C:70:0F:BA:41:E8:76
            X509v3 Authority Key Identifier:
                keyid:F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:475c::/32
    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:16:c6:b3:ba:f2:36:42:f6:df:45:8c:c4:d5:7d:8d:61:
         65:48:c2:ea:67:29:4a:a9:9f:68:21:ed:22:47:53:28:c8:af:
         87:52:86:6a:4f:65:c7:a3:91:50:65:7d:3a:5e:47:6d:e0:6c:
         c1:fa:45:22:87:e4:82:7d:09:2e:33:d2:2b:b3:a7:f5:37:82:
         25:2c:14:c8:60:17:2e:28:88:cd:ed:5e:d8:88:a2:1f:85:4c:
         5e:3f:4d:27:67:cd:82:c0:64:55:5a:ff:47:67:b7:09:4e:25:
         60:08:64:73:f7:c9:5f:c9:8f:96:03:1b:45:af:5a:65:9f:2c:
         ee:4b:dd:17:b4:0f:b1:6c:1f:65:27:1f:0a:17:55:09:39:bb:
         42:36:d5:c4:9c:6d:6c:e4:d3:b8:9f:3c:31:b0:a8:f7:fd:cf:
         d2:94:63:8d:bd:2e:f9:70:6b:21:18:68:f6:ec:79:df:b5:5a:
         07:ee:7d:ee:e5:8c:e6:3c:74:bc:f9:94:30:96:27:09:ef:20:
         66:4b:d8:3f:d0:1f:fd:a4:a0:75:21:e4:46:8a:1c:f0:cd:ae:
         65:2e:42:5b:ca:e6:95:97:02:f9:f6:6d:dc:97:6a:6a:5c:aa:
         73:9c:af:5a:c2:70:2f:20:3f:94:f7:99:d4:39:ea:36:f3:05:
         7b:ec:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:26:54 2025 by rpki-client