
$ rpki-client -vvf rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3139302e302f32342d3234203d3e20323635323830.roa
File:                     3136382e39302e3139302e302f32342d3234203d3e20323635323830.roa (raw, json)
Hash identifier:          skvJfVNlT+5OQtlPCfiAavCI45cYkIPrxG0PsvtA5UQ=
Subject key identifier:   C4:84:5C:31:81:9C:64:BA:0E:06:EA:24:7D:84:F4:EC:68:79:28:A7
Certificate issuer:       /CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5
Certificate serial:       7222FB6EFC11EECCF45DE992C2DC43E916856CCB
Authority key identifier: DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3139302e302f32342d3234203d3e20323635323830.roa
Signing time:             Fri 31 Oct 2025 17:39:49 +0000
ROA not before:           Fri 31 Oct 2025 17:34:49 +0000
ROA not after:            Fri 30 Oct 2026 17:39:49 +0000
asID:                     265280
IP address blocks:        168.90.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.crl
                          rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:55:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:fb:6e:fc:11:ee:cc:f4:5d:e9:92:c2:dc:43:e9:16:85:6c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5
        Validity
            Not Before: Oct 31 17:34:49 2025 GMT
            Not After : Oct 30 17:39:49 2026 GMT
        Subject: CN=C4845C31819C64BA0E06EA247D84F4EC687928A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:bb:1f:14:ea:6f:f2:4d:52:dc:95:c6:86:
                    00:3b:73:67:8b:2e:d7:41:52:cd:1c:88:c8:57:af:
                    e9:b6:01:ee:56:88:fa:05:bd:3b:15:ad:28:5f:39:
                    05:fd:99:77:0c:70:be:7c:74:c4:05:83:1c:78:0c:
                    74:43:a6:a9:5e:88:8f:65:60:e9:45:1e:0b:fc:cc:
                    b2:e1:f8:ce:17:cc:2e:a5:c8:e3:09:4b:ed:aa:57:
                    d1:87:7d:17:cd:e0:96:05:c2:76:4a:4e:6f:9a:d9:
                    17:06:8c:cd:ce:ec:62:48:cd:52:00:2c:de:0c:06:
                    9a:c5:ce:63:4f:0a:2b:c9:f3:e0:f0:31:40:b8:25:
                    18:43:be:78:10:4e:08:86:9e:1f:3e:3b:9a:48:87:
                    82:1f:47:e9:a4:a2:ef:28:01:ee:f7:28:16:0b:12:
                    16:96:b9:a2:15:b9:9b:f8:be:e4:36:31:6c:01:08:
                    e8:2a:ea:cf:ed:9a:4f:e0:72:f2:14:c6:ca:98:52:
                    e1:9f:4f:da:56:8e:3f:b2:8e:3e:01:d4:f0:08:4b:
                    e0:b8:2b:54:ae:09:76:24:9b:20:30:54:71:75:4c:
                    ba:3c:f2:8a:14:f3:f6:ce:b6:06:79:8b:13:0b:0e:
                    a4:f8:fb:7f:07:0e:4d:17:18:3c:a3:d4:c6:3b:b7:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:84:5C:31:81:9C:64:BA:0E:06:EA:24:7D:84:F4:EC:68:79:28:A7
            X509v3 Authority Key Identifier:
                keyid:DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3139302e302f32342d3234203d3e20323635323830.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.190.0/24
    Signature Algorithm: sha256WithRSAEncryption
         48:6d:cc:0f:3f:44:1a:29:13:22:be:78:2b:e1:a1:1d:95:65:
         7c:9c:89:90:a7:b6:b9:88:43:fc:72:32:2d:70:62:22:aa:27:
         d1:4f:6c:27:82:ef:9b:78:0a:44:d9:2f:9d:82:60:9d:a1:e7:
         19:d1:58:d2:42:8a:3a:82:a2:30:c9:42:f9:ab:ee:31:0c:1f:
         8d:54:c9:06:e0:77:4f:8d:e5:1b:ff:06:86:19:92:d7:2b:84:
         89:8e:11:2f:04:b3:42:4e:31:1b:4a:ba:9b:dc:01:0e:81:a4:
         8e:84:1c:ab:b9:a2:80:a4:06:b7:e2:79:f2:12:43:0e:ef:91:
         47:32:2d:76:28:6a:6e:6e:6b:7b:c7:2b:bd:48:d5:ae:a2:09:
         0f:fe:98:aa:4f:10:c9:aa:b0:69:6d:18:51:17:36:88:32:6d:
         a2:2e:30:15:d6:bd:be:10:10:e7:b6:98:01:de:93:f8:ad:ec:
         9a:05:bb:f3:90:4f:e7:b5:61:af:dc:01:b6:67:5e:94:0c:8a:
         e1:81:ae:7b:ab:52:0a:ac:c4:76:18:26:ef:92:30:3f:09:5f:
         41:d7:a8:1b:7f:40:4f:fe:0a:79:15:82:b0:f2:cc:dd:a2:f5:
         d2:41:66:5b:55:e9:55:76:14:49:48:70:46:13:30:36:56:dd:
         84:69:49:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUciL7bvwR7sz0XemSwtxD6RaFbMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0NzUzNkFBQjgxNzlGODkzNEY1RDdCMTNGRjlGNkIy
RUU0RjFDNTAeFw0yNTEwMzExNzM0NDlaFw0yNjEwMzAxNzM5NDlaMDMxMTAvBgNV
BAMTKEM0ODQ1QzMxODE5QzY0QkEwRTA2RUEyNDdEODRGNEVDNjg3OTI4QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlrsfFOpv8k1S3JXGhgA7c2eL
LtdBUs0ciMhXr+m2Ae5WiPoFvTsVrShfOQX9mXcMcL58dMQFgxx4DHRDpqleiI9l
YOlFHgv8zLLh+M4XzC6lyOMJS+2qV9GHfRfN4JYFwnZKTm+a2RcGjM3O7GJIzVIA
LN4MBprFzmNPCivJ8+DwMUC4JRhDvngQTgiGnh8+O5pIh4IfR+mkou8oAe73KBYL
EhaWuaIVuZv4vuQ2MWwBCOgq6s/tmk/gcvIUxsqYUuGfT9pWjj+yjj4B1PAIS+C4
K1SuCXYkmyAwVHF1TLo88ooU8/bOtgZ5ixMLDqT4+38HDk0XGDyj1MY7t9ZbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxIRcMYGcZLoOBuokfYT07Gh5KKcwHwYDVR0j
BBgwFoAU30dTaquBefiTT117E/+fay7k8cUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZoQmJBRVc4RHBwV3A4RlJtemhIUkc2TW9RWnJOZ2NabUNRWm5DTmR6
V1kvMC9ERjQ3NTM2QUFCODE3OUY4OTM0RjVEN0IxM0ZGOUY2QjJFRTRGMUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNDc1MzZBQUI4MTc5Rjg5
MzRGNUQ3QjEzRkY5RjZCMkVFNEYxQzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2aEJiQUVXOERwcFdwOEZSbXpoSFJHNk1vUVpyTmdjWm1DUVpuQ05keldZLzAv
MzEzNjM4MmUzOTMwMmUzMTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWr4wDQYJKoZIhvcNAQELBQADggEBAEhtzA8/
RBopEyK+eCvhoR2VZXyciZCntrmIQ/xyMi1wYiKqJ9FPbCeC75t4CkTZL52CYJ2h
5xnRWNJCijqCojDJQvmr7jEMH41UyQbgd0+N5Rv/BoYZktcrhImOES8Es0JOMRtK
upvcAQ6BpI6EHKu5ooCkBrfiefISQw7vkUcyLXYoam5ua3vHK71I1a6iCQ/+mKpP
EMmqsGltGFEXNogybaIuMBXWvb4QEOe2mAHek/it7JoFu/OQT+e1Ya/cAbZnXpQM
iuGBrnurUgqsxHYYJu+SMD8JX0HXqBt/QE/+CnkVgrDyzN2i9dJBZltV6VV2FElI
cEYTMDZW3YRpSTE=
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:26:43 2025 by rpki-client