
$ rpki-client -vvf rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3139312e302f32342d3234203d3e20323733333936.roa
File:                     3136382e39302e3139312e302f32342d3234203d3e20323733333936.roa (raw, json)
Hash identifier:          JHfZS9HBQUDKCFUTdSi4QiyWkb8Zhey0m+lpo+gSb+A=
Subject key identifier:   F7:F4:1E:66:B6:D1:CB:0D:C8:79:8A:EB:B0:89:BF:15:18:C7:0B:93
Certificate issuer:       /CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5
Certificate serial:       13FB31AABA7A60DA184A212ABB298E4BC6026473
Authority key identifier: DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3139312e302f32342d3234203d3e20323733333936.roa
Signing time:             Sun 02 Nov 2025 13:44:13 +0000
ROA not before:           Sun 02 Nov 2025 13:39:13 +0000
ROA not after:            Sun 01 Nov 2026 13:44:13 +0000
asID:                     273396
IP address blocks:        168.90.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.crl
                          rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:55:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fb:31:aa:ba:7a:60:da:18:4a:21:2a:bb:29:8e:4b:c6:02:64:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5
        Validity
            Not Before: Nov  2 13:39:13 2025 GMT
            Not After : Nov  1 13:44:13 2026 GMT
        Subject: CN=F7F41E66B6D1CB0DC8798AEBB089BF1518C70B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:cf:a3:de:46:86:92:60:b3:6e:13:02:11:
                    84:2e:3f:ae:fb:3d:6c:fc:f7:3a:91:47:0d:99:86:
                    14:c6:71:17:e3:96:c1:3c:76:e7:eb:b4:26:16:d9:
                    28:e0:33:bd:cf:62:f1:bc:26:a5:69:22:2f:0d:c7:
                    7b:1d:bf:f8:72:9d:9d:73:13:78:a9:8a:50:1b:cb:
                    36:eb:16:b3:05:1d:e0:a1:1d:58:ee:fc:7c:47:24:
                    74:e3:4b:09:12:d5:49:4d:a0:71:1b:bc:04:6a:82:
                    81:5e:ed:7d:d4:b1:c8:a1:8d:bf:c5:85:d9:85:28:
                    3f:56:09:af:91:6f:26:3a:a6:af:21:b4:e4:75:10:
                    f7:26:53:a6:a4:04:8c:bb:ba:c9:61:a2:05:e6:11:
                    e4:27:ca:49:0f:0b:60:64:5a:02:de:8b:b3:da:a1:
                    10:93:ce:63:1c:df:76:1d:a1:89:3a:f7:5a:99:1b:
                    78:80:a8:55:bf:22:9b:75:03:a7:22:bb:76:90:80:
                    d3:ff:fe:9c:99:77:f9:d1:b8:ff:7f:d9:ff:1c:78:
                    bc:48:58:22:23:01:16:1e:8a:9a:78:73:63:c6:89:
                    a1:e6:43:a9:ec:ad:f9:1f:ab:5a:86:df:dd:ef:d1:
                    56:d7:8f:31:78:34:e5:4a:10:13:7b:41:ae:2c:4d:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:1E:66:B6:D1:CB:0D:C8:79:8A:EB:B0:89:BF:15:18:C7:0B:93
            X509v3 Authority Key Identifier:
                keyid:DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/3136382e39302e3139312e302f32342d3234203d3e20323733333936.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.191.0/24
    Signature Algorithm: sha256WithRSAEncryption
         84:00:45:0c:e0:dc:8b:d8:91:0d:e1:f8:03:6c:e4:cc:82:a8:
         e3:1d:3f:76:9b:f8:11:86:04:46:ad:aa:7f:7e:48:65:52:53:
         27:e1:6e:38:74:6c:08:12:35:4f:97:ae:65:5b:0d:a7:86:87:
         ba:98:cd:9f:e1:2f:25:6f:d7:f5:2a:25:e1:4b:16:6f:96:2f:
         0c:a6:a1:20:6a:fe:1b:c6:8e:85:b2:b9:af:44:30:cf:b7:ce:
         d4:f1:9c:8d:89:d2:47:f6:ff:d2:09:8d:ad:b7:a5:d3:80:ba:
         2b:51:60:6a:9a:b6:cd:8d:c8:91:17:eb:2e:d3:91:49:e4:c7:
         be:ca:34:c5:dd:58:ad:1c:aa:a0:92:a1:c7:7c:3b:3b:ba:32:
         c6:fe:55:9b:97:30:0f:96:49:37:37:f2:35:96:73:7c:40:9e:
         b1:e8:49:1e:e9:42:84:ab:48:f0:66:a1:c0:ef:82:f8:15:fc:
         03:c1:1d:3c:99:27:9a:8c:34:c9:49:71:98:82:77:9c:9e:42:
         ec:3e:30:3e:77:04:86:f9:85:e9:62:6b:47:af:26:10:18:b3:
         e8:1a:1d:eb:65:ec:aa:98:6b:64:d2:2b:49:17:bd:9e:7b:c1:
         ca:4d:7c:0e:da:84:a8:74:f3:ad:39:61:ed:2c:ca:4a:9b:43:
         29:13:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:26:44 2025 by rpki-client