
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e36362e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e36362e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          2NA1AMcjgejrbNHa7KyZU+Ysn/iJOATlQYFULotRqBw=
Subject key identifier:   AF:9D:3A:20:80:1F:C5:18:1B:B9:F1:86:13:3A:1A:61:BB:88:D0:92
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       3EB04F640735DCD225D923CB194BBEE7962DAAB0
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e36362e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:03 +0000
ROA not before:           Thu 30 Oct 2025 02:40:03 +0000
ROA not after:            Thu 29 Oct 2026 02:45:03 +0000
asID:                     28624
IP address blocks:        187.110.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b0:4f:64:07:35:dc:d2:25:d9:23:cb:19:4b:be:e7:96:2d:aa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:03 2025 GMT
            Not After : Oct 29 02:45:03 2026 GMT
        Subject: CN=AF9D3A20801FC5181BB9F186133A1A61BB88D092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:0d:7a:70:84:74:2b:19:63:2f:f1:79:b5:
                    b1:57:23:6d:67:22:10:3e:2b:7d:0c:53:36:93:24:
                    2f:b7:55:5c:05:7f:c8:ad:04:94:da:98:d3:59:fc:
                    f8:6d:58:26:7c:aa:a3:9c:4f:00:1b:95:b1:31:e3:
                    b4:be:b5:0a:48:87:2e:cd:54:86:fa:e8:d6:ff:b8:
                    d9:7f:4b:cb:4c:11:ff:74:50:8e:27:4e:4f:44:a6:
                    42:4b:1b:a1:3b:e9:97:62:e5:00:d6:c7:b1:3c:c5:
                    c0:4f:29:c6:07:e8:69:40:88:33:3a:bd:e0:ed:87:
                    bc:8c:03:a5:e4:fd:29:c1:c3:46:26:4b:7c:48:2e:
                    81:4e:86:41:f4:8b:ce:08:c5:57:fe:32:bf:b5:d4:
                    b9:15:67:82:78:98:d9:05:a5:c2:df:c2:81:82:c8:
                    b3:3a:d6:fc:ed:eb:c4:b6:49:54:e5:9e:0c:f1:89:
                    12:b2:5c:62:9e:bb:9c:d3:2a:0e:31:53:88:9a:b3:
                    02:b8:67:2b:19:f8:4e:bf:90:62:3c:06:18:9c:02:
                    18:bf:1d:fa:b9:5d:75:26:72:b8:74:36:76:fa:4d:
                    22:de:fc:7b:08:ab:c4:00:1d:87:62:81:0e:0b:a5:
                    b1:34:7a:a6:56:0d:dd:9b:e1:3c:7c:e5:29:dc:5b:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:3A:20:80:1F:C5:18:1B:B9:F1:86:13:3A:1A:61:BB:88:D0:92
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e36362e302f32342d3234203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.66.0/24
    Signature Algorithm: sha256WithRSAEncryption
         7b:93:a0:09:2f:85:6b:c3:56:44:96:ec:da:b0:c8:3a:a9:da:
         2c:25:d9:49:3d:a9:c1:01:79:f7:e7:62:62:d5:bc:1e:b1:b9:
         44:34:7e:47:6c:2a:5e:0f:10:3a:c8:c0:07:59:fa:9c:65:56:
         47:a2:26:77:a5:1b:48:7b:e2:9e:6c:15:4d:17:fb:01:f2:1c:
         1b:5d:cf:b6:be:ac:d4:e5:d6:6a:d0:a8:13:bd:56:57:e0:3a:
         64:7f:55:16:3f:af:dc:25:b6:15:76:ae:1e:3d:90:1e:bd:38:
         a8:e0:ba:0e:c5:65:85:81:24:8b:b9:3d:63:4a:34:aa:40:3c:
         6b:2b:6e:66:c0:6a:5e:32:90:e0:46:cf:7b:2c:e3:86:57:01:
         cc:b7:11:01:0b:20:8a:34:bb:bc:60:8c:94:cc:d4:cb:b8:d8:
         3d:85:68:9b:5c:f1:e1:bd:17:26:de:08:de:0d:32:13:9e:d5:
         ec:98:7e:45:93:bb:cb:15:39:85:4d:39:09:86:6c:bc:32:59:
         5e:62:35:0d:ef:4d:55:38:1d:cf:c4:b9:e3:84:53:62:2f:b9:
         a7:9d:f2:c4:de:37:02:8c:93:3c:84:73:f5:bb:49:8d:72:92:
         4b:f9:b4:17:80:31:39:2b:75:a7:d2:60:23:cc:17:c4:2e:4a:
         96:f4:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:27:12 2025 by rpki-client