
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f32302d3230203d3e203238363234.roa
File:                     3230302e3233372e3132382e302f32302d3230203d3e203238363234.roa (raw, json)
Hash identifier:          B+hSYWMXZOnmT84Ogn2hkp+mQLY5Fj3xOG449XEOjyg=
Subject key identifier:   47:5B:7A:C0:DA:97:BC:5F:69:2A:18:68:CA:C7:F7:A0:BF:A2:AC:3B
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       1B5B79C092D320D266873ACAC018A509DE1C133D
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f32302d3230203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:04 +0000
ROA not before:           Thu 30 Oct 2025 02:40:04 +0000
ROA not after:            Thu 29 Oct 2026 02:45:04 +0000
asID:                     28624
IP address blocks:        200.237.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5b:79:c0:92:d3:20:d2:66:87:3a:ca:c0:18:a5:09:de:1c:13:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:04 2025 GMT
            Not After : Oct 29 02:45:04 2026 GMT
        Subject: CN=475B7AC0DA97BC5F692A1868CAC7F7A0BFA2AC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:39:5c:1a:3a:60:20:5e:d4:e6:60:3a:87:
                    04:83:af:2e:8c:0f:ba:f7:01:a6:51:b9:9e:6d:0c:
                    c6:6d:6c:4f:98:76:b8:a9:c3:13:2c:5b:05:73:a2:
                    a1:72:9d:e4:af:df:2a:82:60:88:c8:fe:37:05:18:
                    2d:82:03:ba:22:2e:ab:a9:a2:c5:1d:48:f7:27:1f:
                    28:64:53:a8:66:a8:28:ca:ae:00:99:3b:1e:46:23:
                    54:25:2d:b3:1b:d6:dc:17:79:d2:e0:04:b4:1f:96:
                    7e:bc:cf:08:fe:18:52:f3:5a:57:96:cd:c5:43:12:
                    37:45:f4:a8:37:71:82:04:ad:87:d6:ad:c3:72:68:
                    9d:1f:f8:ef:e4:69:17:d7:91:d0:67:26:18:a5:79:
                    ff:7f:7b:79:ec:d1:55:26:5b:f6:8e:29:48:b3:22:
                    45:67:30:68:6b:50:44:00:98:f3:c6:2a:07:71:4a:
                    e7:c4:2a:55:6d:d9:1e:da:7c:85:17:a1:a7:c7:cf:
                    28:78:7e:92:5d:ba:42:7c:b0:ef:69:a6:1e:e9:1e:
                    35:cc:32:fa:f9:a1:d2:ac:a4:6f:fc:03:88:71:a1:
                    a4:cf:b2:78:9f:54:4a:fc:4a:48:9b:ec:29:4a:1e:
                    a9:22:2b:fd:17:ce:e6:ab:3c:97:73:1a:a8:5a:84:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5B:7A:C0:DA:97:BC:5F:69:2A:18:68:CA:C7:F7:A0:BF:A2:AC:3B
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f32302d3230203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.128.0/20
    Signature Algorithm: sha256WithRSAEncryption
         0c:86:5e:56:68:e0:c0:f7:de:41:82:53:58:0f:93:4f:5e:9e:
         e8:7b:b0:0d:53:8e:3c:21:71:52:b5:56:64:de:6d:7e:8b:49:
         8d:04:70:72:1f:40:bd:5a:bd:d6:0a:97:d5:e8:03:35:d7:61:
         07:aa:ff:92:4e:ac:35:2f:65:5e:d3:f4:f4:89:04:dd:05:e3:
         45:8c:90:a9:3b:9d:47:f5:c4:b6:2f:d7:3a:bd:29:f4:77:a9:
         30:fa:6b:b0:0c:d1:d2:42:e4:69:c0:ad:f2:58:e1:67:cb:03:
         9c:c8:ae:2e:c5:5f:19:e5:b8:a8:1f:2c:e7:3f:48:e8:17:62:
         69:37:48:16:55:3b:d5:2f:b5:04:98:26:23:c2:64:a9:cf:70:
         c9:59:d5:95:ad:6e:0f:b7:c2:92:e5:07:c6:4f:80:d7:af:8b:
         0f:78:35:59:94:95:e0:d9:3e:60:2f:a0:4b:30:47:a4:dc:92:
         ee:d9:b4:de:4e:95:d2:58:9b:ed:86:59:2a:21:f2:c4:46:63:
         42:0d:7f:4e:a4:ca:02:cd:05:3f:32:f0:d6:84:fb:14:3f:c8:
         b3:78:8c:06:44:22:03:da:09:3a:0d:9e:c6:00:1c:3a:9e:67:
         72:0e:a7:61:ce:bc:47:7a:a1:44:dd:b6:1a:53:2c:af:82:7c:
         04:09:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:31:44 2025 by rpki-client