
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134382e302f32342d3234203d3e203238363234.roa
File:                     3230302e3233372e3134382e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          Ykyv927I+u848x4xJ/LxmYMSWK94unSu/bK89nRpzFY=
Subject key identifier:   40:C3:F3:2C:9C:84:DF:91:4E:4A:A6:EA:2A:E0:C0:6B:81:E7:C5:14
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       571865D66FFE55E21318FE39F62050341B10D8DC
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134382e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:25 +0000
ROA not before:           Thu 30 Oct 2025 02:40:25 +0000
ROA not after:            Thu 29 Oct 2026 02:45:25 +0000
asID:                     28624
IP address blocks:        200.237.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:18:65:d6:6f:fe:55:e2:13:18:fe:39:f6:20:50:34:1b:10:d8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:25 2025 GMT
            Not After : Oct 29 02:45:25 2026 GMT
        Subject: CN=40C3F32C9C84DF914E4AA6EA2AE0C06B81E7C514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:34:ca:94:64:85:00:fa:a6:0c:e2:81:7e:
                    e4:8d:f9:11:24:4e:ba:c3:33:7f:00:56:15:0b:7f:
                    75:c2:db:6f:03:de:9c:5a:0a:8b:6d:19:9a:8e:18:
                    7b:43:a6:d0:bc:4a:1f:84:5d:c7:33:8e:21:94:c0:
                    00:a6:72:1b:cf:c9:e5:04:4e:d3:db:7d:e4:ef:6c:
                    34:5d:35:bc:09:d9:55:9f:da:64:80:49:14:8c:1d:
                    6b:39:ba:df:87:d9:b9:e1:b2:e1:18:a8:fd:1c:3c:
                    bc:37:6d:50:6f:c0:91:ff:25:53:b0:ad:bb:a6:3e:
                    d3:b5:24:fa:6b:4c:b0:74:b5:d5:44:53:97:7e:c1:
                    c5:8e:92:e5:75:7a:bb:eb:09:f4:43:79:78:32:cb:
                    ca:a9:79:44:97:7e:0a:e4:dd:6d:4d:82:45:80:7a:
                    44:e6:f5:5b:04:12:c3:7b:9d:ad:ba:5b:c6:50:c7:
                    4d:d0:d4:c5:10:7b:2e:13:8c:a9:c9:94:de:38:f2:
                    8b:4f:2e:7f:66:58:29:55:07:fc:23:56:22:21:de:
                    03:1f:5f:14:78:80:70:7c:01:e5:60:b9:b4:e3:82:
                    eb:1b:e0:c1:38:18:2e:df:00:cd:37:e6:2e:38:6c:
                    33:59:ea:3e:1e:dc:73:20:e8:9f:8f:2e:83:e3:59:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:F3:2C:9C:84:DF:91:4E:4A:A6:EA:2A:E0:C0:6B:81:E7:C5:14
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134382e302f32342d3234203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.148.0/24
    Signature Algorithm: sha256WithRSAEncryption
         37:af:7e:3b:4c:8e:32:89:f0:12:9c:4b:de:0e:48:58:34:ff:
         50:fd:a3:56:08:41:a3:92:d6:a4:40:fa:18:33:7c:e6:b0:08:
         c6:da:24:f8:52:f9:d5:7b:07:25:ac:a2:da:ff:ac:3e:1e:7d:
         76:9f:ff:e3:1f:11:36:9f:62:1b:1f:f4:06:8b:23:4a:1c:2f:
         ef:4a:aa:85:26:e0:c4:3e:6d:cd:02:d5:52:8b:74:32:70:34:
         84:03:9d:91:01:3c:7d:fd:72:ac:50:c2:4e:b6:b0:71:02:5e:
         e5:f2:4e:b3:42:d4:42:7e:92:2e:6b:21:a9:32:61:53:34:bd:
         84:c0:89:2a:19:66:be:37:34:d9:e1:2a:be:f6:ff:76:48:63:
         6f:7a:3c:40:17:74:d0:b2:b3:e5:89:77:84:ef:7d:6a:f1:3e:
         32:2d:2a:03:bd:d3:bd:d1:4c:d2:c1:92:89:82:50:d1:a4:e1:
         ef:e1:31:8a:8e:03:58:03:33:f7:be:e3:fb:58:d9:a5:5c:8e:
         5f:27:78:54:f3:7a:c1:a1:4c:7c:ce:c7:d5:b6:a9:fb:dd:95:
         e3:48:75:02:4c:fd:27:66:b6:44:34:9e:98:04:82:23:db:a4:
         2c:3e:31:2c:1f:15:d0:41:7a:a9:73:cd:9d:b2:1e:fe:1b:5c:
         91:2b:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:28:56 2025 by rpki-client