
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3135382e302f32342d3234203d3e203238363234.roa
File:                     3230302e3233372e3135382e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          1i0xUgYs8E+Zry2RfFr8XzvYvhX55DhZB16UPy2tGVE=
Subject key identifier:   E9:54:28:2E:B8:75:33:06:77:9C:8A:29:EC:8C:41:F8:93:A9:ED:2F
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       103D67654A07325052936D5E1F9949F477A7A524
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3135382e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:26 +0000
ROA not before:           Thu 30 Oct 2025 02:40:26 +0000
ROA not after:            Thu 29 Oct 2026 02:45:26 +0000
asID:                     28624
IP address blocks:        200.237.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3d:67:65:4a:07:32:50:52:93:6d:5e:1f:99:49:f4:77:a7:a5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:26 2025 GMT
            Not After : Oct 29 02:45:26 2026 GMT
        Subject: CN=E954282EB8753306779C8A29EC8C41F893A9ED2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:37:d9:11:5c:c0:37:15:60:3d:e6:ea:53:
                    e9:3e:c7:30:dc:17:fa:0e:dd:2c:21:45:45:f6:64:
                    bc:d8:03:c8:77:14:7d:2a:eb:50:87:d6:65:7f:11:
                    67:05:3e:b8:b7:0a:ed:dc:71:e7:0b:16:14:7f:3c:
                    41:d2:d1:70:19:88:d8:98:bc:b7:05:9a:f8:2b:a6:
                    e3:a0:4a:b9:99:c3:34:f9:ac:21:da:04:95:7b:94:
                    e3:6f:dc:c9:99:d7:05:e8:20:06:21:f8:7b:1d:42:
                    75:c1:69:ef:cd:a6:fc:3b:75:77:41:c8:a9:f0:73:
                    15:87:e2:49:66:8b:1d:23:7e:20:ad:ef:3f:68:88:
                    ba:b8:a6:67:28:04:63:21:13:3e:e9:7a:0a:28:db:
                    66:74:d4:b9:dc:10:cb:ea:c1:a8:e8:8d:80:88:4b:
                    91:6f:72:4c:7b:44:1d:bd:78:24:e8:eb:d2:07:e8:
                    01:36:e2:15:64:c5:9c:f8:21:b2:48:b8:12:3a:fd:
                    e3:22:71:b8:4c:0a:05:5c:21:dd:a8:a4:2e:36:04:
                    84:c6:43:4c:ea:4a:03:52:c6:3c:fc:9d:59:93:1b:
                    b4:29:69:d8:1c:8e:b0:be:ca:15:a0:9a:95:ce:7a:
                    11:67:79:d6:61:d0:77:02:a3:0e:e4:3b:d5:56:04:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:28:2E:B8:75:33:06:77:9C:8A:29:EC:8C:41:F8:93:A9:ED:2F
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3135382e302f32342d3234203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.158.0/24
    Signature Algorithm: sha256WithRSAEncryption
         6c:07:c1:74:93:16:27:c4:1a:83:f4:48:fb:17:af:e1:98:bc:
         81:46:60:6e:0b:b7:11:76:24:4e:7c:6c:e4:c8:7e:5c:f9:48:
         af:af:a7:71:22:15:37:e1:69:db:17:38:fd:69:6b:c7:25:8f:
         d3:65:11:13:74:1c:ad:e3:04:88:3a:d6:e5:b2:ea:df:ff:a5:
         c9:c0:0c:b5:29:4d:91:f3:c0:01:f4:b1:e0:8e:ed:20:ad:03:
         a4:c0:3c:8a:5f:75:76:82:ed:b5:c4:00:ab:fd:81:b4:6d:e3:
         89:fa:92:52:59:9a:ca:e8:29:ec:ab:30:c8:f8:14:08:81:55:
         f3:b2:17:39:0c:3d:8f:1f:be:03:5d:cb:a2:b7:96:5d:b9:72:
         e0:c1:92:9c:23:b7:73:1e:4b:1f:88:5e:19:9f:f6:5c:a4:90:
         61:2e:6a:6b:f5:9a:c3:61:88:3b:a4:7a:e1:f1:94:6e:f3:9d:
         e3:e4:e4:6b:ce:fc:52:a0:51:8a:53:12:71:19:f0:14:c0:19:
         9f:c3:c4:2e:7f:74:b7:de:4d:81:5c:7c:7a:0b:80:9d:06:d4:
         0d:1f:f4:80:09:26:80:25:6a:6e:9d:fd:a5:3a:da:f9:fa:d7:
         9c:46:3a:2d:2e:c0:60:e5:6b:43:1c:42:48:0a:92:fd:e1:a1:
         78:40:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:31:44 2025 by rpki-client