
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e34332e302f32342d3234203d3e203238363234.roa
File:                     3230312e33332e34332e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          kdVNj5RdtdK+gc6dCJ1j4AJhGOJ2BDzFFeuPveIKwFg=
Subject key identifier:   4B:43:1B:A2:2A:D4:04:56:EE:ED:6B:A5:34:5E:77:4E:A1:B2:A9:D3
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       51A525121082CE95C1CA1B828F60CC16A42DA13D
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e34332e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:25 +0000
ROA not before:           Thu 30 Oct 2025 02:40:25 +0000
ROA not after:            Thu 29 Oct 2026 02:45:25 +0000
asID:                     28624
IP address blocks:        201.33.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a5:25:12:10:82:ce:95:c1:ca:1b:82:8f:60:cc:16:a4:2d:a1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:25 2025 GMT
            Not After : Oct 29 02:45:25 2026 GMT
        Subject: CN=4B431BA22AD40456EEED6BA5345E774EA1B2A9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:3b:68:af:b7:60:fb:28:a8:61:ae:1d:3e:
                    80:75:f7:de:1e:30:c0:d6:a3:cc:c7:31:82:9f:09:
                    35:06:ca:b7:48:f8:1a:3a:e8:4c:8b:23:ac:b1:a3:
                    eb:63:94:34:5e:34:21:5d:04:41:93:b3:8f:b1:22:
                    ca:be:3a:0c:4d:06:25:72:ee:56:ae:5b:31:e7:5c:
                    2c:9d:5a:bd:0e:b0:56:96:69:1e:b9:56:4c:a2:73:
                    68:a5:cd:ed:f3:e0:ed:d1:36:8f:8e:23:a9:b2:52:
                    ec:c7:cb:ff:20:3e:81:56:a3:77:2f:8d:e2:36:26:
                    c3:a6:fb:14:74:1b:32:ea:4f:60:55:71:aa:93:19:
                    a0:c9:1c:9c:46:e6:1c:2f:4e:1b:0c:2e:7c:3c:6d:
                    3c:88:d1:84:cb:6b:f6:4f:aa:56:05:b8:50:c9:e2:
                    71:ab:ff:f3:8b:07:15:0a:ab:df:32:83:5c:5a:17:
                    1c:ce:ab:40:e6:94:fd:07:d3:08:a3:da:4c:1d:54:
                    21:4e:35:0a:23:78:e2:64:08:18:e2:b5:f1:57:8d:
                    f6:7e:03:3c:4d:09:e7:1c:7d:72:1a:6a:5b:b5:7b:
                    ef:e4:69:b7:bb:d0:4a:15:f7:a5:70:74:8a:9c:24:
                    1a:d7:b4:9c:ce:c4:17:c5:41:13:31:96:b5:5b:ed:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:43:1B:A2:2A:D4:04:56:EE:ED:6B:A5:34:5E:77:4E:A1:B2:A9:D3
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e34332e302f32342d3234203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.43.0/24
    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:4e:d1:43:d3:6d:1f:e4:81:74:d6:f2:9e:ea:38:3e:7e:
         b0:78:31:d2:19:b3:de:8b:b1:96:d8:4d:0b:c3:78:18:df:b3:
         93:01:dc:f6:f5:86:60:57:70:e0:0f:af:cf:bb:60:7c:85:b6:
         6e:cb:00:de:36:ca:fa:f0:76:0c:32:a7:f1:9e:2a:1e:93:4b:
         a8:04:0e:12:15:92:61:eb:d7:f1:ba:37:c7:a3:3b:16:b0:2f:
         1f:c1:74:46:64:ad:01:6b:fe:02:82:19:9e:30:bd:da:29:e1:
         cd:87:d6:ec:f1:ab:35:ae:1e:dc:eb:37:79:7b:09:77:22:6d:
         6a:a4:62:8b:e9:40:e3:5e:68:d3:d8:68:e3:56:40:c0:88:23:
         ea:54:2b:da:5e:79:00:75:2d:7c:48:7b:2f:92:11:84:26:73:
         6c:6b:19:b8:f9:c0:b5:76:78:22:46:64:74:7c:b9:3b:11:30:
         70:bb:c5:a0:68:d7:50:21:d9:7e:0a:82:27:a1:0e:45:35:f4:
         46:90:09:4b:cb:cd:95:f8:37:95:65:79:e4:47:02:dc:f5:53:
         3c:47:ce:6e:9c:16:8d:a4:49:5c:9c:e0:0d:58:e5:15:53:aa:
         74:51:88:74:23:d8:2a:69:1c:c5:67:1b:38:a4:c7:6d:e8:cd:
         91:e6:42:2f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUaUlEhCCzpXByhuCj2DMFqQtoT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQy
OUJBMDZDNDAeFw0yNTEwMzAwMjQwMjVaFw0yNjEwMjkwMjQ1MjVaMDMxMTAvBgNV
BAMTKDRCNDMxQkEyMkFENDA0NTZFRUVENkJBNTM0NUU3NzRFQTFCMkE5RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeTtor7dg+yioYa4dPoB1994e
MMDWo8zHMYKfCTUGyrdI+Bo66EyLI6yxo+tjlDReNCFdBEGTs4+xIsq+OgxNBiVy
7lauWzHnXCydWr0OsFaWaR65Vkyic2ilze3z4O3RNo+OI6myUuzHy/8gPoFWo3cv
jeI2JsOm+xR0GzLqT2BVcaqTGaDJHJxG5hwvThsMLnw8bTyI0YTLa/ZPqlYFuFDJ
4nGr//OLBxUKq98yg1xaFxzOq0DmlP0H0wij2kwdVCFONQojeOJkCBjitfFXjfZ+
AzxNCeccfXIaalu1e+/kabe70EoV96VwdIqcJBrXtJzOxBfFQRMxlrVb7SCzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUS0MboirUBFbu7WulNF53TqGyqdMwHwYDVR0j
BBgwFoAUx5iK5qeeeN1xI1CW6bri5Cm6BsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9DNzk4OEFFNkE3OUU3OERENzEyMzUwOTZFOUJBRTJFNDI5QkEwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OTg4QUU2QTc5RTc4REQ3
MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzMDMxMmUzMzMzMmUzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM2
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkhKzANBgkqhkiG9w0BAQsFAAOCAQEAPOZO0UPTbR/k
gXTW8p7qOD5+sHgx0hmz3ouxlthNC8N4GN+zkwHc9vWGYFdw4A+vz7tgfIW2bssA
3jbK+vB2DDKn8Z4qHpNLqAQOEhWSYevX8bo3x6M7FrAvH8F0RmStAWv+AoIZnjC9
2inhzYfW7PGrNa4e3Os3eXsJdyJtaqRii+lA415o09ho41ZAwIgj6lQr2l55AHUt
fEh7L5IRhCZzbGsZuPnAtXZ4IkZkdHy5OxEwcLvFoGjXUCHZfgqCJ6EORTX0RpAJ
S8vNlfg3lWV55EcC3PVTPEfObpwWjaRJXJzgDVjlFVOqdFGIdCPYKmkcxWcbOKTH
bejNkeZCLw==
-----END CERTIFICATE-----
Generated at Tue Nov  4 05:27:11 2025 by rpki-client