
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e34382e302f32302d3230203d3e203238363234.roa
File:                     3230312e33332e34382e302f32302d3230203d3e203238363234.roa (raw, json)
Hash identifier:          +sqhWWMfvdJEuYgW+ayeUNnWouhG4WLQ2cJak+7E8ik=
Subject key identifier:   93:DE:59:DB:FF:CE:0C:1E:24:CE:5E:89:9C:70:12:CD:D5:48:B7:04
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       75CC40F44CD445FD50C464EC53FF902C1B42C9D6
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e34382e302f32302d3230203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:14 +0000
ROA not before:           Thu 30 Oct 2025 02:40:14 +0000
ROA not after:            Thu 29 Oct 2026 02:45:14 +0000
asID:                     28624
IP address blocks:        201.33.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cc:40:f4:4c:d4:45:fd:50:c4:64:ec:53:ff:90:2c:1b:42:c9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:14 2025 GMT
            Not After : Oct 29 02:45:14 2026 GMT
        Subject: CN=93DE59DBFFCE0C1E24CE5E899C7012CDD548B704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:c4:08:83:29:fa:59:ed:b2:e8:70:44:f5:
                    39:02:69:43:61:03:c3:7f:22:b3:05:f1:51:9a:c1:
                    9a:93:15:4c:76:c1:1d:be:16:c3:3d:00:ed:50:f8:
                    14:94:30:64:0f:b6:05:34:e3:35:74:fd:32:03:9b:
                    b6:57:dd:b8:73:64:da:74:f8:32:59:60:b2:90:8e:
                    3c:df:ad:c4:45:b5:eb:20:2b:b4:1d:e9:f6:c2:91:
                    b8:53:c9:06:82:34:7c:d9:e4:b4:d9:c9:66:06:aa:
                    8b:7b:8b:f3:81:03:7a:ab:79:d4:e9:e4:50:71:46:
                    7c:87:78:ce:5f:eb:99:99:2f:08:8f:84:13:06:5a:
                    b5:c4:7e:22:0e:cc:44:64:20:b2:de:11:6d:d4:85:
                    9a:bc:ef:ec:97:fb:3a:0f:a4:4c:fc:d9:60:c2:8e:
                    27:f5:6d:7c:44:18:77:40:a7:26:55:99:5b:a0:5d:
                    19:47:c0:88:c2:df:5a:eb:04:2a:ed:d7:dd:46:4d:
                    4a:ac:25:31:87:73:4b:0f:4d:3f:35:f8:22:5f:4a:
                    03:94:67:80:52:fa:d6:76:36:58:2b:db:6b:b0:fb:
                    12:75:71:bb:6c:fd:59:22:68:30:03:a0:e3:25:d2:
                    b6:68:24:fa:d9:3f:8f:bd:08:e8:c7:e4:8a:cd:84:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:59:DB:FF:CE:0C:1E:24:CE:5E:89:9C:70:12:CD:D5:48:B7:04
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e34382e302f32302d3230203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.48.0/20
    Signature Algorithm: sha256WithRSAEncryption
         31:a2:16:64:47:b3:6d:c6:1a:dd:2d:85:09:46:db:19:57:24:
         7b:86:8b:e8:43:17:03:39:4e:d4:5b:65:93:86:35:a2:4f:49:
         62:e0:8c:c8:77:eb:db:3d:27:f7:f9:eb:62:9b:03:72:cc:da:
         b8:c3:10:61:a1:36:c0:76:5e:df:a9:6c:ee:c1:a5:76:e9:0e:
         85:91:76:4a:ef:bf:f5:2a:31:b5:dd:1d:b5:32:bc:54:fa:94:
         f1:bb:8f:fc:b7:fb:22:04:cd:51:ee:14:f2:f3:13:43:5c:e0:
         5b:84:8f:9c:0c:fd:f5:73:65:44:7b:1d:3a:6d:cb:2d:0b:c2:
         25:f5:0e:82:95:2b:cc:ac:76:a8:5c:7b:8a:51:77:25:9b:33:
         59:98:17:58:2b:00:3c:6f:c0:62:68:a3:24:6e:91:4e:a3:f9:
         a5:7c:63:5a:34:72:1b:ba:15:5a:53:7b:0c:d7:1a:98:2f:8a:
         86:a9:57:a5:83:06:3b:cd:61:10:ba:7c:9a:0a:50:fe:70:a8:
         da:76:de:53:6c:3a:e5:24:b8:40:c1:3d:e0:f2:ea:e4:59:73:
         22:76:43:5d:0d:70:55:b7:25:ac:d1:3b:06:ea:e6:1e:ca:7c:
         2f:30:a5:58:00:b8:f0:51:b1:20:c2:00:f4:c6:ff:57:bc:ec:
         5f:33:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:31:47 2025 by rpki-client