
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e36332e302f32342d3234203d3e203238363234.roa
File:                     3230312e33332e36332e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          VVrYTsDSe4FGkl1Eupt1N9rXJ3rhpAk2MhDLZcfuzUE=
Subject key identifier:   4A:F3:07:49:A3:45:31:D4:32:80:C9:FA:C1:DA:C1:CF:BB:81:F7:E8
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       180A48F1D5758A012ABDC21608DBCC59F31170BA
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e36332e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:09 +0000
ROA not before:           Thu 30 Oct 2025 02:40:09 +0000
ROA not after:            Thu 29 Oct 2026 02:45:09 +0000
asID:                     28624
IP address blocks:        201.33.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0a:48:f1:d5:75:8a:01:2a:bd:c2:16:08:db:cc:59:f3:11:70:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:09 2025 GMT
            Not After : Oct 29 02:45:09 2026 GMT
        Subject: CN=4AF30749A34531D43280C9FAC1DAC1CFBB81F7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:6f:04:dc:55:dc:e4:82:ec:9a:86:47:7e:
                    48:92:0a:4c:6c:41:00:de:3a:95:b6:7c:af:46:b2:
                    c2:ae:01:1e:60:de:f9:b3:01:26:4e:81:b0:c3:9d:
                    8c:5a:79:de:51:43:34:77:e1:3b:13:4d:fc:8a:b6:
                    32:77:0e:2d:4d:8b:ca:f7:cf:65:e7:b6:19:68:06:
                    b7:38:6d:0f:f5:72:03:0b:6c:af:35:ef:ed:bd:67:
                    4f:d4:8d:78:b9:44:82:50:61:e4:ef:46:0d:aa:f9:
                    2b:0e:91:0a:3b:40:ab:61:f8:f1:30:66:70:11:ee:
                    8b:94:4c:d5:65:dd:eb:73:9b:94:86:af:9d:36:d4:
                    0c:cf:18:ff:d9:df:55:0e:b5:8f:1c:e8:aa:78:3d:
                    47:e1:a4:9f:6c:2e:cf:82:14:39:02:95:bf:4c:64:
                    cf:ff:e8:e4:cb:15:af:a8:ac:d3:bd:d6:4e:a1:97:
                    85:4c:e0:9a:46:6f:87:be:70:33:19:5b:7a:db:ec:
                    98:2a:59:f4:6a:df:e5:10:94:6a:f2:ad:74:44:f2:
                    f9:c3:0c:b8:a5:8d:b9:87:73:de:ed:f0:32:57:30:
                    21:f7:32:27:ee:49:4a:c4:96:d6:22:3f:34:4a:52:
                    cd:36:68:a6:aa:1e:24:65:88:4f:46:b4:89:6f:54:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:07:49:A3:45:31:D4:32:80:C9:FA:C1:DA:C1:CF:BB:81:F7:E8
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e36332e302f32342d3234203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.63.0/24
    Signature Algorithm: sha256WithRSAEncryption
         75:bc:d8:ce:f1:27:b7:0b:27:a7:b5:be:de:6f:32:c0:6b:fd:
         15:50:f6:0c:1f:c5:14:20:b0:a9:29:1b:29:27:5f:79:6b:44:
         07:73:4d:07:0d:51:76:a3:27:0e:a5:fa:32:bf:3b:05:41:10:
         60:bc:f9:24:b6:f2:74:ba:12:4d:d8:23:60:77:ba:80:78:bc:
         0c:e9:cd:43:17:84:0c:78:65:d4:65:b9:74:bf:78:e4:a9:7c:
         16:7d:31:09:d8:66:3f:f1:ac:e7:83:1b:ce:6e:11:ed:a7:35:
         40:b2:04:2c:95:04:9f:49:09:93:2b:78:5e:ba:52:0b:f7:5d:
         35:a6:d5:d0:31:f9:9c:89:de:74:8b:2f:82:3f:bd:9f:01:1e:
         9a:13:8e:fa:53:b6:a1:1d:60:c1:56:40:de:6a:d9:1c:bf:3a:
         9b:69:99:26:fa:8c:1d:5f:b3:b3:81:80:58:ab:9d:0d:0a:f8:
         97:5b:6c:dc:9f:4c:6e:2f:1e:67:be:06:16:cf:45:4e:47:b6:
         fa:64:50:79:a9:12:0c:3c:e5:44:d6:cb:6b:11:8f:b7:48:72:
         2b:6c:43:97:80:ac:86:7b:8a:f4:b4:16:ab:07:33:be:7c:26:
         96:f3:c7:0b:29:9c:e7:80:b8:b9:1e:97:ee:02:d9:b4:d0:22:
         fb:91:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:27:13 2025 by rpki-client