
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136302e302f32302d3230203d3e203238363234.roa
File:                     3230312e35342e3136302e302f32302d3230203d3e203238363234.roa (raw, json)
Hash identifier:          gykYatFUClLpMH9A+AAr0RNRm9S7sXJtLGDkODHXd04=
Subject key identifier:   16:8E:EB:68:BD:0B:06:CF:D5:ED:0F:81:A6:DA:17:2F:C5:FA:78:54
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       5BCF3F0B0935C66D70B460CCD02E8B5DCCC93419
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136302e302f32302d3230203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:23 +0000
ROA not before:           Thu 30 Oct 2025 02:40:23 +0000
ROA not after:            Thu 29 Oct 2026 02:45:23 +0000
asID:                     28624
IP address blocks:        201.54.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cf:3f:0b:09:35:c6:6d:70:b4:60:cc:d0:2e:8b:5d:cc:c9:34:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:23 2025 GMT
            Not After : Oct 29 02:45:23 2026 GMT
        Subject: CN=168EEB68BD0B06CFD5ED0F81A6DA172FC5FA7854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:2a:af:20:e9:8a:b4:e0:bf:65:2b:4b:b2:
                    b9:ab:fa:c2:be:5d:52:e9:f2:45:fe:7b:58:f9:a2:
                    38:8b:5f:2d:9c:cd:66:df:0a:24:56:6a:b5:06:4d:
                    bd:93:3b:c6:7f:bd:cc:13:70:5e:12:6c:c8:e5:c3:
                    2e:5d:44:90:24:1f:d4:ad:15:f8:04:1a:cd:50:95:
                    5b:6e:2f:3d:f7:ee:40:b4:1d:a0:a1:ba:66:d0:85:
                    03:da:30:17:4b:ec:a6:7d:03:7e:07:d9:aa:6b:de:
                    09:65:d5:cd:02:92:94:d9:b5:45:ab:3c:2b:c4:dc:
                    ee:aa:9c:12:80:4d:a3:01:01:3f:d5:6f:33:7b:1b:
                    75:18:44:3d:0b:92:fc:e8:fb:02:5c:a5:33:ca:4b:
                    33:3b:ef:98:f8:f6:c2:12:bf:ae:01:c4:77:5b:c7:
                    dd:2e:52:b5:e0:65:34:0d:e2:2f:71:88:ca:43:54:
                    a3:70:b1:db:a4:32:7d:b1:95:34:e1:8e:3e:6d:9d:
                    d3:5c:fc:8a:d3:2c:b9:b2:64:77:b3:9a:22:ca:0b:
                    49:77:f1:09:a6:3e:76:55:21:d9:75:a4:32:dc:ca:
                    ce:5f:e6:1a:39:e4:09:0a:ce:34:3a:d8:2d:12:8a:
                    23:38:68:c0:d8:4f:70:76:0a:27:d6:5d:c5:86:21:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:EB:68:BD:0B:06:CF:D5:ED:0F:81:A6:DA:17:2F:C5:FA:78:54
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136302e302f32302d3230203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.160.0/20
    Signature Algorithm: sha256WithRSAEncryption
         31:2f:78:3f:77:19:72:ed:a8:08:f4:62:16:cb:03:e2:6c:f7:
         37:e1:dc:8e:9d:27:d7:36:4a:5e:94:7c:17:30:3d:19:ad:89:
         53:5d:e6:fe:c8:2c:ca:11:fe:a8:28:cb:b8:3c:e1:d6:a0:4d:
         79:b9:3b:5e:46:08:c2:93:11:03:13:6f:2d:56:58:74:29:2c:
         af:8d:12:a8:c2:72:58:1d:e1:41:d4:d0:5e:20:7d:e0:ee:1b:
         37:c8:f6:91:49:05:ab:66:a5:36:8e:fa:0c:04:79:19:40:7f:
         79:9e:cf:24:99:88:2a:e0:95:b9:1a:5b:e1:26:53:ce:5b:c6:
         2f:7b:f8:66:0b:d6:98:5a:bc:af:af:f7:0d:23:a2:5e:0b:cd:
         d7:89:44:70:fb:54:ad:30:71:88:50:ec:94:e6:fd:af:a5:a5:
         69:1a:c2:5d:90:fc:28:4d:e7:f1:5f:07:94:7f:eb:d5:2b:15:
         3e:44:01:5f:d0:d0:fc:55:bb:0c:99:34:18:f0:58:16:61:f7:
         2e:81:ad:4e:91:ab:e6:30:da:1b:49:d6:d1:10:94:71:b8:d9:
         ba:59:17:d3:e4:b5:6a:af:b2:e5:20:ee:b5:61:a5:d6:fa:c9:
         64:76:9d:08:f7:9b:0a:a8:e8:3e:b1:ed:e8:e2:97:32:74:5c:
         5d:6f:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:27:15 2025 by rpki-client