
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136312e302f32342d3234203d3e203238363234.roa
File:                     3230312e35342e3136312e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          8LvmTzz4zNDSTTNNjWQdjj6qq6bgYcoJR5r1f0LGR/o=
Subject key identifier:   11:83:9C:22:07:16:7A:0E:9E:3E:89:A5:4E:EA:30:70:0C:46:5E:B5
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       5F740B8A42A7DAE08B3FE2A57066414C81BBBCAC
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136312e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:23 +0000
ROA not before:           Thu 30 Oct 2025 02:40:23 +0000
ROA not after:            Thu 29 Oct 2026 02:45:23 +0000
asID:                     28624
IP address blocks:        201.54.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:74:0b:8a:42:a7:da:e0:8b:3f:e2:a5:70:66:41:4c:81:bb:bc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:23 2025 GMT
            Not After : Oct 29 02:45:23 2026 GMT
        Subject: CN=11839C2207167A0E9E3E89A54EEA30700C465EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c6:ae:63:c1:96:ec:53:9d:18:3a:f5:6b:dd:
                    6c:4f:4d:c3:fd:5b:f3:26:85:36:f6:d1:3e:04:9f:
                    f3:25:ef:97:52:8d:a8:5e:95:79:1f:b1:59:bf:27:
                    99:1c:ca:25:63:e6:f2:67:e1:78:a2:22:ac:84:e5:
                    17:87:80:e4:29:67:e8:b2:a4:d6:03:21:ec:43:71:
                    fd:cb:47:62:0b:f0:28:00:ba:ec:61:48:0d:b1:3f:
                    29:1a:79:65:e0:7e:41:4e:61:29:64:b5:6a:2b:1e:
                    ea:d9:d0:15:8f:9f:b5:a0:06:98:9f:a5:3d:da:18:
                    06:d0:f5:26:6c:af:db:d5:fd:2e:74:da:5c:da:8c:
                    01:bf:e8:f8:7b:07:30:5e:91:e6:7c:bc:d2:67:c5:
                    a3:76:7e:c7:ad:f2:eb:de:92:2b:4d:cf:3c:81:b4:
                    81:5b:df:a6:04:4b:2c:bf:52:47:85:69:b0:05:fa:
                    7f:c9:44:c1:5f:73:ba:07:b7:67:53:05:f2:11:8a:
                    2e:0b:8c:a8:35:30:a5:62:4c:c0:e7:bc:55:23:5d:
                    84:1b:e1:25:ff:59:43:9c:d0:b2:24:a1:7c:6a:7f:
                    d6:e0:5a:f1:e0:5b:b9:ea:cd:60:16:cc:df:39:73:
                    e7:58:ac:3e:c3:82:f3:5a:0c:16:0c:7b:57:25:e9:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:83:9C:22:07:16:7A:0E:9E:3E:89:A5:4E:EA:30:70:0C:46:5E:B5
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136312e302f32342d3234203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.161.0/24
    Signature Algorithm: sha256WithRSAEncryption
         88:51:08:29:1f:62:cd:00:f0:b2:42:8b:81:f8:4c:d8:c0:4f:
         fd:7c:8b:f0:86:99:38:8f:2d:e5:ab:1d:94:81:dc:fc:9a:9d:
         96:e6:e5:85:ec:5d:82:dc:b2:ed:08:f5:c9:11:8e:d4:70:82:
         75:17:16:53:87:d6:fc:4d:8a:ea:63:22:ae:e5:db:2c:24:ea:
         07:d2:f9:af:cd:35:3a:8a:9f:da:d4:b0:3b:80:ca:77:35:24:
         7d:52:8c:a4:43:c4:03:67:e7:b5:48:a6:9e:ce:66:cf:07:4f:
         4b:03:fa:ce:d7:4c:ea:6a:fc:02:52:46:47:49:80:b0:0e:8f:
         79:6e:36:c8:43:c4:04:68:37:fa:ea:a3:00:8a:82:1d:08:d9:
         b5:7d:fc:42:96:bb:5d:4e:83:76:4c:a7:12:05:68:79:f4:23:
         e0:3d:12:7a:5a:5b:8a:ff:0b:33:a1:cc:19:86:f3:05:d1:d5:
         73:6b:91:78:29:be:cf:77:4d:fb:51:bc:4d:3f:2d:1e:a8:dd:
         cb:cd:dc:7e:76:8a:26:68:bd:59:6d:cb:c7:86:c2:5f:98:91:
         7a:32:c9:16:ad:60:97:86:42:9a:96:97:d0:b8:e3:33:bf:9e:
         bd:d5:b9:00:48:02:15:e8:e0:d0:91:16:7c:fc:ec:ce:e6:b0:
         39:df:b1:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX3QLikKn2uCLP+KlcGZBTIG7vKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQy
OUJBMDZDNDAeFw0yNTEwMzAwMjQwMjNaFw0yNjEwMjkwMjQ1MjNaMDMxMTAvBgNV
BAMTKDExODM5QzIyMDcxNjdBMEU5RTNFODlBNTRFRUEzMDcwMEM0NjVFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxq5jwZbsU50YOvVr3WxPTcP9
W/MmhTb20T4En/Ml75dSjahelXkfsVm/J5kcyiVj5vJn4XiiIqyE5ReHgOQpZ+iy
pNYDIexDcf3LR2IL8CgAuuxhSA2xPykaeWXgfkFOYSlktWorHurZ0BWPn7WgBpif
pT3aGAbQ9SZsr9vV/S502lzajAG/6Ph7BzBekeZ8vNJnxaN2fset8uvekitNzzyB
tIFb36YESyy/UkeFabAF+n/JRMFfc7oHt2dTBfIRii4LjKg1MKViTMDnvFUjXYQb
4SX/WUOc0LIkoXxqf9bgWvHgW7nqzWAWzN85c+dYrD7DgvNaDBYMe1cl6SAlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEYOcIgcWeg6ePomlTuowcAxGXrUwHwYDVR0j
BBgwFoAUx5iK5qeeeN1xI1CW6bri5Cm6BsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9DNzk4OEFFNkE3OUU3OERENzEyMzUwOTZFOUJBRTJFNDI5QkEwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OTg4QUU2QTc5RTc4REQ3
MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzMDMxMmUzNTM0MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyTahMA0GCSqGSIb3DQEBCwUAA4IBAQCIUQgpH2LN
APCyQouB+EzYwE/9fIvwhpk4jy3lqx2Ugdz8mp2W5uWF7F2C3LLtCPXJEY7UcIJ1
FxZTh9b8TYrqYyKu5dssJOoH0vmvzTU6ip/a1LA7gMp3NSR9UoykQ8QDZ+e1SKae
zmbPB09LA/rO10zqavwCUkZHSYCwDo95bjbIQ8QEaDf66qMAioIdCNm1ffxClrtd
ToN2TKcSBWh59CPgPRJ6WluK/wszocwZhvMF0dVza5F4Kb7Pd037UbxNPy0eqN3L
zdx+doomaL1ZbcvHhsJfmJF6MskWrWCXhkKalpfQuOMzv5691bkASAIV6ODQkRZ8
/OzO5rA537G2
-----END CERTIFICATE-----
Generated at Tue Nov  4 05:27:14 2025 by rpki-client