
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f33322d3332203d3e203238363234.roa
File:                     323830343a3362633a3a2f33322d3332203d3e203238363234.roa (raw, json)
Hash identifier:          WZmzvWPW9EYeX5nXb1VXDaI5dcnL3HCL8O+qPn1+tNs=
Subject key identifier:   D9:23:17:25:4B:B6:B2:9D:BD:C3:04:1D:4C:14:50:8F:B0:94:1B:D8
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       47571E8C321BE728D28ACE5B642D9201DEEE350B
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f33322d3332203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:06 +0000
ROA not before:           Thu 30 Oct 2025 02:40:06 +0000
ROA not after:            Thu 29 Oct 2026 02:45:06 +0000
asID:                     28624
IP address blocks:        2804:3bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:57:1e:8c:32:1b:e7:28:d2:8a:ce:5b:64:2d:92:01:de:ee:35:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:06 2025 GMT
            Not After : Oct 29 02:45:06 2026 GMT
        Subject: CN=D92317254BB6B29DBDC3041D4C14508FB0941BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:a6:78:c4:8d:34:cf:ed:ec:c1:22:0c:ec:
                    ab:03:fc:56:90:b2:76:34:4f:ce:21:fb:02:2f:67:
                    f7:a1:88:b4:b9:c5:1b:e2:62:06:45:75:b3:83:d5:
                    8c:25:03:a4:b3:ed:c3:01:6c:89:ae:22:d6:1c:22:
                    67:d5:22:97:31:0d:34:91:f1:ff:3d:f1:0a:0a:ef:
                    f0:58:d2:7e:3a:e7:31:31:8f:a9:65:15:5b:42:1a:
                    f3:0a:dd:06:13:4c:7b:cb:0e:3d:02:48:2a:82:01:
                    3d:23:23:91:10:37:84:4f:dd:cb:78:77:7a:8d:e1:
                    3c:02:33:f1:b6:db:7d:4b:de:15:d7:70:1d:dc:17:
                    d1:a2:66:7a:5f:e7:bc:50:11:b8:b4:e1:06:c0:a6:
                    82:60:41:07:e8:ae:a3:ae:14:d1:69:6f:cf:e0:73:
                    63:52:49:50:ba:3f:35:5e:95:b9:7c:79:d1:40:31:
                    c0:5b:28:09:ff:bd:6e:6f:5f:ba:f6:f4:e0:e0:92:
                    e1:9e:4d:20:8b:69:45:a1:77:2f:7a:d5:f6:60:3d:
                    de:3b:d8:ab:17:a2:89:c6:9e:70:a3:e7:a3:e6:02:
                    67:8d:b4:a7:2c:92:4b:a4:57:f6:5b:b9:30:4b:6b:
                    51:8c:b0:0f:c7:58:55:91:65:b0:65:9c:fe:fe:82:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:17:25:4B:B6:B2:9D:BD:C3:04:1D:4C:14:50:8F:B0:94:1B:D8
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f33322d3332203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc::/32
    Signature Algorithm: sha256WithRSAEncryption
         34:4e:2b:45:5e:72:d8:13:c5:2f:d0:2f:2c:23:f3:73:f8:05:
         de:56:ad:e0:ae:dc:49:04:d7:24:88:13:d9:fb:5f:1e:f2:79:
         b4:18:c7:79:e1:71:fb:af:f0:1e:2f:bb:16:18:0a:75:93:27:
         21:70:ec:a6:aa:d7:79:b5:f2:27:58:61:58:10:0c:92:33:6a:
         d1:ee:13:23:47:aa:40:1b:ff:33:0c:da:21:e2:f8:3a:db:a7:
         49:f8:a4:ad:6a:b2:66:c0:48:ed:1f:c4:3c:a8:fb:ae:60:ca:
         ed:03:70:e4:b2:c3:05:27:75:8f:72:0f:89:30:43:b4:ac:aa:
         a5:a8:2e:21:79:ae:75:a5:b1:4b:ed:ab:e1:4d:d5:b0:14:0d:
         31:30:0c:bc:7c:34:18:06:f8:54:e8:91:87:82:76:0b:5d:30:
         3d:8f:f4:2c:96:12:e4:de:35:f4:49:9f:5e:cc:50:32:83:c4:
         d8:1f:a8:b7:8a:fd:24:04:5e:97:61:a0:3c:a2:6a:14:87:d2:
         dc:11:d2:e7:4c:0b:df:e4:d7:c5:65:c5:30:c3:90:45:b4:b7:
         f3:cc:b5:5d:22:5b:01:d5:e8:ee:f9:58:5b:61:7d:13:01:09:
         30:68:4e:33:fa:93:de:d5:fe:53:5e:21:a2:e1:30:19:9d:5e:
         b2:53:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:27:15 2025 by rpki-client