
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f36342d3634203d3e203238363234.roa
File:                     323830343a3362633a3a2f36342d3634203d3e203238363234.roa (raw, json)
Hash identifier:          XEP7dHpM4Eg+yRN28OMWeqCq3pkvpMaiwk4qJcgGP+4=
Subject key identifier:   76:74:A6:DA:48:7E:87:21:6C:64:74:DB:52:4B:0D:76:BB:4B:D4:03
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       59DAAE3703E05034972771BD51A125A52DBBB3C4
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f36342d3634203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:15 +0000
ROA not before:           Thu 30 Oct 2025 02:40:15 +0000
ROA not after:            Thu 29 Oct 2026 02:45:15 +0000
asID:                     28624
IP address blocks:        2804:3bc::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:da:ae:37:03:e0:50:34:97:27:71:bd:51:a1:25:a5:2d:bb:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:15 2025 GMT
            Not After : Oct 29 02:45:15 2026 GMT
        Subject: CN=7674A6DA487E87216C6474DB524B0D76BB4BD403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:82:10:61:05:5d:55:c0:e3:66:dd:0f:0a:
                    96:82:19:75:14:2c:95:b7:8e:a1:c3:ff:02:b4:2c:
                    88:72:21:02:08:b3:98:24:bf:49:60:aa:c3:bf:1d:
                    9d:8b:39:87:da:30:87:d6:98:21:4b:f5:e4:8e:22:
                    ee:1c:cb:c6:eb:b8:79:3f:fc:ad:56:5f:ee:89:98:
                    f9:e4:bb:9b:6d:35:75:3a:3b:6e:32:90:f1:49:77:
                    48:9c:06:5a:f5:ea:de:f7:e6:39:e8:6d:4a:cd:d8:
                    1e:a0:75:d9:81:b2:ba:a2:71:d9:41:e8:f3:6d:46:
                    83:32:03:2c:0f:79:ee:fe:9f:f1:02:92:9b:ff:97:
                    81:e9:46:69:ae:3e:fc:d5:ce:f2:21:43:9e:e8:e3:
                    15:fc:54:d5:40:7e:f6:69:03:15:c6:2f:74:ca:32:
                    b2:d0:d1:33:da:6c:1a:8f:95:b0:ba:3b:dc:2e:97:
                    1e:6e:5b:3c:d7:af:d1:86:b2:c5:54:91:53:66:52:
                    a5:f9:aa:59:0b:65:28:2f:aa:91:9d:82:c5:70:cd:
                    0a:62:17:d5:c3:39:f2:a2:6e:33:2b:54:86:58:ca:
                    52:23:19:40:18:5b:64:93:8a:ed:4a:92:53:b0:0f:
                    81:ad:2f:4c:38:38:69:66:46:d0:45:39:61:b9:1f:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:A6:DA:48:7E:87:21:6C:64:74:DB:52:4B:0D:76:BB:4B:D4:03
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f36342d3634203d3e203238363234.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc::/64
    Signature Algorithm: sha256WithRSAEncryption
         78:9c:32:f0:4b:cd:23:58:75:39:bf:6c:57:ee:d6:5e:c8:08:
         9e:59:65:e0:81:34:12:37:1c:b9:0e:aa:bb:13:d9:45:26:c6:
         48:be:58:51:0b:69:2d:03:4b:fe:e4:c5:bb:2b:63:81:46:b0:
         22:8b:05:ca:89:b5:9c:e9:3f:d5:7f:b6:58:34:4b:73:4b:37:
         c8:23:f8:80:12:84:9d:b5:c8:3c:7c:59:11:b5:c5:83:72:c4:
         bb:1f:29:11:f7:96:f7:94:78:c7:76:03:10:81:0d:85:e9:dc:
         a1:67:5f:1b:d6:a7:3f:ff:5e:3c:e4:58:44:f1:67:6b:8f:52:
         1a:2f:93:92:4d:0c:4c:32:13:cb:71:f2:aa:6b:56:40:1c:25:
         76:e1:e1:1f:e3:09:73:04:a2:da:01:86:d5:0e:57:bc:de:04:
         fc:6d:7a:b5:c2:40:73:47:9c:f9:4c:73:8d:fa:1a:82:89:3c:
         29:bd:d8:42:8b:60:c9:ad:0a:5d:4a:3a:d5:19:6a:25:5d:77:
         cd:00:32:69:66:75:1f:f6:a4:83:fc:60:69:f2:6d:7d:cb:15:
         3b:06:e6:76:f7:8e:4f:f3:10:9c:b7:08:3b:69:1c:89:1b:7e:
         d6:e4:eb:f6:7b:e0:1b:50:28:8b:a6:d9:c4:77:2b:66:33:c2:
         bc:4d:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:26:58 2025 by rpki-client