
$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa
File:                     34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa (raw, json)
Hash identifier:          A/pSWtKQA/OxokA0LkXc4PfBb4bWMqi4QQ8NPqMk/+E=
Subject key identifier:   4F:89:8E:CF:9C:18:0B:96:B7:F4:B4:60:33:73:F2:F7:95:34:EB:F5
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       56CA4AB0511B494CCC0FC4369312AA6554EDE95A
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa
Signing time:             Wed 22 Oct 2025 18:12:43 +0000
ROA not before:           Wed 22 Oct 2025 18:07:43 +0000
ROA not after:            Wed 21 Oct 2026 18:12:43 +0000
asID:                     272792
IP address blocks:        45.177.189.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
                          rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 09:50:16 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ca:4a:b0:51:1b:49:4c:cc:0f:c4:36:93:12:aa:65:54:ed:e9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Oct 22 18:07:43 2025 GMT
            Not After : Oct 21 18:12:43 2026 GMT
        Subject: CN=4F898ECF9C180B96B7F4B4603373F2F79534EBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:9f:b4:7a:2b:05:c3:22:fb:66:f4:07:0c:
                    a0:3c:fa:76:80:f9:ef:b3:15:9a:d3:14:68:bf:63:
                    47:60:58:79:4f:77:b7:6c:1b:61:96:1e:d3:ba:32:
                    dd:b2:ed:8e:c7:1b:6c:02:52:c9:5c:e9:cb:35:11:
                    47:88:0e:79:a4:42:3f:41:d3:39:7c:f5:f5:6d:db:
                    94:9c:87:6f:c9:6a:7c:bf:f7:73:d2:55:29:3e:c4:
                    21:fd:6a:c9:a6:16:71:49:2a:d8:96:24:e2:71:c0:
                    21:44:c5:89:6c:f3:3b:ba:a4:3d:9a:04:a1:6d:08:
                    a4:70:de:96:c0:bf:23:ee:6e:6a:da:61:81:8f:23:
                    5f:33:8c:46:ea:e0:23:59:18:bc:9a:06:06:21:f9:
                    93:bb:7a:1d:96:04:32:46:fb:27:4a:02:be:15:3a:
                    fa:b9:5c:51:f2:08:d2:04:20:04:36:85:18:c5:b1:
                    7b:e3:49:a5:c4:34:52:fc:de:83:1c:2d:50:79:e3:
                    37:fd:99:86:1c:b6:bc:55:27:45:c5:38:af:bf:7d:
                    3e:23:f6:ae:d0:88:15:b5:58:76:90:37:33:f8:a3:
                    d7:c8:d3:13:f2:b3:7d:f1:bb:c3:a3:1e:1b:35:52:
                    af:0b:a0:58:e9:bb:cb:dc:5c:a3:97:6c:99:57:81:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:89:8E:CF:9C:18:0B:96:B7:F4:B4:60:33:73:F2:F7:95:34:EB:F5
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.189.0/24
    Signature Algorithm: sha256WithRSAEncryption
         22:d2:0b:1a:00:dd:a7:29:89:6e:77:8a:38:69:72:48:fd:e5:
         6f:fd:33:4c:f1:ec:30:26:50:4c:b1:2c:45:dd:bb:fd:0e:8f:
         d4:ec:9b:90:e8:2c:cd:5d:3c:ff:21:24:c7:d3:62:92:ab:b5:
         81:a5:eb:cb:53:62:66:01:dc:f4:e5:c9:b3:6d:95:6d:8d:85:
         7a:c9:a0:01:c6:dd:13:bf:14:a3:76:30:fb:f1:c5:b7:dc:82:
         bc:47:e0:23:f2:44:ee:73:d2:ab:22:c6:63:b4:8e:5c:55:0d:
         5b:f4:3a:c5:cc:bf:62:40:1d:cf:de:79:6a:3f:e1:86:f0:4a:
         3a:80:4b:0e:17:de:59:7a:2e:40:b0:9c:10:80:fb:21:fd:26:
         1f:e0:04:6c:1d:81:21:cc:c9:48:db:b6:f6:fb:4e:c8:13:76:
         1d:11:e7:5c:44:0c:d0:bb:6c:ae:db:e1:a9:fb:01:14:40:f9:
         16:52:48:db:c1:bf:9b:91:d4:16:88:6a:83:91:61:51:b6:eb:
         96:04:4c:fd:87:46:71:34:76:d5:e7:c6:8f:ff:b3:79:75:65:
         86:dc:e6:9d:f3:8e:23:51:55:ac:7b:f0:02:32:3b:d7:ca:d8:
         24:d0:50:da:7f:42:90:d9:65:d7:21:aa:eb:f7:51:85:58:f8:
         87:34:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:13:16 2025 by rpki-client