
$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134392e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3134392e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          o1FKSCPApOiTw4HZxNpL4Ubefx8uxl9z+PcbiPsu0zU=
Subject key identifier:   D6:4D:DB:23:5B:DD:DC:30:1C:80:6B:D3:AE:14:97:A6:0B:47:6A:3F
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       5410459DE3957FE79AC7C412086445260411C6D3
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134392e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:12 +0000
ROA not before:           Thu 30 Oct 2025 02:44:12 +0000
ROA not after:            Thu 29 Oct 2026 02:49:12 +0000
asID:                     28615
IP address blocks:        201.46.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:45:9d:e3:95:7f:e7:9a:c7:c4:12:08:64:45:26:04:11:c6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:12 2025 GMT
            Not After : Oct 29 02:49:12 2026 GMT
        Subject: CN=D64DDB235BDDDC301C806BD3AE1497A60B476A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:57:26:96:1f:8c:fe:7d:09:2e:bd:b7:b3:
                    9c:06:47:0d:dd:bc:93:96:cf:d7:df:8f:3e:72:0c:
                    61:19:c8:21:92:1e:00:1b:42:93:fe:4b:11:94:52:
                    1f:ce:b6:35:7b:10:98:4b:21:51:2b:c3:78:5d:e0:
                    f2:af:bf:5b:9f:be:fe:e6:f8:37:8a:ae:2c:f1:3c:
                    ab:89:01:7a:b4:bc:85:e5:05:2a:d0:c3:5b:55:db:
                    53:a7:98:17:65:75:f6:7e:34:8a:d4:16:21:b3:ea:
                    e4:d7:7f:6a:38:56:fa:b8:fa:19:13:ef:4a:c3:04:
                    f4:11:13:06:f8:07:bd:35:d5:46:e3:0a:c0:e5:12:
                    0f:40:30:3e:eb:75:04:72:c4:a0:59:57:d0:bd:48:
                    67:06:4b:cc:ef:5e:93:69:c6:9d:5e:e9:ff:62:57:
                    14:40:ee:30:a2:76:bc:fb:c7:ba:7c:60:48:cc:65:
                    e9:8f:79:89:64:0f:87:91:d1:4b:a7:ce:f0:39:fc:
                    60:d1:90:9a:0b:14:4d:25:ed:e3:25:86:c8:76:3f:
                    ba:4c:7b:e1:1d:52:c8:6f:6b:23:9f:d5:89:62:af:
                    d0:64:9d:9b:de:57:da:62:f7:f7:18:d4:aa:7c:a4:
                    38:7c:b9:88:95:41:75:c4:79:a0:17:97:18:67:4a:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4D:DB:23:5B:DD:DC:30:1C:80:6B:D3:AE:14:97:A6:0B:47:6A:3F
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134392e302f32342d3234203d3e203238363135.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.149.0/24
    Signature Algorithm: sha256WithRSAEncryption
         c2:16:7a:d5:11:d1:c9:3b:d2:70:54:20:5a:31:3d:38:09:02:
         b7:ec:15:ae:fa:19:db:e3:09:1b:d9:d2:3c:e3:ac:b4:24:76:
         a0:25:44:b1:60:4d:c4:09:a2:74:f9:af:ba:4e:88:04:ff:0e:
         c9:e6:6d:d0:2a:34:b5:0e:6e:05:0e:31:96:44:6b:80:a2:1f:
         0f:a8:b4:43:bf:83:b9:c8:0b:39:76:d2:48:92:c1:73:c7:9a:
         d6:f0:93:ac:c0:b5:37:c7:f7:b1:a8:d0:b2:f3:de:a5:2b:b4:
         6b:57:e3:35:cc:e3:5c:b5:ef:06:58:de:03:f1:11:b1:d6:3b:
         c1:a3:15:5a:1f:b7:50:6c:a0:09:82:19:1e:8d:76:09:fa:dd:
         86:8a:65:81:9c:ef:7b:2e:50:6c:8b:83:20:6e:de:40:a6:83:
         42:ce:9d:4f:bd:d3:c3:77:8f:09:cb:5f:c3:08:f3:9c:46:69:
         a1:2b:dd:e1:e7:73:d9:06:43:32:49:92:03:95:5c:e4:51:6e:
         e9:f0:b5:e5:f7:3e:f1:98:18:44:11:4f:85:9d:70:09:bb:00:
         d7:1a:4a:55:f0:46:3b:d1:ef:95:86:b5:07:b7:84:87:8b:a8:
         c9:68:54:fa:f3:3d:4a:5b:59:b6:58:e5:59:41:de:d5:de:c7:
         ae:ac:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:11:32 2025 by rpki-client