
$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135372e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3135372e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          RvigV25F7ipl6EeKHw+HltccSHrjRP/lxlVlKO93v1s=
Subject key identifier:   92:23:35:D7:E2:60:D2:1A:38:67:FD:CC:98:C9:79:F7:C2:DD:7E:2D
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       27EAFFB76D2156B4FE84E9BF7B0DF0418441CCB6
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135372e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:48:57 +0000
ROA not before:           Thu 30 Oct 2025 02:43:57 +0000
ROA not after:            Thu 29 Oct 2026 02:48:57 +0000
asID:                     28615
IP address blocks:        201.46.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ea:ff:b7:6d:21:56:b4:fe:84:e9:bf:7b:0d:f0:41:84:41:cc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:43:57 2025 GMT
            Not After : Oct 29 02:48:57 2026 GMT
        Subject: CN=922335D7E260D21A3867FDCC98C979F7C2DD7E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:f4:ef:c7:a5:f1:83:cd:57:87:66:f6:9c:
                    25:56:59:29:90:03:6e:97:1e:b4:28:1b:0f:31:3a:
                    76:73:cb:3b:27:f8:08:2e:aa:88:f2:51:e4:1f:93:
                    d7:c2:66:eb:1f:76:60:99:1a:e0:d2:36:d5:a9:0f:
                    ac:3e:30:c9:5c:b3:af:6a:b0:ee:7d:a8:ca:67:c1:
                    d0:94:28:35:34:40:30:bd:dc:dd:28:10:62:b8:b4:
                    81:46:47:a5:d4:74:9c:0c:62:99:fd:1f:db:af:19:
                    f8:5a:b1:d5:b4:01:e9:36:56:40:e1:85:c6:17:fc:
                    77:c3:e7:26:f7:03:99:0b:12:3c:0e:77:2b:e4:ca:
                    fe:d6:c2:a1:04:3a:76:88:ad:f1:46:e2:38:b2:0d:
                    e4:4d:e0:52:f7:28:f1:b6:1f:c1:1e:2d:d7:60:e6:
                    d1:9e:b3:b9:94:91:52:7d:96:e3:7b:2b:c0:1b:e7:
                    b7:b3:7a:d1:a2:9a:e9:15:a7:98:4f:87:1b:d1:7a:
                    d6:21:dd:d8:c0:ed:f1:9f:af:5a:aa:78:be:37:83:
                    b7:4f:e5:92:4e:7c:df:98:3c:29:ae:fd:1a:72:07:
                    0d:88:0a:50:fa:d1:d9:2f:0b:d5:ef:e3:7a:41:7c:
                    e5:91:13:ed:96:57:4f:97:c6:a8:e7:dc:48:5a:30:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:23:35:D7:E2:60:D2:1A:38:67:FD:CC:98:C9:79:F7:C2:DD:7E:2D
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135372e302f32342d3234203d3e203238363135.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.157.0/24
    Signature Algorithm: sha256WithRSAEncryption
         4b:64:8e:47:c3:02:77:a8:d4:93:91:01:8c:7a:b6:ca:49:29:
         e2:82:56:e0:12:f4:1c:b9:42:61:02:37:40:5a:f6:d1:36:fa:
         45:82:12:ab:6e:67:05:c1:2d:86:8a:0b:32:de:8c:bd:ba:b7:
         79:6c:26:04:b3:5f:7b:26:3b:b1:b3:c5:d9:d5:3b:a8:37:75:
         56:e7:c1:9d:8b:10:ed:6b:ee:bb:ab:e2:ac:e4:cd:0d:26:77:
         1a:27:b4:d4:fa:21:d0:15:4f:01:3f:0f:5f:f3:33:21:13:fd:
         ec:d6:c0:fa:1b:cf:15:1a:9a:eb:bb:eb:5f:d0:0b:1f:2a:da:
         b1:36:11:61:f0:1b:7f:c3:bc:81:e4:40:dc:ae:4d:4e:42:0c:
         eb:0b:69:2e:4a:4b:fc:3b:56:ae:8d:30:c8:e2:cc:3a:40:75:
         6b:be:7b:7d:d7:57:47:df:3e:70:f3:af:26:ee:a1:3b:42:32:
         ac:bd:0e:2b:ca:36:d7:e2:bd:5b:be:19:d7:64:d8:06:6c:fa:
         d1:02:04:07:22:02:2a:8f:20:33:9d:1d:d7:52:15:eb:99:a8:
         23:6b:06:1c:98:2d:80:f1:0c:2b:11:c4:20:e6:de:38:c2:3c:
         9d:31:10:36:1b:23:0c:2a:4f:41:30:aa:5c:1a:34:04:7e:ca:
         1c:9d:45:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:06:53 2025 by rpki-client