
$ rpki-client -vvf rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa
File:                     3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa (raw, json)
Hash identifier:          vrcHssSNlo9t33zE/pJyLtyi96KDuhX0nZpGvm4erVs=
Subject key identifier:   4B:63:BA:A8:28:74:BF:00:DF:CA:4A:5F:08:FE:10:F3:79:A0:3B:FE
Certificate issuer:       /CN=674C6DEE42B678F441522977D02D745008709FB2
Certificate serial:       59B9E3B924F7A08F348E1CB37270091354AC7A67
Authority key identifier: 67:4C:6D:EE:42:B6:78:F4:41:52:29:77:D0:2D:74:50:08:70:9F:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C6DEE42B678F441522977D02D745008709FB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa
Signing time:             Tue 21 Oct 2025 18:09:08 +0000
ROA not before:           Tue 21 Oct 2025 18:04:08 +0000
ROA not after:            Tue 20 Oct 2026 18:09:08 +0000
asID:                     265971
IP address blocks:        164.163.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.crl
                          rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C6DEE42B678F441522977D02D745008709FB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:53:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b9:e3:b9:24:f7:a0:8f:34:8e:1c:b3:72:70:09:13:54:ac:7a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674C6DEE42B678F441522977D02D745008709FB2
        Validity
            Not Before: Oct 21 18:04:08 2025 GMT
            Not After : Oct 20 18:09:08 2026 GMT
        Subject: CN=4B63BAA82874BF00DFCA4A5F08FE10F379A03BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:31:74:70:2b:8d:1c:5b:c4:95:f7:41:c0:
                    fc:b7:ad:75:e9:dc:11:94:32:61:34:75:45:57:c2:
                    64:1c:4c:1a:5c:5b:e8:29:cb:6c:ee:0b:da:2a:e7:
                    38:56:53:60:6b:5d:4a:41:d4:47:22:89:5b:a9:8d:
                    7b:38:34:84:f9:e7:69:bb:3a:d8:93:36:fc:9c:9f:
                    2c:a8:75:28:29:6e:a3:b7:87:d2:94:8c:32:82:47:
                    6f:29:7e:d7:8b:7f:97:89:1e:9c:b7:0a:db:99:70:
                    5f:7a:a9:bc:ee:fa:ad:aa:f9:19:36:b2:0c:e2:21:
                    7e:e7:1a:bc:7c:3f:7c:dc:65:0c:07:39:70:9e:2f:
                    4b:6f:0d:df:4c:1c:a9:3f:eb:e5:27:50:99:9b:8f:
                    e0:8c:9c:7f:99:ac:24:11:64:7b:7b:9e:7d:e5:2f:
                    dc:8c:b7:b0:b8:d4:c0:f0:eb:85:d8:36:2f:39:d6:
                    94:f8:24:44:fa:32:19:3b:49:15:2d:b2:e7:39:89:
                    b1:46:fd:c1:4e:a4:0b:9a:fb:a3:63:0a:79:76:36:
                    37:61:48:72:63:06:bf:d1:a9:09:de:0c:5b:da:2c:
                    73:db:35:da:89:d6:d3:e7:e5:ca:2a:50:d2:e7:90:
                    f5:42:5c:44:85:75:57:fb:c2:26:d5:0e:41:ec:de:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:BA:A8:28:74:BF:00:DF:CA:4A:5F:08:FE:10:F3:79:A0:3B:FE
            X509v3 Authority Key Identifier:
                keyid:67:4C:6D:EE:42:B6:78:F4:41:52:29:77:D0:2D:74:50:08:70:9F:B2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C6DEE42B678F441522977D02D745008709FB2.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.196.0/22
    Signature Algorithm: sha256WithRSAEncryption
         83:8f:2c:a6:4d:64:a5:01:70:6e:0d:41:b4:07:ec:e1:6c:33:
         33:c1:aa:8d:10:ef:76:09:25:70:c1:7d:ab:9f:7d:64:33:d6:
         f7:b7:eb:69:ff:b9:8a:05:5d:93:9f:2f:f9:cf:7e:d1:e6:37:
         64:f7:c0:e1:f6:cc:c4:1c:d8:4f:87:ec:c3:70:e2:56:c9:52:
         94:b6:71:bb:1c:3f:1c:c8:d7:49:c0:32:cb:8b:bb:65:f7:13:
         6b:70:d8:e0:81:e1:7f:c5:46:5c:f3:28:40:cb:a2:42:24:29:
         10:ba:b3:57:2e:84:9b:bd:15:f6:5e:20:20:e1:82:29:ff:08:
         5c:db:af:a2:cd:83:61:52:af:4a:2f:f9:76:2c:90:c1:88:d6:
         f0:ff:f0:28:5d:aa:bc:d7:e1:90:e3:50:6d:e2:1e:74:83:0e:
         8a:24:dc:64:9b:65:66:fe:d3:b3:3e:fa:3c:9d:c3:04:1a:f6:
         23:3d:a7:91:a3:6b:74:2c:a3:39:39:99:e4:2e:76:a4:bb:13:
         84:45:53:3a:d3:3d:3b:ff:17:75:0c:82:9a:47:e7:63:d6:af:
         f8:42:1f:65:14:66:e9:65:50:8a:a4:56:2c:e7:df:1a:b0:65:
         57:25:25:7d:6c:c3:4b:b1:72:b9:c7:1c:be:a9:00:68:c2:f2:
         e7:07:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:05:47 2025 by rpki-client