
$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231342e302f32332d3233203d3e20323635343732.roa
File:                     3136382e3139362e3231342e302f32332d3233203d3e20323635343732.roa (raw, json)
Hash identifier:          Q6hllUQtw34LmT4x0kp2Rvst89lQmx+e5Wv86vFBxbU=
Subject key identifier:   B8:40:48:66:FC:82:47:40:76:A8:68:8A:7A:9C:56:E6:7B:BA:53:66
Certificate issuer:       /CN=A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1
Certificate serial:       6CA1B6DB1E3AF1BD090E91DCF57594AC9DD051F7
Authority key identifier: A8:1B:D0:F2:4C:8B:AC:03:C2:1A:D5:51:74:C7:96:8F:0B:34:CC:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231342e302f32332d3233203d3e20323635343732.roa
Signing time:             Tue 07 Oct 2025 12:42:47 +0000
ROA not before:           Tue 07 Oct 2025 12:37:47 +0000
ROA not after:            Tue 06 Oct 2026 12:42:47 +0000
asID:                     265472
IP address blocks:        168.196.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.crl
                          rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:09:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a1:b6:db:1e:3a:f1:bd:09:0e:91:dc:f5:75:94:ac:9d:d0:51:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1
        Validity
            Not Before: Oct  7 12:37:47 2025 GMT
            Not After : Oct  6 12:42:47 2026 GMT
        Subject: CN=B8404866FC82474076A8688A7A9C56E67BBA5366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:e0:42:71:4f:ef:1f:61:cc:c3:19:16:bd:
                    b7:3b:8c:ca:e9:8e:14:9d:71:d4:65:de:0e:e2:32:
                    75:ca:a4:3a:c8:e1:58:cf:a3:45:e9:37:46:e7:75:
                    f3:3c:55:42:02:9a:4a:46:55:7c:03:e8:1a:6c:bb:
                    c2:4c:f8:37:18:f6:4d:09:f5:49:70:f6:c8:86:f4:
                    b8:85:b9:e7:d0:d7:88:1d:ca:4d:c8:67:32:8c:4e:
                    d0:69:d0:22:fb:fb:52:d2:89:38:3b:1a:4d:75:0d:
                    3e:2e:6b:de:3c:4d:58:12:ad:e6:56:3c:3c:1c:51:
                    f9:38:9b:16:9c:0e:00:77:b0:75:4c:94:ce:61:e2:
                    a3:a4:55:4b:43:2f:d7:52:19:fc:53:5c:55:2f:e1:
                    72:a3:d7:c9:a7:da:25:85:f9:46:44:c3:bc:f7:80:
                    af:93:e4:0b:7b:6f:ab:b3:77:4d:9b:d1:29:20:d2:
                    c4:04:db:34:f2:4e:d6:c9:62:38:72:9d:51:a2:a2:
                    0b:dd:28:66:d7:2b:5a:35:a8:b7:15:48:47:8b:d2:
                    9d:c2:d2:e5:6c:ea:27:49:0f:58:a7:3e:c9:55:cf:
                    05:95:57:05:0d:81:7f:de:ad:d2:51:a4:75:3e:e2:
                    7e:38:cc:b6:94:91:8a:9b:e6:50:bd:ec:c7:de:0a:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:48:66:FC:82:47:40:76:A8:68:8A:7A:9C:56:E6:7B:BA:53:66
            X509v3 Authority Key Identifier:
                keyid:A8:1B:D0:F2:4C:8B:AC:03:C2:1A:D5:51:74:C7:96:8F:0B:34:CC:C1
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231342e302f32332d3233203d3e20323635343732.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.214.0/23
    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:8f:ac:91:02:e4:b9:45:40:5e:42:f8:d4:c8:f1:3e:64:
         19:88:67:74:37:ac:8c:14:fb:eb:44:19:25:5c:de:f8:c7:c5:
         df:ba:72:11:ff:22:1f:a8:48:1d:ea:e3:24:c8:cd:02:6f:65:
         21:df:cb:09:5c:a0:cb:d3:59:c7:ce:05:3c:05:d1:5a:4d:10:
         b0:d1:9f:26:2f:8f:01:23:51:ae:1c:f2:ff:d4:0f:70:f9:42:
         56:56:09:c1:61:85:7d:32:10:6e:c9:d4:1e:c2:78:9e:3e:f9:
         b4:4f:16:a7:a9:0c:a7:07:4d:af:ee:80:81:7a:15:1b:38:3b:
         f7:0e:b8:3b:94:7d:05:80:db:aa:54:2a:be:31:92:63:04:67:
         ef:39:e1:2c:fc:74:86:60:68:95:4f:0d:36:b2:45:52:a0:87:
         ac:a1:0e:eb:73:b0:30:ed:f4:81:d2:94:e7:14:c1:74:cc:68:
         ee:26:3b:3f:c5:e7:b3:38:e6:b4:8e:3d:1a:35:35:35:ce:ce:
         fc:60:4a:d0:5d:4a:ee:9e:df:65:e7:93:8d:e2:2a:58:ec:16:
         d7:41:f5:a6:24:53:f6:51:ea:c5:f4:99:26:81:a1:bb:c5:08:
         d6:bf:95:17:ef:06:4e:85:52:51:68:7e:f1:09:f5:f1:e6:aa:
         9d:e8:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:07:39 2025 by rpki-client