
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
File:                     34352e37302e3230362e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier:          34WBJDdtWjzJ/BrkR6BlN81HpaHIwAp7UQZi3FfCrAE=
Subject key identifier:   3F:75:81:DF:4D:F6:FE:BC:76:48:DF:D1:DC:2D:37:D1:63:F2:9B:C6
Certificate issuer:       /CN=E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F
Certificate serial:       3A73EB03428C092F3D46D2AE459B612D8D948680
Authority key identifier: E6:C7:92:C3:CC:AE:28:2D:68:69:D1:7A:BE:F6:AC:7C:84:D7:22:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
Signing time:             Mon 20 Oct 2025 17:22:34 +0000
ROA not before:           Mon 20 Oct 2025 17:17:34 +0000
ROA not after:            Mon 19 Oct 2026 17:22:34 +0000
asID:                     267586
IP address blocks:        45.70.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.crl
                          rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:08:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:73:eb:03:42:8c:09:2f:3d:46:d2:ae:45:9b:61:2d:8d:94:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F
        Validity
            Not Before: Oct 20 17:17:34 2025 GMT
            Not After : Oct 19 17:22:34 2026 GMT
        Subject: CN=3F7581DF4DF6FEBC7648DFD1DC2D37D163F29BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2f:17:3e:81:b8:b5:7f:3a:73:bc:84:a4:c5:
                    21:9e:bc:2a:49:c6:e5:8c:b6:be:bd:78:35:04:25:
                    e6:bf:fb:e9:a2:4a:75:d8:4d:76:89:34:cf:e1:5a:
                    38:a8:20:d2:43:1b:5d:fb:de:40:c0:96:4e:46:f0:
                    61:e8:37:12:0b:c6:a8:3f:9e:8b:ac:12:18:75:9f:
                    b4:8c:d0:cf:7b:34:35:64:3e:7d:81:5a:5b:34:26:
                    b4:5d:6a:2e:58:32:ea:3a:72:09:b2:d3:f1:54:70:
                    86:47:87:ec:85:6e:d8:4d:36:d5:ee:f2:95:6c:e9:
                    3e:c8:46:16:75:5f:b4:63:3c:d9:85:07:47:d3:7e:
                    a7:94:9e:2a:4c:c8:d8:ed:d9:1f:f2:82:94:c5:40:
                    58:6f:f6:82:d9:70:08:5a:4b:a6:d2:e4:6c:35:51:
                    4d:4e:84:01:42:ce:30:90:be:fc:03:11:81:36:1b:
                    16:6e:06:56:3e:62:57:75:aa:a7:89:bb:fb:9d:ee:
                    eb:b5:ac:ce:a3:58:2c:02:1d:50:5b:bf:88:0e:e2:
                    01:19:a4:b4:43:ea:ea:5b:93:1c:17:a0:08:5b:89:
                    16:b2:24:31:56:06:11:ab:d4:40:f9:cc:bb:25:c5:
                    a0:a0:bb:d9:53:db:cd:03:b6:65:e7:2d:a3:5b:b4:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:81:DF:4D:F6:FE:BC:76:48:DF:D1:DC:2D:37:D1:63:F2:9B:C6
            X509v3 Authority Key Identifier:
                keyid:E6:C7:92:C3:CC:AE:28:2D:68:69:D1:7A:BE:F6:AC:7C:84:D7:22:6F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.206.0/24
    Signature Algorithm: sha256WithRSAEncryption
         24:ca:30:83:e2:5a:83:e5:98:d6:d1:05:4f:a6:f1:e6:ce:28:
         f0:dc:f8:18:34:db:6b:48:05:e1:9e:eb:d4:9d:38:f5:f9:7c:
         5a:52:bd:73:33:40:fe:4e:24:01:56:d7:e1:c5:72:18:f4:a1:
         a8:27:1c:44:55:00:70:4c:d2:a4:30:e2:95:85:f9:bf:fe:85:
         86:38:c9:4d:1c:1d:54:56:2c:28:17:71:63:8f:1f:d0:df:78:
         cb:20:f3:a8:5e:51:79:21:40:33:cf:f6:90:5f:51:74:c6:00:
         dd:c3:00:00:47:d8:a2:d9:56:25:5d:cc:ca:1a:a2:21:f0:b6:
         68:fe:37:96:97:e0:4f:1a:06:ba:1a:0d:46:ac:fe:a6:7e:52:
         dd:29:e5:fd:ae:91:07:33:7d:f7:c5:9b:13:40:10:c4:d0:6a:
         25:9e:81:b5:65:49:29:c6:bc:21:ae:99:ef:ab:c1:72:17:df:
         6a:1e:1d:7f:d1:05:f1:5e:b0:ae:54:92:19:85:6b:dd:38:9a:
         7e:c1:c4:8a:09:38:df:21:99:9f:82:b7:c8:27:2e:c8:5a:cd:
         81:06:f2:ef:31:8b:34:b9:1a:08:0f:e8:06:a3:32:d8:01:fd:
         74:fc:38:77:1d:5c:75:67:9e:3e:ec:ef:90:cc:53:81:58:6c:
         2a:6f:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:03:59 2025 by rpki-client