
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
File:                     34352e37302e3230372e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier:          J1pbE4eEeavxRy/rA9vOL6jUwJ3kMh3KGZatVqml5sU=
Subject key identifier:   83:18:53:F5:81:59:64:96:47:B1:CA:91:B4:EF:4F:0A:4C:26:8B:3B
Certificate issuer:       /CN=E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F
Certificate serial:       61FE94ADB1905C21F6D79C1D3BACF924379A823C
Authority key identifier: E6:C7:92:C3:CC:AE:28:2D:68:69:D1:7A:BE:F6:AC:7C:84:D7:22:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
Signing time:             Mon 20 Oct 2025 17:22:36 +0000
ROA not before:           Mon 20 Oct 2025 17:17:36 +0000
ROA not after:            Mon 19 Oct 2026 17:22:36 +0000
asID:                     267586
IP address blocks:        45.70.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.crl
                          rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:08:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fe:94:ad:b1:90:5c:21:f6:d7:9c:1d:3b:ac:f9:24:37:9a:82:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F
        Validity
            Not Before: Oct 20 17:17:36 2025 GMT
            Not After : Oct 19 17:22:36 2026 GMT
        Subject: CN=831853F58159649647B1CA91B4EF4F0A4C268B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:bb:c3:3c:cf:ad:c7:c5:1e:7a:d2:cd:e5:
                    92:a4:fe:72:11:6b:16:a2:81:68:12:4e:8c:a6:9c:
                    9c:a5:f9:6e:7f:6e:6f:ce:81:5a:3c:96:03:a3:27:
                    c7:b0:17:68:56:f8:57:d0:20:d6:d1:09:08:c2:19:
                    62:cb:2a:50:d4:b5:d8:d4:29:2a:13:ba:8b:b1:3c:
                    32:72:29:36:28:46:ae:4c:2e:b7:9a:aa:e3:73:da:
                    14:f9:d3:f2:48:9a:90:f9:4c:b4:3b:7d:10:f4:dd:
                    f5:7f:22:58:30:b8:91:36:10:d6:a6:00:9a:69:71:
                    2a:ae:38:10:c8:61:52:48:d8:ad:40:87:a6:54:fb:
                    96:a9:db:18:d0:59:b8:6e:1d:02:c7:aa:6b:3a:59:
                    9c:93:81:43:ea:22:bd:4d:8e:f2:d8:c4:47:64:20:
                    8b:32:23:51:f3:e1:f5:a1:00:c9:6d:52:24:74:0d:
                    38:a0:a2:32:e3:d2:85:1e:11:88:aa:8d:aa:45:fd:
                    80:b0:e7:67:45:8c:24:a6:fb:0c:ed:e5:a7:fa:af:
                    cf:78:a3:14:f3:7c:66:09:6c:21:0f:ff:c2:de:e3:
                    b7:2c:1b:e0:a4:7e:d8:11:b0:e6:2b:71:70:d8:90:
                    4c:8d:28:8d:39:6a:a0:96:24:bc:d3:29:3f:8d:0a:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:53:F5:81:59:64:96:47:B1:CA:91:B4:EF:4F:0A:4C:26:8B:3B
            X509v3 Authority Key Identifier:
                keyid:E6:C7:92:C3:CC:AE:28:2D:68:69:D1:7A:BE:F6:AC:7C:84:D7:22:6F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C792C3CCAE282D6869D17ABEF6AC7C84D7226F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.207.0/24
    Signature Algorithm: sha256WithRSAEncryption
         0c:06:42:cc:fa:9a:b3:c3:06:6e:53:7e:9b:22:23:bc:a8:cf:
         71:bc:d3:ff:15:88:9d:bd:ac:fa:ff:ea:6c:03:75:44:8e:93:
         b0:86:df:80:b9:21:e7:69:95:7a:6d:28:eb:86:91:bd:a1:49:
         c5:ac:af:00:50:da:09:41:b4:3e:c2:8d:8f:cb:9a:91:63:23:
         8c:7c:33:db:e2:da:4e:6d:10:a9:ca:9a:6e:7c:3b:d2:4b:85:
         30:4e:67:04:e7:32:46:4c:f5:22:be:1d:7e:5a:fb:1c:cd:81:
         2f:be:4a:79:b4:19:8e:e5:27:e0:f6:ee:8d:58:97:39:b2:cd:
         ca:d8:da:ca:e6:9d:b3:c6:5b:d7:09:c1:4b:17:92:e9:2d:31:
         d6:36:fb:7c:d6:a5:91:fb:e4:ad:c4:f6:6e:a7:86:e3:85:ea:
         a5:23:ef:11:ba:ea:7d:d8:ac:78:f0:43:ad:1b:59:0b:31:1a:
         3e:b8:fb:51:6c:68:f1:0f:da:15:e4:34:aa:22:ba:67:de:88:
         33:ed:cb:c5:53:73:50:68:4c:ac:d8:b9:d7:d5:2d:09:ba:41:
         58:d5:21:de:1a:57:b9:b3:14:c2:e2:11:c1:a6:a1:3a:22:ba:
         09:aa:4c:ff:71:74:b1:12:5d:95:78:61:f9:d5:59:eb:0a:57:
         56:c2:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:04:01 2025 by rpki-client