
$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132302e302f32322d3234203d3e20323635333335.roa
File:                     3138372e36332e3132302e302f32322d3234203d3e20323635333335.roa (raw, json)
Hash identifier:          ZEoxNCrVQDi6Dbyn/vubTjxUTcM6Ax60G4XD0ytq7H4=
Subject key identifier:   EF:56:A1:58:54:D0:B7:E1:DF:90:39:43:6B:1D:56:66:0F:B0:7D:23
Certificate issuer:       /CN=9E6AC5393A7C37CC49D15B3002E58F6A2FE74425
Certificate serial:       2B0DA2908057AE5DA1882419BD186B8267F42E39
Authority key identifier: 9E:6A:C5:39:3A:7C:37:CC:49:D1:5B:30:02:E5:8F:6A:2F:E7:44:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132302e302f32322d3234203d3e20323635333335.roa
Signing time:             Tue 21 Oct 2025 20:19:42 +0000
ROA not before:           Tue 21 Oct 2025 20:14:42 +0000
ROA not after:            Tue 20 Oct 2026 20:19:42 +0000
asID:                     265335
IP address blocks:        187.63.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.crl
                          rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:00:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0d:a2:90:80:57:ae:5d:a1:88:24:19:bd:18:6b:82:67:f4:2e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6AC5393A7C37CC49D15B3002E58F6A2FE74425
        Validity
            Not Before: Oct 21 20:14:42 2025 GMT
            Not After : Oct 20 20:19:42 2026 GMT
        Subject: CN=EF56A15854D0B7E1DF9039436B1D56660FB07D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:89:9f:ff:1f:e8:dd:e1:5b:36:a7:47:fe:
                    c6:11:a2:2c:3c:b7:9f:52:d1:80:3a:43:2a:b9:90:
                    dd:b3:fc:97:c5:d5:70:6b:bd:b8:1e:87:dd:57:c0:
                    6f:00:50:3d:08:32:f0:c8:43:5a:05:db:a9:96:fe:
                    2c:6b:a5:62:67:9f:d6:ad:b9:fb:08:6e:68:2d:8d:
                    8a:95:d7:c7:3b:e5:df:f6:f7:97:9a:c8:cb:09:80:
                    3e:7e:6a:d8:83:bf:d4:1d:fb:5a:41:26:71:0e:c8:
                    5a:d4:b4:4c:a0:4d:d2:50:45:22:7e:63:e2:ce:b8:
                    86:fe:fd:8b:e2:a3:18:d4:1d:d3:0b:b1:55:5c:9d:
                    7f:f1:f4:c8:3c:5c:e2:8b:0e:32:af:ca:72:60:b5:
                    43:80:f8:e1:e8:97:14:7f:0a:c4:9e:b2:e4:80:c9:
                    85:52:69:9a:9c:8e:48:36:92:19:08:13:95:86:f1:
                    9a:8d:cf:bf:7e:e2:2e:dd:10:13:a6:ae:7f:71:e6:
                    7f:37:c4:1d:2e:7d:a3:c2:56:2e:f5:96:42:9a:e0:
                    d3:fe:2d:8c:39:c3:bb:89:94:82:43:53:19:38:3e:
                    ec:c9:df:7f:8e:22:c1:26:56:7e:a1:f3:f6:1f:16:
                    51:6a:65:da:57:ae:8f:fd:4c:ba:29:3d:e1:cc:04:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:A1:58:54:D0:B7:E1:DF:90:39:43:6B:1D:56:66:0F:B0:7D:23
            X509v3 Authority Key Identifier:
                keyid:9E:6A:C5:39:3A:7C:37:CC:49:D1:5B:30:02:E5:8F:6A:2F:E7:44:25
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132302e302f32322d3234203d3e20323635333335.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.120.0/22
    Signature Algorithm: sha256WithRSAEncryption
         27:9f:d0:0f:5c:35:7e:9f:9c:16:22:ae:cc:d1:38:29:55:6d:
         ff:20:9f:90:35:ba:46:42:b2:ec:2c:55:26:7e:09:19:38:cb:
         f1:a7:91:fe:b6:97:a8:40:04:72:d0:b7:e4:33:83:4d:1c:15:
         30:0c:24:5e:bb:da:0a:0c:e2:a2:b7:bd:db:f0:76:1d:d6:50:
         cc:86:f0:fc:17:5b:21:55:04:e5:04:b9:cb:86:55:88:2f:38:
         e9:97:2b:5b:c2:96:06:2f:3c:c6:d0:08:5d:d4:b4:bd:d9:4d:
         cd:63:87:90:41:92:89:fd:76:71:bf:c9:4b:2c:52:0c:d1:1b:
         5f:c2:14:b9:14:01:d3:e5:40:7d:70:e2:99:f9:fd:11:af:d5:
         4d:4b:2a:b4:5e:7d:53:1c:bf:e6:4b:2c:fb:a1:cb:04:ca:9a:
         c0:1a:e7:81:41:e8:29:2e:2e:64:38:7a:c3:b2:da:6f:a8:c6:
         3a:f3:72:7a:62:7b:0b:ef:26:7c:ad:82:5c:3f:19:46:e7:42:
         58:64:d3:87:c7:7e:55:1d:eb:22:b2:2f:d1:a7:9e:39:60:4f:
         3a:47:ed:86:4e:b3:4f:6c:ce:65:a7:86:6b:0c:f5:32:a3:84:
         f0:ff:86:ba:85:95:84:61:77:40:b0:2e:ff:cf:36:94:c6:6f:
         35:8e:1b:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKw2ikIBXrl2hiCQZvRhrgmf0LjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU2QUM1MzkzQTdDMzdDQzQ5RDE1QjMwMDJFNThGNkEy
RkU3NDQyNTAeFw0yNTEwMjEyMDE0NDJaFw0yNjEwMjAyMDE5NDJaMDMxMTAvBgNV
BAMTKEVGNTZBMTU4NTREMEI3RTFERjkwMzk0MzZCMUQ1NjY2MEZCMDdEMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzImf/x/o3eFbNqdH/sYRoiw8
t59S0YA6Qyq5kN2z/JfF1XBrvbgeh91XwG8AUD0IMvDIQ1oF26mW/ixrpWJnn9at
ufsIbmgtjYqV18c75d/295eayMsJgD5+atiDv9Qd+1pBJnEOyFrUtEygTdJQRSJ+
Y+LOuIb+/YvioxjUHdMLsVVcnX/x9Mg8XOKLDjKvynJgtUOA+OHolxR/CsSesuSA
yYVSaZqcjkg2khkIE5WG8ZqNz79+4i7dEBOmrn9x5n83xB0ufaPCVi71lkKa4NP+
LYw5w7uJlIJDUxk4PuzJ33+OIsEmVn6h8/YfFlFqZdpXro/9TLopPeHMBLnnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU71ahWFTQt+HfkDlDax1WZg+wfSMwHwYDVR0j
BBgwFoAUnmrFOTp8N8xJ0VswAuWPai/nRCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZQUDg3Rkp0WWlmcERaeks4bmRaTlhDUmJ1MnU4bUxaVjdlSnJpQWYx
aG0vMC85RTZBQzUzOTNBN0MzN0NDNDlEMTVCMzAwMkU1OEY2QTJGRTc0NDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFNkFDNTM5M0E3QzM3Q0M0
OUQxNUIzMDAyRTU4RjZBMkZFNzQ0MjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWUFA4N0ZKdFlpZnBEWnpLOG5kWk5YQ1JidTJ1OG1MWlY3ZUpyaUFmMWhtLzAv
MzEzODM3MmUzNjMzMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7P3gwDQYJKoZIhvcNAQELBQADggEBACef0A9c
NX6fnBYirszROClVbf8gn5A1ukZCsuwsVSZ+CRk4y/Gnkf62l6hABHLQt+Qzg00c
FTAMJF672goM4qK3vdvwdh3WUMyG8PwXWyFVBOUEucuGVYgvOOmXK1vClgYvPMbQ
CF3UtL3ZTc1jh5BBkon9dnG/yUssUgzRG1/CFLkUAdPlQH1w4pn5/RGv1U1LKrRe
fVMcv+ZLLPuhywTKmsAa54FB6CkuLmQ4esOy2m+oxjrzcnpiewvvJnytglw/GUbn
Qlhk04fHflUd6yKyL9GnnjlgTzpH7YZOs09szmWnhmsM9TKjhPD/hrqFlYRhd0Cw
Lv/PNpTGbzWOG5k=
-----END CERTIFICATE-----
Generated at Tue Nov  4 06:34:53 2025 by rpki-client