
$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/323830343a353139633a3a2f33322d313238203d3e20323638343635.roa
File:                     323830343a353139633a3a2f33322d313238203d3e20323638343635.roa (raw, json)
Hash identifier:          JZn/eUKDeK+gIqGYzqO7SkOwhc4pgrubus4b1gO30W8=
Subject key identifier:   D1:78:EA:5E:A6:48:E7:42:E3:31:05:A9:82:82:6B:32:B6:74:04:B4
Certificate issuer:       /CN=37A7B05DD113579E49AB5A4264BA69375A97E6CC
Certificate serial:       0B9BD991DEDC899B1F05FE3940B66BAC490536B7
Authority key identifier: 37:A7:B0:5D:D1:13:57:9E:49:AB:5A:42:64:BA:69:37:5A:97:E6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37A7B05DD113579E49AB5A4264BA69375A97E6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/323830343a353139633a3a2f33322d313238203d3e20323638343635.roa
Signing time:             Sat 01 Nov 2025 14:34:33 +0000
ROA not before:           Sat 01 Nov 2025 14:29:33 +0000
ROA not after:            Sat 31 Oct 2026 14:34:33 +0000
asID:                     268465
IP address blocks:        2804:519c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/37A7B05DD113579E49AB5A4264BA69375A97E6CC.crl
                          rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/37A7B05DD113579E49AB5A4264BA69375A97E6CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37A7B05DD113579E49AB5A4264BA69375A97E6CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:10:20 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:d9:91:de:dc:89:9b:1f:05:fe:39:40:b6:6b:ac:49:05:36:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37A7B05DD113579E49AB5A4264BA69375A97E6CC
        Validity
            Not Before: Nov  1 14:29:33 2025 GMT
            Not After : Oct 31 14:34:33 2026 GMT
        Subject: CN=D178EA5EA648E742E33105A982826B32B67404B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:29:50:7e:26:6a:38:c3:52:e3:c6:be:e0:
                    88:32:26:17:89:58:87:b3:09:b3:e2:f7:6c:dd:f6:
                    2e:fe:4d:7b:01:57:14:ca:99:e5:59:a7:e7:f2:5f:
                    a4:a8:0e:2d:84:6d:b5:91:0d:3c:b9:65:f1:96:c3:
                    b4:49:52:ae:2d:e3:dd:05:15:10:4b:31:12:df:8f:
                    7a:6d:11:55:aa:d0:7b:fe:09:68:5c:df:3a:8d:d4:
                    f3:49:6d:9e:12:6b:13:3c:12:08:4a:dc:6c:e4:92:
                    e3:b1:44:0f:91:7a:eb:be:b0:da:fd:cb:b5:52:89:
                    b4:ee:54:0b:dc:7b:cc:3c:d7:f7:62:15:ea:4f:bf:
                    9f:fc:6d:0b:23:86:3b:a7:cd:4f:2b:d3:ca:17:74:
                    c0:e0:89:9c:94:c4:07:5a:f5:69:d8:e2:40:b8:36:
                    e1:e5:de:d1:12:f0:b0:74:cd:f5:50:b1:99:28:fe:
                    b5:63:62:3f:aa:70:27:41:01:33:5d:24:0f:7c:29:
                    28:c7:e4:67:af:e5:62:09:0b:66:e6:49:34:39:be:
                    0e:c9:f9:20:b8:19:c2:31:09:8e:5c:1c:72:14:ae:
                    83:a7:0e:20:19:92:8e:0c:c2:7d:63:c3:90:94:1f:
                    63:d7:3b:44:b5:0e:9c:6a:a8:59:ac:6c:24:40:ae:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:EA:5E:A6:48:E7:42:E3:31:05:A9:82:82:6B:32:B6:74:04:B4
            X509v3 Authority Key Identifier:
                keyid:37:A7:B0:5D:D1:13:57:9E:49:AB:5A:42:64:BA:69:37:5A:97:E6:CC
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/37A7B05DD113579E49AB5A4264BA69375A97E6CC.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37A7B05DD113579E49AB5A4264BA69375A97E6CC.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/323830343a353139633a3a2f33322d313238203d3e20323638343635.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:519c::/32
    Signature Algorithm: sha256WithRSAEncryption
         58:4e:89:ec:7c:0c:9c:7b:df:41:8d:3f:4f:b3:f4:1d:ff:4b:
         b4:c7:cc:b9:9f:9b:d1:a8:59:a0:39:c7:05:4e:24:17:15:20:
         b5:38:61:f2:40:23:16:b0:39:a6:86:49:28:13:da:99:81:d0:
         b9:21:d9:45:7b:4b:15:a1:26:25:bb:94:58:55:80:4d:56:36:
         2a:84:91:6a:16:c6:3b:bb:28:07:e3:a3:66:4d:0c:0e:18:b3:
         ce:ec:5c:4b:d2:57:f0:05:3b:ea:d2:05:3a:c3:7b:6a:c7:da:
         2a:76:05:17:d4:ba:74:b1:69:1c:55:e0:bc:b3:ad:27:2e:34:
         bb:82:4d:0e:8b:78:33:d9:3f:45:5e:b1:3d:23:5b:4a:75:ab:
         1d:c7:f5:43:40:29:6c:58:50:02:9b:83:15:bb:0f:6c:9e:e3:
         14:2f:46:9f:d5:1f:00:d1:da:77:f9:2a:7d:50:39:90:42:1e:
         fd:53:0a:a4:d3:6b:70:45:be:6a:e8:96:ce:7e:1b:d1:e8:c0:
         2f:ea:0f:04:97:a8:39:2f:eb:65:03:8e:ca:a7:ac:16:03:87:
         45:5c:46:13:c3:ab:34:1f:41:bc:35:09:c2:87:4b:05:2d:1d:
         b7:4c:3e:35:d5:78:f0:83:5b:9f:4f:51:8d:62:4f:84:f1:d9:
         10:d1:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:31:26 2025 by rpki-client