
$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa
File:                     3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa (raw, json)
Hash identifier:          jc37Vl8L54zDn2JxYnD0lr2Ib5lXH9euJv8jSBTFYp4=
Subject key identifier:   52:E9:FF:A2:A8:92:EA:DC:49:A6:58:63:83:08:4F:A7:57:46:D7:4A
Certificate issuer:       /CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
Certificate serial:       4626C2D7F0091F7F72C71A5B9F13309F6771569B
Authority key identifier: D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa
Signing time:             Fri 03 Oct 2025 13:25:48 +0000
ROA not before:           Fri 03 Oct 2025 13:20:48 +0000
ROA not after:            Fri 02 Oct 2026 13:25:48 +0000
asID:                     262817
IP address blocks:        138.219.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:18:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:26:c2:d7:f0:09:1f:7f:72:c7:1a:5b:9f:13:30:9f:67:71:56:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
        Validity
            Not Before: Oct  3 13:20:48 2025 GMT
            Not After : Oct  2 13:25:48 2026 GMT
        Subject: CN=52E9FFA2A892EADC49A6586383084FA75746D74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:55:1b:5c:f0:dd:81:cc:f8:7d:8a:22:1b:
                    b4:6e:38:1d:84:34:58:ad:12:48:e4:49:58:a3:e1:
                    58:92:ff:f7:90:c2:0f:38:95:b4:fc:6b:18:6d:85:
                    47:07:5f:0d:a9:db:67:41:0f:7e:67:b5:c2:65:1b:
                    35:69:e0:d6:c0:e9:a9:bc:44:97:4b:ed:da:5d:42:
                    0d:52:c8:b7:e4:98:b0:f2:2b:27:cc:84:e4:e8:49:
                    76:3f:9c:51:a0:6d:4b:5d:0c:b9:02:81:c0:92:10:
                    fa:5b:c7:ff:e3:79:b5:dd:b7:ab:75:db:4f:2a:40:
                    76:6d:6c:46:8a:10:25:fe:39:88:12:31:a4:17:39:
                    f9:00:8c:5a:44:57:0c:fb:5b:23:74:18:6a:a2:72:
                    c1:cf:1c:71:96:e2:52:5f:57:31:37:14:3b:94:2a:
                    60:eb:ea:ae:ef:24:dc:96:5e:ce:c2:2f:ec:0f:d1:
                    bf:f5:cf:72:48:65:5b:6a:a4:9b:f4:8c:06:09:42:
                    ed:dc:2e:5f:28:b2:71:61:2b:2b:c1:27:1b:52:8e:
                    55:6c:8e:43:f1:ad:4f:0c:ed:a7:ca:4e:ab:95:54:
                    58:3c:d3:ed:02:1e:f3:cd:c2:f3:fd:6c:66:b7:8f:
                    74:7f:f1:7d:eb:91:e1:84:77:e7:91:93:a8:f0:30:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E9:FF:A2:A8:92:EA:DC:49:A6:58:63:83:08:4F:A7:57:46:D7:4A
            X509v3 Authority Key Identifier:
                keyid:D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.150.0/23
    Signature Algorithm: sha256WithRSAEncryption
         67:81:ec:fd:f7:19:2b:30:76:7f:76:c5:b2:f1:dc:99:65:81:
         3b:dc:91:8d:1f:26:e7:93:30:52:28:98:fd:53:ef:37:7f:49:
         79:16:5b:96:30:ca:70:b4:15:ea:7f:f2:85:a4:8b:cf:2e:f8:
         60:97:07:e2:73:47:00:13:ee:05:d8:04:b2:07:c4:ea:0b:41:
         52:b1:99:7c:63:10:30:64:18:2c:2c:76:f0:a8:4a:ce:3a:7f:
         1b:05:8a:fb:00:11:ef:80:1d:64:b5:35:c2:14:41:e0:6f:15:
         56:ad:00:0b:a9:7b:2b:39:9e:57:2f:66:35:a7:db:ec:5d:3e:
         33:eb:fc:76:5a:ba:b8:e4:9f:96:3e:49:0b:0e:12:36:a2:7a:
         33:54:78:8f:65:22:9b:7e:cb:0e:a5:70:e6:17:c3:af:c5:11:
         96:5c:fc:99:3d:48:25:e5:7c:b2:8f:b2:7d:74:37:be:14:9f:
         5a:0f:ce:0e:9f:62:21:cb:52:26:4b:b8:4d:8a:60:42:84:73:
         c9:0c:1f:10:b7:6d:a1:f2:3b:6c:da:a2:0f:8e:fb:0d:9a:43:
         6b:bd:76:05:16:71:33:95:cc:19:60:41:bd:c0:2b:55:3c:f0:
         ac:e6:ec:f1:d3:89:2b:2a:d6:6f:a1:39:1e:4d:69:d3:41:af:
         76:be:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:36:11 2025 by rpki-client