
$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32322d3232203d3e20323730393035.roa
File:                     3138392e35302e35322e302f32322d3232203d3e20323730393035.roa (raw, json)
Hash identifier:          ALsUwVg1b91mWEVv1JossW/UxBJrUroC7KfEigoH8iA=
Subject key identifier:   19:C5:F9:B0:6C:B1:CD:FB:90:38:C6:75:7A:4C:95:A2:D7:BF:73:23
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       67B72A95E4F4C477C18670B6EB1D5E3FFCF1138E
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32322d3232203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:16:02 +0000
ROA not before:           Wed 01 Oct 2025 16:11:02 +0000
ROA not after:            Wed 30 Sep 2026 16:16:02 +0000
asID:                     270905
IP address blocks:        189.50.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b7:2a:95:e4:f4:c4:77:c1:86:70:b6:eb:1d:5e:3f:fc:f1:13:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:11:02 2025 GMT
            Not After : Sep 30 16:16:02 2026 GMT
        Subject: CN=19C5F9B06CB1CDFB9038C6757A4C95A2D7BF7323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:89:ba:53:c9:f9:d8:d3:18:20:cf:e2:bd:
                    d4:11:23:70:5a:91:70:5b:d1:0f:e8:91:ee:e1:df:
                    c6:c7:fa:1e:e0:56:59:10:f0:2b:05:4e:7a:19:d0:
                    1b:aa:ed:f3:42:d1:76:fb:ec:3f:be:dd:84:df:70:
                    eb:50:df:8c:e6:c6:18:79:ff:36:5f:1a:50:25:d8:
                    cf:5c:56:2f:30:8f:5d:fc:bd:79:5b:c6:22:fe:e6:
                    42:88:c9:19:da:52:55:26:88:8f:8c:98:7a:cd:6a:
                    ab:74:dd:77:3f:2e:2f:e6:05:a8:64:d5:20:6a:c5:
                    65:ce:d8:73:bd:d4:ca:de:57:80:96:63:64:4a:2b:
                    33:52:29:a7:09:b1:31:0e:a1:08:7e:a6:16:eb:75:
                    d8:6a:7e:cb:ad:fe:40:22:73:e9:06:9d:c2:69:42:
                    3b:78:c7:98:1a:5e:34:f3:fa:0a:65:63:61:84:d1:
                    10:f8:42:64:11:de:cf:8a:46:e0:0d:96:66:34:4a:
                    ad:f9:bf:44:32:a3:93:03:0b:47:8e:93:11:d0:ef:
                    44:d2:6b:ab:74:bf:08:78:ab:af:a6:fa:2f:7d:57:
                    eb:6d:ca:29:a3:74:40:7b:34:5b:95:50:b3:80:97:
                    6e:59:77:99:f6:3c:0c:91:a0:78:e2:48:e8:f1:9f:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:F9:B0:6C:B1:CD:FB:90:38:C6:75:7A:4C:95:A2:D7:BF:73:23
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35322e302f32322d3232203d3e20323730393035.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.52.0/22
    Signature Algorithm: sha256WithRSAEncryption
         24:ca:59:bf:34:ab:04:30:74:dd:f3:57:8d:41:2b:3d:48:68:
         7a:06:52:5c:b9:88:c1:3d:d8:32:08:be:c3:a7:12:1b:d7:33:
         d4:cf:54:f4:da:0b:68:e7:77:32:13:1d:bc:08:68:56:c2:39:
         5c:94:7f:ec:ee:be:ed:f0:f7:3b:00:48:c3:6c:fa:d8:90:b4:
         60:bb:7b:55:8d:9e:33:08:39:cd:65:53:5f:95:c5:cf:2f:1f:
         ae:8a:c6:5f:62:b5:1a:ec:36:04:01:ee:52:24:9b:40:66:d9:
         89:1c:1c:ad:84:91:b0:83:ca:4c:2c:12:0d:61:d3:ff:b6:c9:
         bf:04:df:c2:ef:f2:2a:3e:2e:40:ee:14:03:01:e9:e6:37:f9:
         cf:d9:0d:50:c9:25:5d:53:86:8d:70:96:69:e8:f5:0e:7c:1a:
         33:ac:77:f0:36:ff:3b:c5:0d:59:23:7a:94:d0:d0:f2:c0:42:
         41:8c:46:9a:5b:5e:b6:d1:d4:43:98:40:30:3d:8c:1b:b7:d0:
         69:85:28:b7:f3:17:ca:99:20:99:f3:cf:29:c6:88:a9:91:82:
         d9:e8:e3:6b:e9:63:df:4a:3a:a5:6d:bf:51:a2:9c:61:e8:4c:
         71:c0:8f:c5:ca:94:75:44:66:6f:54:2f:16:8d:dc:db:58:63:
         27:4b:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:07:41 2025 by rpki-client