
$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35352e302f32342d3234203d3e20323730393035.roa
File:                     3138392e35302e35352e302f32342d3234203d3e20323730393035.roa (raw, json)
Hash identifier:          iDGr5F2PnwedBBe+x8uqhHnhvoHpNVzvQZV2xJFQ9Sw=
Subject key identifier:   80:B7:19:5E:F3:D4:DA:FE:FD:15:4F:C1:57:F0:3D:E9:BF:4B:6B:FE
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       15273F5CB5D206CA158EF58AB9CC8EF0BF422EE9
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35352e302f32342d3234203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:16:34 +0000
ROA not before:           Wed 01 Oct 2025 16:11:34 +0000
ROA not after:            Wed 30 Sep 2026 16:16:34 +0000
asID:                     270905
IP address blocks:        189.50.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:27:3f:5c:b5:d2:06:ca:15:8e:f5:8a:b9:cc:8e:f0:bf:42:2e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:11:34 2025 GMT
            Not After : Sep 30 16:16:34 2026 GMT
        Subject: CN=80B7195EF3D4DAFEFD154FC157F03DE9BF4B6BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:c4:db:4c:72:63:5e:93:b4:ce:a2:f9:0b:
                    5f:12:c6:13:97:da:e6:2a:f6:55:cc:e3:ef:e9:9e:
                    64:bc:0b:b5:4d:81:aa:20:c0:38:45:71:b8:da:fb:
                    d3:cd:43:a0:cc:47:a5:df:38:72:8d:e0:5d:32:8c:
                    1f:3e:69:83:20:52:21:7b:bc:c0:8a:1c:be:38:a3:
                    ce:aa:db:61:ce:50:53:64:18:72:2e:9b:a5:71:bb:
                    b8:5f:09:95:14:f3:c8:59:e9:12:76:8e:4d:5d:d2:
                    4b:85:6c:15:62:8c:6e:cc:e7:7d:04:d4:99:e6:47:
                    8e:73:ee:e3:03:7c:f4:69:c3:84:3b:44:fe:e3:c0:
                    6a:9f:c8:a9:ee:74:6c:98:8a:17:f2:b0:a0:6e:20:
                    4b:48:26:7a:6d:98:fc:1e:f0:81:3e:cf:d3:97:be:
                    4a:6f:d6:95:d4:4e:1a:04:82:68:b0:98:4b:2e:2d:
                    0f:6e:a8:24:32:80:16:8e:85:06:37:d8:71:6b:15:
                    77:c8:3d:a0:b0:04:34:ff:37:5a:57:10:4c:e9:ba:
                    3d:03:9c:dc:aa:e3:43:a8:5e:8a:68:cf:0e:2e:15:
                    9f:b5:56:96:18:ce:ed:8d:8e:d1:c3:b4:74:4e:7f:
                    0a:40:11:66:2f:fc:09:9d:0d:fb:d3:c8:5f:d7:87:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B7:19:5E:F3:D4:DA:FE:FD:15:4F:C1:57:F0:3D:E9:BF:4B:6B:FE
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/3138392e35302e35352e302f32342d3234203d3e20323730393035.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.55.0/24
    Signature Algorithm: sha256WithRSAEncryption
         34:30:8c:9c:e2:5e:57:f5:b1:48:20:0e:d1:2e:86:5e:32:3f:
         96:b6:8c:e7:f7:48:8c:05:f6:eb:8b:7a:79:3e:84:b0:c5:5b:
         87:68:53:0d:69:4d:65:e0:3a:61:1a:79:f1:48:be:d8:6b:36:
         e6:80:9b:8a:e8:09:31:92:ea:83:f7:f8:32:96:ef:cd:94:e9:
         4f:dd:92:89:9a:14:17:27:70:54:4c:3d:67:52:2c:50:db:84:
         83:7c:04:65:d2:08:da:af:a8:6d:22:dd:e3:dd:51:66:88:8c:
         e7:0b:9a:19:49:f6:69:f8:03:23:eb:f3:68:8f:c4:f7:13:db:
         6c:d7:15:a1:83:e6:0f:0b:6d:0d:35:dc:91:b9:6e:03:51:cb:
         4a:40:ee:7b:8c:07:c8:1e:53:35:f9:71:e7:7c:66:4b:1d:bc:
         bb:a2:00:87:dd:ce:00:7d:8c:df:40:26:fb:bd:81:1d:4c:e0:
         a6:07:55:67:9b:15:f6:cd:1a:4f:9d:ff:af:7f:d9:64:35:e8:
         09:22:52:db:55:42:36:b3:9d:18:f4:ef:80:85:e6:9d:1e:ad:
         25:4c:19:c1:ec:67:63:89:69:ec:d4:7e:6d:47:8a:90:6b:e0:
         ef:88:7b:6d:28:e9:bb:35:87:b1:de:22:89:91:0a:26:95:f7:
         cb:bc:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:07:39 2025 by rpki-client