
$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (raw, json)
Hash identifier:          nfeBT2oUv3BPTJWe0f99jvnYaGwr9xoeQxUXtRWkrz0=
Subject key identifier:   06:4D:8D:18:69:B6:66:68:C2:89:A5:F3:37:65:51:51:54:0F:E7:99
Certificate issuer:       /CN=1009452148BF025D133579CC61462AB945880968
Certificate serial:       583498661B62E364D69C288A649307D50A063FFD
Authority key identifier: 10:09:45:21:48:BF:02:5D:13:35:79:CC:61:46:2A:B9:45:88:09:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa
Signing time:             Wed 22 Oct 2025 14:06:56 +0000
ROA not before:           Wed 22 Oct 2025 14:01:56 +0000
ROA not after:            Wed 21 Oct 2026 14:06:56 +0000
asID:                     266021
IP address blocks:        170.245.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:35:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:34:98:66:1b:62:e3:64:d6:9c:28:8a:64:93:07:d5:0a:06:3f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1009452148BF025D133579CC61462AB945880968
        Validity
            Not Before: Oct 22 14:01:56 2025 GMT
            Not After : Oct 21 14:06:56 2026 GMT
        Subject: CN=064D8D1869B66668C289A5F337655151540FE799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:1f:7a:bc:c6:dd:1f:ad:2e:8b:05:89:6d:
                    32:1d:86:42:31:f4:a1:ba:4a:24:68:59:d0:67:1f:
                    c1:cc:fc:34:2f:d8:8a:6e:03:0d:72:d8:4e:b9:45:
                    88:a0:c0:cc:b4:88:69:1f:25:aa:b8:e1:db:38:40:
                    47:70:73:d4:cc:5b:b8:51:dd:92:cd:83:a3:b6:be:
                    84:b2:96:b0:72:fe:6b:80:7c:42:04:b8:19:df:a9:
                    c3:f9:58:84:3e:6e:7f:80:9c:17:35:88:d8:c4:6e:
                    ba:3a:11:34:dc:1c:4a:40:1a:c9:81:5e:32:c8:6a:
                    b2:c9:86:c8:ae:54:af:00:e2:87:6e:eb:c1:51:47:
                    d1:6d:a1:38:8e:f3:10:84:f7:82:4f:2b:21:c9:fd:
                    d0:06:34:09:ad:cf:a7:53:9b:76:40:77:b0:d2:1f:
                    e0:97:88:f2:c8:ea:90:5c:0f:71:0a:47:95:c8:e8:
                    40:0b:35:06:6b:39:1c:3c:99:33:55:16:2e:4d:ba:
                    0b:d7:a4:98:a7:61:7b:ea:1d:fa:86:73:05:5a:20:
                    67:f2:81:77:1a:49:5d:60:a3:4e:7c:bc:57:f1:b5:
                    fe:ea:1d:b5:32:95:43:21:eb:1f:6c:6d:6b:9b:3c:
                    b8:b1:01:59:50:50:23:d4:66:08:3d:99:e1:e4:6e:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:8D:18:69:B6:66:68:C2:89:A5:F3:37:65:51:51:54:0F:E7:99
            X509v3 Authority Key Identifier:
                keyid:10:09:45:21:48:BF:02:5D:13:35:79:CC:61:46:2A:B9:45:88:09:68
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
    Signature Algorithm: sha256WithRSAEncryption
         30:ab:45:0b:43:90:89:92:a7:12:5e:94:5e:b1:e2:41:7f:5c:
         c4:86:b4:d9:1a:ce:16:68:db:dc:7f:a0:2c:ea:92:65:ad:00:
         37:a5:01:56:b9:96:52:42:c0:f7:1e:aa:36:6d:4c:8d:d9:2a:
         8b:0e:43:b8:ab:94:b6:a7:81:a2:51:54:f8:09:f9:08:af:7a:
         d8:da:0c:4d:6f:7c:8e:c4:75:ea:f7:4c:40:f2:ae:12:1a:2a:
         23:ab:6c:44:db:06:7a:1c:39:e2:48:ef:b3:c4:de:f3:f8:d3:
         71:4d:15:5b:4a:a0:aa:32:c2:37:22:d8:31:10:4f:7d:1b:5a:
         e5:fa:fe:d5:d9:b0:09:29:c1:d7:46:05:85:76:26:60:13:3b:
         5d:56:e9:ea:71:09:98:aa:69:4f:e9:79:a2:d8:be:88:5f:81:
         15:2a:00:69:c5:f1:2a:9b:b9:c7:cd:98:a7:c1:e4:27:82:ba:
         ed:76:24:5b:62:30:9a:63:32:d4:aa:b8:4f:d2:97:e7:99:aa:
         39:ba:c5:a1:fc:c1:ba:11:74:06:7b:10:3f:1d:54:9a:75:93:
         47:cf:33:84:bc:cc:b1:9b:00:4a:a7:0b:ec:11:a1:56:0b:24:
         e3:4f:17:55:3e:fb:d1:bc:7d:d2:1a:17:f8:18:4f:f9:cb:bc:
         2e:06:da:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWDSYZhti42TWnCiKZJMH1QoGP/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAwOTQ1MjE0OEJGMDI1RDEzMzU3OUNDNjE0NjJBQjk0
NTg4MDk2ODAeFw0yNTEwMjIxNDAxNTZaFw0yNjEwMjExNDA2NTZaMDMxMTAvBgNV
BAMTKDA2NEQ4RDE4NjlCNjY2NjhDMjg5QTVGMzM3NjU1MTUxNTQwRkU3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ax96vMbdH60uiwWJbTIdhkIx
9KG6SiRoWdBnH8HM/DQv2IpuAw1y2E65RYigwMy0iGkfJaq44ds4QEdwc9TMW7hR
3ZLNg6O2voSylrBy/muAfEIEuBnfqcP5WIQ+bn+AnBc1iNjEbro6ETTcHEpAGsmB
XjLIarLJhsiuVK8A4odu68FRR9FtoTiO8xCE94JPKyHJ/dAGNAmtz6dTm3ZAd7DS
H+CXiPLI6pBcD3EKR5XI6EALNQZrORw8mTNVFi5NugvXpJinYXvqHfqGcwVaIGfy
gXcaSV1go058vFfxtf7qHbUylUMh6x9sbWubPLixAVlQUCPUZgg9meHkbmgDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBk2NGGm2ZmjCiaXzN2VRUVQP55kwHwYDVR0j
BBgwFoAUEAlFIUi/Al0TNXnMYUYquUWICWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC8xMDA5NDUyMTQ4QkYwMjVEMTMzNTc5Q0M2MTQ2MkFCOTQ1ODgwOTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMDk0NTIxNDhCRjAyNUQx
MzM1NzlDQzYxNDYyQUI5NDU4ODA5NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBQ1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAv
MzEzNzMwMmUzMjM0MzUyZTMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9SQwDQYJKoZIhvcNAQELBQADggEBADCrRQtD
kImSpxJelF6x4kF/XMSGtNkazhZo29x/oCzqkmWtADelAVa5llJCwPceqjZtTI3Z
KosOQ7irlLangaJRVPgJ+QivetjaDE1vfI7Eder3TEDyrhIaKiOrbETbBnocOeJI
77PE3vP403FNFVtKoKoywjci2DEQT30bWuX6/tXZsAkpwddGBYV2JmATO11W6epx
CZiqaU/peaLYvohfgRUqAGnF8SqbucfNmKfB5CeCuu12JFtiMJpjMtSquE/Sl+eZ
qjm6xaH8wboRdAZ7ED8dVJp1k0fPM4S8zLGbAEqnC+wRoVYLJONPF1U++9G8fdIa
F/gYT/nLvC4G2vg=
-----END CERTIFICATE-----
Generated at Tue Nov  4 05:03:50 2025 by rpki-client