
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37312e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          U7vFqtkgSl5wjCwc/WUNe2X1XpSK/h0Q8SFMgJhuwdg=
Subject key identifier:   79:82:3D:74:C7:FF:43:DD:E8:B5:7F:5C:AF:66:E3:F1:4B:DE:A5:65
Certificate issuer:       /CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
Certificate serial:       3E09E24CD9596ABA825CBF6223BD9FD8F7D7BA66
Authority key identifier: E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa
Signing time:             Thu 23 Oct 2025 13:02:57 +0000
ROA not before:           Thu 23 Oct 2025 12:57:57 +0000
ROA not after:            Thu 22 Oct 2026 13:02:57 +0000
asID:                     28184
IP address blocks:        189.89.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:58:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:09:e2:4c:d9:59:6a:ba:82:5c:bf:62:23:bd:9f:d8:f7:d7:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106F083B0114D3D104DD1EBEA8257FB6FA59CF7
        Validity
            Not Before: Oct 23 12:57:57 2025 GMT
            Not After : Oct 22 13:02:57 2026 GMT
        Subject: CN=79823D74C7FF43DDE8B57F5CAF66E3F14BDEA565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:80:a5:61:b0:c0:db:0c:37:0a:8f:10:00:
                    5d:41:48:b5:1c:0c:b7:03:aa:00:68:60:f7:b0:f5:
                    2f:94:33:41:06:4c:51:0a:94:e6:9b:f4:bc:b8:7f:
                    f6:b2:98:fb:41:9e:eb:f8:2b:2d:44:71:91:02:b8:
                    7a:00:73:d7:27:d0:46:5c:77:a5:24:37:5c:68:0f:
                    1d:30:17:d5:ce:98:04:04:b9:c0:12:33:4f:a5:6b:
                    ca:62:c0:f3:ea:de:16:f8:f1:bc:57:53:32:d9:0c:
                    24:56:1c:bd:2c:75:a4:d5:88:71:2d:30:6c:6c:75:
                    b9:e0:6d:b4:b6:7b:c5:dd:69:fa:2d:72:ad:52:dd:
                    e7:db:2f:ce:16:bd:00:29:44:af:6e:72:78:a1:28:
                    d4:62:05:a6:ac:06:bf:19:78:9d:16:7f:46:15:8e:
                    96:3d:94:35:f0:08:02:0a:5b:22:ac:a0:5f:27:80:
                    bf:20:41:20:3a:b7:26:c3:ed:5e:72:a1:e8:05:a7:
                    d4:c5:55:8f:e1:54:00:77:fb:5a:f1:a1:30:0d:52:
                    cb:84:12:ad:6c:e1:72:68:59:cf:c3:c3:05:25:66:
                    9e:47:ca:74:c2:27:d3:b6:64:e9:36:5f:1e:7e:4b:
                    4f:e4:6e:6b:dd:3d:d3:78:ce:62:15:39:4c:d4:d4:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:82:3D:74:C7:FF:43:DD:E8:B5:7F:5C:AF:66:E3:F1:4B:DE:A5:65
            X509v3 Authority Key Identifier:
                keyid:E1:06:F0:83:B0:11:4D:3D:10:4D:D1:EB:EA:82:57:FB:6F:A5:9C:F7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106F083B0114D3D104DD1EBEA8257FB6FA59CF7.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.71.0/24
    Signature Algorithm: sha256WithRSAEncryption
         86:3d:e5:d0:df:18:48:16:4b:68:1a:01:5e:1a:49:9f:1c:41:
         19:2c:90:62:ca:6f:27:25:b5:ea:67:5e:b0:5f:ba:2e:8c:73:
         30:47:98:4a:ed:0c:a2:af:b4:25:46:ff:09:d8:55:b7:2d:7e:
         93:5f:89:68:a0:f0:8d:9a:be:3d:fa:2c:31:b3:06:39:fc:1a:
         f8:3a:8f:23:ec:f6:08:54:f9:9e:94:89:b7:cd:c1:0e:ea:d3:
         6f:75:98:e9:d5:d6:bd:3c:74:55:ab:b1:86:e3:ec:96:75:c3:
         aa:9c:c7:46:c8:aa:d0:ea:c0:c6:13:c6:28:48:e0:20:69:e8:
         27:19:4f:e8:d3:1f:1f:a8:9e:71:d7:03:1f:59:41:3c:06:89:
         11:29:db:ac:75:f0:fa:96:03:af:bc:2b:ec:7b:2a:c1:5a:45:
         29:69:28:c7:70:fc:44:66:31:e9:e3:aa:d8:e0:3e:36:2d:dd:
         29:71:a0:28:3f:8b:c7:6f:96:fa:c5:75:e6:f0:16:f2:75:fe:
         41:c3:45:25:d7:eb:44:92:23:5e:83:70:c6:98:db:0f:e6:94:
         4b:b3:99:86:d7:2b:51:fd:5c:ba:1f:bf:46:6a:ea:0d:08:54:
         38:e1:46:fb:ce:49:d7:68:8d:df:bd:3a:df:d2:3d:e0:30:ab:
         1e:c6:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:31:07 2025 by rpki-client