
$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32392e302f32342d3234203d3e20323637303437.roa
File:                     34352e3232372e32392e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier:          O2djXST49OKSKNVRmQVA0TYrqr4/p5cebdr4SGiBVUY=
Subject key identifier:   23:D5:3C:3F:64:F7:9C:97:E6:D9:C5:FE:94:39:57:4F:0E:6A:B2:CE
Certificate issuer:       /CN=B0B7CC182286506A60C3582F880657A780AE1B77
Certificate serial:       5EBD8DE41A96B43DEDC663D14AF79ECAFDDB6753
Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32392e302f32342d3234203d3e20323637303437.roa
Signing time:             Fri 10 Oct 2025 22:03:01 +0000
ROA not before:           Fri 10 Oct 2025 21:58:01 +0000
ROA not after:            Fri 09 Oct 2026 22:03:01 +0000
asID:                     267047
IP address blocks:        45.227.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:52:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:8d:e4:1a:96:b4:3d:ed:c6:63:d1:4a:f7:9e:ca:fd:db:67:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77
        Validity
            Not Before: Oct 10 21:58:01 2025 GMT
            Not After : Oct  9 22:03:01 2026 GMT
        Subject: CN=23D53C3F64F79C97E6D9C5FE9439574F0E6AB2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:ce:e1:29:6b:37:28:3e:01:0b:0f:11:2f:
                    60:aa:2c:55:d8:c0:7a:93:ed:91:6a:40:13:f0:c3:
                    fc:2c:3d:4f:ce:4a:04:bc:0b:ea:26:9d:9e:6a:81:
                    d9:5c:d0:8e:1b:0f:68:c4:e1:99:5f:b3:12:ef:f0:
                    67:18:10:bf:f6:42:95:90:9b:cd:47:19:3e:72:52:
                    f4:b8:e0:85:d3:52:81:be:9b:2b:59:cb:2e:23:e7:
                    ab:9f:5b:42:9d:b8:bc:75:92:0f:29:28:e0:79:a6:
                    39:fb:3d:21:39:18:2b:3c:3d:0e:07:1d:bd:5c:13:
                    c7:52:0f:d8:54:1b:a8:88:15:27:11:8f:41:fc:5a:
                    06:9a:9b:eb:f6:0e:5d:51:24:1e:10:a8:35:1a:4d:
                    f8:ae:34:06:39:7c:7e:be:f1:05:72:45:1b:36:dc:
                    61:92:60:e3:d8:4d:73:81:2e:19:70:35:cb:f1:de:
                    af:1a:be:64:89:43:43:b3:99:c3:11:19:22:f0:1c:
                    cd:ea:e0:4e:36:2f:b2:94:51:6f:fb:ff:0c:c9:3d:
                    78:5a:55:0d:51:b5:61:0b:74:bf:bb:b9:aa:df:1b:
                    d6:43:b2:03:66:f6:3d:3c:7a:56:81:b6:a7:69:d2:
                    dc:2c:da:a6:75:e1:f5:15:e3:85:2f:a5:93:1b:22:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:3C:3F:64:F7:9C:97:E6:D9:C5:FE:94:39:57:4F:0E:6A:B2:CE
            X509v3 Authority Key Identifier:
                keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32392e302f32342d3234203d3e20323637303437.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.29.0/24
    Signature Algorithm: sha256WithRSAEncryption
         76:91:c3:a6:ea:3c:46:43:8b:b2:94:e3:bc:01:d1:f2:44:1e:
         df:1b:5d:74:87:26:50:07:ba:7b:47:b8:4c:09:b7:83:b2:c1:
         a9:37:b6:76:78:b0:15:15:8d:e7:9c:f1:9f:72:df:94:9f:fe:
         d6:9f:60:30:9f:4e:1a:c9:c6:1a:20:14:da:4d:77:21:ad:0a:
         03:e2:bb:cc:26:7d:07:13:21:f1:a3:28:e4:cd:78:90:d3:70:
         a3:39:a6:5a:04:6b:75:49:94:d4:f2:16:3a:0a:02:53:22:38:
         00:ce:c4:80:35:8a:59:83:24:60:3e:7b:d6:ec:5e:d6:99:1b:
         a4:73:1f:29:f4:54:3d:1d:09:f4:84:b6:59:60:f6:74:38:ca:
         55:74:8f:93:18:63:b5:c6:36:08:80:eb:13:2c:d6:b0:3c:10:
         6f:7a:44:39:ab:f6:ab:3a:0d:62:7b:2d:8a:95:7a:1f:1e:f9:
         9f:2e:23:1c:b2:a9:a8:f3:7b:2b:a1:97:28:2e:99:5c:b5:95:
         cc:f1:4a:ba:e9:bc:71:34:45:72:d3:bc:17:c1:45:9b:2a:38:
         1a:e9:2d:78:24:8a:4b:ff:73:1b:28:e6:74:51:9f:d7:06:31:
         6a:39:b2:e0:dd:48:c8:6f:36:65:ef:67:db:0c:f6:80:aa:08:
         ee:57:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:28:25 2025 by rpki-client