
$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33312e302f32342d3234203d3e20323637303437.roa
File:                     34352e3232372e33312e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier:          EKnGgeD6+PaQMMMpLUoXC2OCE0TwwYHPDpTYLJ8EEhI=
Subject key identifier:   D0:1F:5D:E2:88:2D:53:A8:15:85:BA:09:BE:63:EB:31:6D:CF:11:0F
Certificate issuer:       /CN=B0B7CC182286506A60C3582F880657A780AE1B77
Certificate serial:       1A9E48933BA990A061ADFE80B42B67151E430C83
Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33312e302f32342d3234203d3e20323637303437.roa
Signing time:             Fri 10 Oct 2025 22:03:01 +0000
ROA not before:           Fri 10 Oct 2025 21:58:01 +0000
ROA not after:            Fri 09 Oct 2026 22:03:01 +0000
asID:                     267047
IP address blocks:        45.227.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:52:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9e:48:93:3b:a9:90:a0:61:ad:fe:80:b4:2b:67:15:1e:43:0c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77
        Validity
            Not Before: Oct 10 21:58:01 2025 GMT
            Not After : Oct  9 22:03:01 2026 GMT
        Subject: CN=D01F5DE2882D53A81585BA09BE63EB316DCF110F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:8b:4e:47:9c:26:b2:98:df:b0:f2:29:da:
                    18:e0:3d:0c:5e:98:d3:54:c5:1a:8f:2a:4d:4a:de:
                    38:8f:f5:a6:fe:2d:00:ae:7f:07:2c:fc:00:c7:5a:
                    91:7f:bb:f9:be:fc:77:c0:34:1a:a9:5a:d7:8a:e9:
                    f4:8b:46:b7:0d:a9:a1:f6:b8:f2:8b:93:af:f7:95:
                    f1:a7:2f:24:e8:ff:a0:3a:8a:2d:db:0f:38:15:72:
                    dd:44:f7:b3:da:cd:6c:d5:d1:74:12:1d:43:bf:db:
                    60:9c:09:e7:39:f1:14:4d:41:54:2a:87:86:1a:ce:
                    47:a8:1b:30:88:ee:9b:7e:59:89:6a:86:14:c0:42:
                    3e:2f:6d:ff:65:eb:d1:88:7d:72:68:74:df:b5:a7:
                    53:50:ab:7b:6a:ea:d8:23:25:1f:53:46:9f:0c:f4:
                    f5:41:20:de:58:87:54:fd:3c:0a:a4:2d:76:ea:75:
                    f8:f3:9f:bd:a1:e3:f7:ac:e9:f2:ff:14:94:16:ce:
                    55:54:09:cc:aa:a4:5d:aa:51:16:ed:f2:85:89:06:
                    99:99:41:96:bc:06:77:a2:f0:84:fe:a9:ed:63:c5:
                    cb:83:14:de:85:ce:0b:d3:ce:ec:a2:94:1b:bf:d1:
                    6d:3f:3d:99:40:e8:d5:4a:04:c2:42:90:bd:9f:6e:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:5D:E2:88:2D:53:A8:15:85:BA:09:BE:63:EB:31:6D:CF:11:0F
            X509v3 Authority Key Identifier:
                keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33312e302f32342d3234203d3e20323637303437.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.31.0/24
    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:a3:46:63:ee:76:47:be:9e:ba:c5:71:0e:aa:bc:28:61:
         0d:a7:d0:cd:ef:e0:52:e0:98:c2:6c:f4:c9:d7:7c:cb:4f:42:
         14:78:cb:9c:87:e9:4a:3a:71:a9:49:00:b5:a1:78:41:6d:b4:
         66:dc:3a:35:05:89:bd:43:fe:37:49:b6:c5:5a:5b:05:c9:fd:
         b5:88:80:9e:dc:03:54:9e:51:87:c1:ff:c1:a8:bb:a4:77:ee:
         12:bc:85:56:28:a3:c1:71:3a:6a:be:26:95:a8:01:e1:4b:58:
         87:df:f9:99:b7:0b:47:ef:72:e3:bb:f8:17:38:36:6a:8c:d7:
         96:dd:5a:f0:28:c9:3f:5c:7e:6c:a2:3e:d7:75:89:82:b1:d9:
         da:73:df:6d:cf:5c:db:e4:d8:0f:1e:f6:99:18:f0:30:09:35:
         ee:7c:b8:80:4c:b7:a2:aa:78:fa:6e:02:20:57:4d:34:2a:90:
         86:8d:84:66:b0:04:98:01:c3:65:0e:17:84:06:64:71:6a:53:
         f2:ac:bc:bf:65:5f:a8:fa:a2:b8:b3:95:d1:28:91:e2:c7:76:
         1e:b4:4a:77:53:97:72:5c:16:e7:04:14:ce:16:97:a4:ee:f7:
         f1:a0:3f:04:d5:b8:3b:5c:39:a0:ab:2d:36:9a:9e:dc:59:d4:
         cf:5d:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:28:26 2025 by rpki-client