
$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
File:                     323830343a313036383a3a2f33322d3438203d3e20323633363334.roa (raw, json)
Hash identifier:          MBZDnC0s47oIyWJpQyaecFtb25xo5+Eut2yvAmE3MRY=
Subject key identifier:   40:78:B4:77:0A:DB:11:0C:29:3C:DC:39:51:B5:98:C2:25:26:96:F7
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       3A8BBBB8EB993A71F1DE178D73AFFCD2D2035771
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
Signing time:             Thu 23 Oct 2025 14:48:18 +0000
ROA not before:           Thu 23 Oct 2025 14:43:18 +0000
ROA not after:            Thu 22 Oct 2026 14:48:18 +0000
asID:                     263634
IP address blocks:        2804:1068::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:19:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8b:bb:b8:eb:99:3a:71:f1:de:17:8d:73:af:fc:d2:d2:03:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Oct 23 14:43:18 2025 GMT
            Not After : Oct 22 14:48:18 2026 GMT
        Subject: CN=4078B4770ADB110C293CDC3951B598C2252696F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:ac:1c:45:26:4f:e5:56:af:07:35:33:7b:
                    aa:d1:7a:c1:39:96:2b:1e:34:41:65:05:a3:4f:60:
                    4d:7e:68:cf:79:fc:48:02:45:00:b8:18:80:ef:c7:
                    cf:50:a9:10:6a:2c:a4:35:f8:72:6d:12:55:8c:7c:
                    f6:58:22:d9:94:c4:97:52:3b:b6:33:8b:26:a0:f9:
                    6e:fc:45:3d:fa:9d:05:56:86:e3:b9:d3:7a:5e:20:
                    99:d5:47:c7:8d:7f:df:c7:95:39:ee:13:ec:38:25:
                    19:73:c0:5a:82:cd:55:d5:69:cf:b3:47:c2:bb:ae:
                    3f:b7:e1:85:6b:3a:22:7b:6b:01:24:bd:38:cc:9a:
                    b6:80:36:9b:1f:9a:40:a5:55:4f:49:77:38:a1:a5:
                    9c:54:6b:79:ef:f2:ec:d0:31:e9:ef:0b:dc:55:2a:
                    34:5e:2e:bf:68:11:db:b6:45:e0:4b:65:74:94:61:
                    85:12:ef:47:c8:c5:fe:b2:ac:77:c4:73:f0:6c:23:
                    8c:fc:eb:44:c4:a9:13:5e:92:62:49:5d:d4:17:2b:
                    6f:df:e2:b5:91:9e:c4:6f:98:a5:77:70:8b:45:35:
                    e8:5e:a9:1a:c8:90:7b:1f:8d:1f:75:9c:31:1a:61:
                    02:e3:22:8c:7a:94:a9:94:a9:6c:14:c5:cb:57:97:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:78:B4:77:0A:DB:11:0C:29:3C:DC:39:51:B5:98:C2:25:26:96:F7
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068::/32
    Signature Algorithm: sha256WithRSAEncryption
         18:c1:d2:90:47:e9:9e:ea:90:f9:9d:e2:de:5c:49:b9:7a:86:
         29:e5:d9:11:e9:17:2e:ee:79:21:e1:ca:ec:f4:79:59:80:11:
         e1:24:3f:d7:e0:73:0a:15:10:e0:74:50:9f:e8:db:6c:22:c0:
         f7:ed:04:e6:b5:de:18:6e:6e:a6:05:cb:54:c7:66:ea:d2:8e:
         d8:54:b9:69:81:c4:74:c2:c9:84:b1:56:00:dc:00:68:67:14:
         6b:72:11:6d:a5:b8:3b:e8:c8:12:7e:3e:30:f3:fd:11:ae:2b:
         91:c1:f1:a6:cb:15:29:51:4b:c9:8a:62:c6:51:8d:cf:bc:74:
         d1:58:d3:9a:b3:fa:61:f8:39:42:90:05:eb:74:52:52:92:20:
         db:d5:2b:6f:55:41:9a:c5:8b:2a:7f:cc:71:f4:d3:34:90:92:
         a0:80:b4:d2:93:9a:53:80:73:3c:b6:0d:fa:65:17:63:b9:9c:
         bb:da:c9:6a:e1:fb:40:4c:1e:1d:bf:13:95:35:10:21:38:25:
         d0:93:ee:75:66:50:88:78:b0:78:cf:f2:f1:3c:f3:8a:fb:a5:
         d6:6d:4c:09:90:f4:a9:2f:98:e0:29:95:0f:4d:53:ed:21:a0:
         3f:e9:e3:92:28:19:44:b3:cf:b7:2a:45:3c:79:d4:e6:44:5b:
         04:35:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:50:17 2025 by rpki-client