
$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
File:                     323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (raw, json)
Hash identifier:          kTwsM8Qiq2gQcGD2lqZ52qnePWS12dJFhK/7Q5LGcUg=
Subject key identifier:   EB:22:4F:F3:2F:FB:DE:01:3D:F5:22:A4:89:4C:A0:A0:E5:80:F6:2D
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       5A54827353C8CAE3B116E938BDBE58160954AAFF
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
Signing time:             Wed 22 Oct 2025 17:29:21 +0000
ROA not before:           Wed 22 Oct 2025 17:24:21 +0000
ROA not after:            Wed 21 Oct 2026 17:29:21 +0000
asID:                     263913
IP address blocks:        2804:279c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:46:49 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:54:82:73:53:c8:ca:e3:b1:16:e9:38:bd:be:58:16:09:54:aa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Oct 22 17:24:21 2025 GMT
            Not After : Oct 21 17:29:21 2026 GMT
        Subject: CN=EB224FF32FFBDE013DF522A4894CA0A0E580F62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:29:63:12:6d:ac:c5:d0:c8:eb:bd:f6:e2:0b:
                    4d:15:b6:e1:1b:89:54:02:ed:a4:a2:db:67:9b:94:
                    bb:ba:e9:6c:80:fe:f9:39:38:a3:c0:0d:3f:20:d8:
                    dd:44:79:b6:37:84:33:d6:63:e7:31:34:d3:9f:c0:
                    dc:dd:d0:f3:77:5e:af:c0:f9:f7:a2:de:b4:43:e3:
                    32:13:08:b1:4a:35:13:fb:0c:c4:70:6c:bd:87:a5:
                    b7:12:d3:5f:0a:ca:55:ed:d6:33:45:18:ff:86:4f:
                    89:bd:5c:e0:44:f5:6e:63:76:7a:b7:ed:f5:42:e9:
                    c3:fa:b0:3e:60:e2:6d:5c:d2:d1:32:1c:3d:ca:52:
                    6a:46:94:75:f3:43:fd:4e:0e:2a:3d:c3:25:cb:cb:
                    f8:40:53:2c:e1:71:c6:63:ba:79:73:4c:09:aa:c7:
                    1f:18:33:e5:59:f5:76:31:27:dc:0d:a2:98:4f:7a:
                    ff:56:d8:08:3f:f0:c9:ab:4a:0e:78:20:1a:f2:63:
                    25:7c:ce:40:63:bd:9c:9f:5a:64:bf:07:7e:9e:b2:
                    9e:be:69:0d:da:0e:98:1a:38:77:e9:58:bb:8c:01:
                    9a:92:71:89:8f:5f:d2:e7:47:ec:bb:4a:a2:7e:f6:
                    28:f9:9a:ee:ed:be:7f:3c:ca:b9:8d:09:09:97:a6:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:4F:F3:2F:FB:DE:01:3D:F5:22:A4:89:4C:A0:A0:E5:80:F6:2D
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:279c::/32
    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:d3:d8:5b:1d:c1:80:49:7b:39:c3:b5:04:f6:c0:af:70:
         8d:2e:44:f9:d9:e0:80:b2:1f:9f:d0:e2:c2:b8:f3:8d:65:9b:
         d0:7d:c3:5d:77:16:a3:6e:ca:5a:10:89:fe:54:dd:e6:1e:3b:
         34:20:aa:33:8a:e1:c9:7c:61:2b:dd:81:88:93:6a:01:26:09:
         fb:78:fa:06:18:cf:62:bb:81:9d:5f:ad:e0:18:83:53:d7:dc:
         7f:d7:15:b9:6b:0c:c2:63:06:08:ef:7b:d2:34:98:9f:cd:43:
         88:2b:8b:52:fb:63:74:4b:95:c1:77:fa:ab:11:7b:c4:9c:69:
         bf:bd:45:f6:fb:21:45:be:1f:9e:ab:f0:2d:20:18:d1:2c:74:
         7c:0f:60:94:7b:8b:62:03:43:85:88:bb:bf:f9:2a:a3:08:8e:
         53:76:e0:9e:14:43:c7:c4:d1:55:14:41:24:98:cd:07:1c:e6:
         b7:5a:2d:5a:83:08:52:14:37:30:fd:9b:b5:39:11:6c:60:2a:
         b5:8d:25:23:1e:b3:d9:f1:da:eb:09:80:54:1b:fd:b4:18:83:
         f1:8e:55:ef:f6:bc:06:35:26:80:42:27:cf:a0:18:51:4c:57:
         99:da:a7:8b:8f:34:7c:b4:ae:3c:5c:a1:6c:34:da:7a:6a:31:
         e2:86:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:26:57 2025 by rpki-client