
$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e37302e302f32342d3234203d3e20323632373937.roa
File:                     3137392e39372e37302e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          pT5XdyVo5Vo02b/iFq2UsnnziTUijg93Mw35SeOs2Cc=
Subject key identifier:   98:BB:66:2E:3F:D5:53:64:C5:8F:52:E8:71:32:7C:CD:4B:7E:9C:FC
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       42EC7E085A90619F34C681E2D1A6973D35F0970D
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e37302e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:13 +0000
ROA not before:           Thu 23 Oct 2025 14:08:13 +0000
ROA not after:            Thu 22 Oct 2026 14:13:13 +0000
asID:                     262797
IP address blocks:        179.97.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ec:7e:08:5a:90:61:9f:34:c6:81:e2:d1:a6:97:3d:35:f0:97:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:13 2025 GMT
            Not After : Oct 22 14:13:13 2026 GMT
        Subject: CN=98BB662E3FD55364C58F52E871327CCD4B7E9CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:78:a9:02:b1:dc:a5:f7:07:ed:50:09:03:16:
                    8d:ff:d5:56:30:4e:45:5d:ad:be:3b:d2:cc:16:5d:
                    d7:bb:0c:57:52:42:b9:4c:73:0e:e9:d0:7c:99:30:
                    f3:7b:f7:dc:2c:38:cb:03:d0:e6:f3:ff:a8:db:06:
                    bc:7d:09:65:b5:ab:09:19:c5:0f:a7:27:7c:7e:95:
                    cd:7e:36:5d:ed:08:e9:0d:e5:b0:ed:39:10:ab:d9:
                    76:8c:38:b2:5f:23:5f:e6:97:07:a5:3b:5f:04:06:
                    66:8d:40:c0:75:9b:84:e5:ed:fb:e6:ef:90:6d:75:
                    3f:bc:59:3a:f3:df:2d:98:ec:66:e5:4f:e5:7c:c0:
                    4c:13:04:4c:b8:c0:04:52:00:a4:65:38:47:6b:45:
                    7f:70:7a:e8:c5:36:e6:c3:20:27:d8:e1:8b:7b:77:
                    f9:71:64:45:ca:47:e5:1e:9f:64:07:0d:9b:80:40:
                    10:d0:de:22:4c:5c:36:9a:6b:bf:51:9a:28:13:80:
                    d8:4d:89:7d:f3:4c:c6:53:20:de:27:02:52:5d:df:
                    64:20:c3:f0:50:1c:48:61:6f:9e:d9:9f:33:ad:55:
                    dd:2e:09:6e:7f:83:12:df:3f:44:e1:9b:8b:5f:db:
                    a3:69:61:69:f1:37:4b:32:b5:5f:0c:32:75:51:d7:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:66:2E:3F:D5:53:64:C5:8F:52:E8:71:32:7C:CD:4B:7E:9C:FC
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e37302e302f32342d3234203d3e20323632373937.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.70.0/24
    Signature Algorithm: sha256WithRSAEncryption
         b4:31:a9:2e:ae:36:1f:1b:91:85:ec:1a:7a:1f:25:96:23:36:
         7f:e0:8c:76:86:67:aa:f7:10:08:18:47:12:d6:39:c1:5b:70:
         60:1a:63:9e:e3:11:02:2c:ee:8d:31:32:cb:96:60:74:03:68:
         34:d2:30:18:0b:c5:6f:89:86:fc:7b:23:f5:e9:4a:50:4a:ae:
         f7:b5:86:57:bd:45:23:c7:2b:65:50:fe:e4:2f:7a:60:01:c8:
         98:9f:01:88:99:01:6d:3d:7e:7c:01:f7:17:c6:f5:8e:91:a4:
         c9:cc:58:7b:12:07:35:57:a4:e0:26:a3:04:3f:94:1a:f7:6b:
         a7:96:2f:f3:b1:0a:60:7f:d1:95:44:f7:ac:15:37:5e:d6:2c:
         8e:e8:b0:c6:28:6f:8a:fe:9d:44:5c:52:75:6a:c6:49:ea:87:
         dc:ef:31:00:e8:ba:93:71:eb:8e:e3:84:1d:31:e7:e8:61:59:
         a9:8d:61:b5:d9:3a:b5:ac:6a:e8:5c:aa:22:e4:fe:d0:6f:87:
         35:af:e0:f3:33:5d:a6:1f:42:fa:1c:01:9e:20:ff:6e:a3:8e:
         1c:0f:68:8a:a1:4e:81:54:a9:06:9e:13:9c:2a:98:d5:ea:2b:
         29:04:df:f2:70:77:fd:46:ae:c0:af:97:67:55:e0:3f:dc:e2:
         66:11:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:35:25 2025 by rpki-client