
$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e302e302f32302d3230203d3e20323632373937.roa
File:                     3138362e3233372e302e302f32302d3230203d3e20323632373937.roa (raw, json)
Hash identifier:          g9Ev9O/BdusZerLRA4YQf8iDhyJj6Lg+FubgaqO9uP4=
Subject key identifier:   78:83:1B:7D:DE:F9:63:DE:A5:B4:5F:66:37:D4:73:88:E3:37:F9:5D
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       5D357B20A20E1A7A517156B99C563B08108DC3D7
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e302e302f32302d3230203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:18 +0000
ROA not before:           Thu 23 Oct 2025 14:08:18 +0000
ROA not after:            Thu 22 Oct 2026 14:13:18 +0000
asID:                     262797
IP address blocks:        186.237.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:35:7b:20:a2:0e:1a:7a:51:71:56:b9:9c:56:3b:08:10:8d:c3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:18 2025 GMT
            Not After : Oct 22 14:13:18 2026 GMT
        Subject: CN=78831B7DDEF963DEA5B45F6637D47388E337F95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0f:6a:16:00:a5:9d:4c:76:44:b5:69:1b:99:
                    25:fa:52:88:e8:14:b2:7e:ab:e8:e6:75:83:18:6e:
                    c0:66:ba:38:b0:a6:a1:39:01:65:ca:de:bb:1d:cc:
                    f3:39:45:f3:37:bc:fb:c3:b7:ed:b6:47:ed:62:e8:
                    98:54:54:9e:33:36:4f:47:46:26:98:49:79:20:75:
                    dd:7e:1c:a2:79:8f:8d:e8:dd:81:b8:d4:c4:87:33:
                    dc:86:f4:ca:ce:5a:f5:3d:28:0c:ed:2a:2e:48:d1:
                    17:d4:13:20:83:6b:a2:e8:49:ed:46:93:4a:b5:da:
                    f2:62:31:09:96:e5:dd:42:93:4f:62:72:f2:a6:ee:
                    71:aa:f0:58:cf:af:d6:a5:6d:39:a2:ba:9d:0f:a9:
                    59:8d:0e:4b:d2:e7:64:05:ce:8e:d2:c6:64:36:cd:
                    26:7f:58:dc:0b:2f:d8:7a:27:f5:f6:d3:b7:1d:09:
                    ad:cd:c8:23:90:eb:47:86:a4:b8:75:af:cf:d3:83:
                    6b:4e:bf:69:29:c0:c7:71:4b:67:cc:ee:93:fa:ca:
                    6b:90:99:1f:57:bc:5b:74:61:10:51:74:09:8b:74:
                    94:15:96:5d:3d:88:c2:bc:cc:6b:23:c6:40:69:68:
                    2b:36:a7:2a:d1:01:81:2d:05:7e:58:f5:3a:da:49:
                    08:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:1B:7D:DE:F9:63:DE:A5:B4:5F:66:37:D4:73:88:E3:37:F9:5D
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3138362e3233372e302e302f32302d3230203d3e20323632373937.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.0.0/20
    Signature Algorithm: sha256WithRSAEncryption
         be:d4:9a:36:6f:a1:b5:62:0d:05:1b:ae:aa:b3:86:38:d6:ef:
         a1:ae:dc:92:01:59:ff:2f:61:c3:57:62:34:9f:1f:c7:f3:67:
         97:5a:b1:38:d3:d3:10:79:8d:65:b4:a9:30:6d:50:5c:0a:5d:
         d0:de:fe:b1:a9:05:18:84:d3:0f:60:f2:a5:81:08:51:2b:9a:
         ac:98:58:a9:9b:4f:9c:3b:71:a3:34:d8:79:c8:c2:b4:9b:1d:
         87:0a:72:34:b3:fd:35:27:75:56:d7:6d:08:0f:92:82:db:64:
         38:fb:b7:c0:ea:10:59:92:c5:1b:d1:1a:c6:dc:66:8d:4b:2a:
         8b:05:8f:6e:18:22:49:3a:1d:c9:68:dd:38:3d:84:72:f9:d5:
         f2:a6:cc:10:35:c5:07:88:42:2e:c8:cc:d7:d5:6b:3d:0f:1d:
         eb:6b:ed:83:41:a5:2f:50:2b:36:ae:98:a5:82:88:87:f4:80:
         0b:61:37:53:68:d5:02:35:ca:b8:1d:f7:f6:b1:25:1d:f1:6d:
         f6:c7:7d:56:ea:21:f6:51:7f:16:6e:3f:77:4d:49:87:f2:c4:
         34:e4:f6:ca:86:21:4c:f7:48:ad:7c:85:90:00:07:7e:59:48:
         c6:a3:07:03:b0:74:7e:ae:ee:24:94:2d:e1:13:46:3b:5e:21:
         8b:05:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:38:44 2025 by rpki-client