
$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          KxZrsyFn1A2+1mT0mIZl/rIuOrhZMLfiOh7qKMj5Pu0=
Subject key identifier:   46:9D:13:26:25:DF:02:3A:E2:93:41:F0:5B:96:74:04:83:FC:9F:35
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       2BA8E20641E21E00F173E65C45EC37CB237F292D
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:16 +0000
ROA not before:           Thu 23 Oct 2025 14:08:16 +0000
ROA not after:            Thu 22 Oct 2026 14:13:16 +0000
asID:                     262797
IP address blocks:        2804:23c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:e2:06:41:e2:1e:00:f1:73:e6:5c:45:ec:37:cb:23:7f:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:16 2025 GMT
            Not After : Oct 22 14:13:16 2026 GMT
        Subject: CN=469D132625DF023AE29341F05B96740483FC9F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:de:d5:4c:be:15:07:39:74:d7:76:be:8e:
                    82:db:d0:b1:f9:ca:b1:f4:8a:df:16:6e:15:e6:f0:
                    91:bb:ea:44:05:f7:63:02:ee:dd:a2:11:8f:6b:fe:
                    2c:4c:63:da:98:1f:fe:dd:3b:8a:9a:69:36:ad:1c:
                    20:5a:b5:19:78:45:af:fc:76:7d:c8:25:f5:a5:ea:
                    ed:83:aa:8d:5b:72:eb:08:35:e0:67:0d:e9:f1:eb:
                    4b:3f:74:40:84:c1:23:7e:33:b3:df:6e:eb:41:a0:
                    df:9b:54:16:73:1b:79:a9:3a:4d:c6:a4:ea:e2:83:
                    d3:3a:43:23:2b:f6:a3:5f:fa:52:1a:64:ca:c8:09:
                    36:31:fa:1b:d7:5e:86:db:14:98:79:ec:de:e0:05:
                    ea:71:56:88:e6:34:ce:29:a1:48:c1:f2:01:d3:b0:
                    1b:dc:9f:31:49:6b:36:f5:8e:4f:ae:79:4e:9b:85:
                    4d:0a:fb:45:62:7f:5d:d0:c8:80:77:5c:1f:87:85:
                    d2:cb:04:5a:fb:91:6a:78:30:d0:c3:f4:f1:91:08:
                    47:86:b9:f7:04:53:96:0a:c5:d7:c8:3a:83:7f:5b:
                    0d:21:ef:aa:ad:ce:19:8f:ef:23:29:4b:f8:4b:4e:
                    62:9a:cc:a4:e4:dd:3d:a4:ed:cc:07:88:f4:32:83:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:13:26:25:DF:02:3A:E2:93:41:F0:5B:96:74:04:83:FC:9F:35
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a3a2f33362d3336203d3e20323632373937.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c::/36
    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:72:79:cf:4a:6f:b4:c8:e6:91:73:70:a9:05:ea:31:f6:
         fb:21:bd:be:8c:36:ef:d7:96:9c:a4:8c:4f:73:71:bb:45:a5:
         2b:b1:81:7c:16:3d:59:0f:31:25:07:07:9a:88:d8:2a:1c:07:
         d0:7e:a1:1f:30:52:64:b7:a3:c8:81:f6:4c:98:13:ab:a4:36:
         f3:dd:6a:f2:70:60:f8:60:bc:e0:ce:d6:6a:25:c6:dc:30:29:
         4f:9f:f1:82:91:d0:b4:e9:0c:d4:9c:76:f0:7a:71:da:a6:a8:
         88:63:8c:c1:0e:d2:39:bc:a6:b7:fe:bd:a5:65:0d:59:f0:10:
         39:be:e6:eb:ce:55:9a:29:63:01:4c:ec:f8:50:d7:b5:b7:b6:
         22:ec:ca:a8:6f:3a:c5:40:9c:d8:1a:86:ee:6f:bc:1e:ce:52:
         b4:ec:8e:37:66:9a:a5:2a:eb:0a:29:15:ea:d1:89:90:8e:9f:
         1a:92:76:01:53:75:6c:47:8f:48:56:7f:29:bb:70:10:79:6a:
         40:0f:c5:73:22:94:c9:7e:88:06:23:b1:35:16:e1:20:b5:a8:
         69:ed:ab:dd:c7:0a:66:04:b8:24:29:cd:a9:0c:f3:36:4a:87:
         50:c1:c0:97:94:b4:e0:76:52:97:52:c0:65:61:59:4b:34:58:
         72:7c:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:37:41 2025 by rpki-client