
$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
File:                     323830343a336361633a3a2f33322d3332203d3e20323636323238.roa (raw, json)
Hash identifier:          LTzZS+zGfk8qK6mI0RyVBIdrrFWI8+nrwOBWej7Y+Zo=
Subject key identifier:   FA:D7:07:7B:82:7C:AA:BE:32:8C:45:4D:68:31:0F:7C:E1:77:A7:88
Certificate issuer:       /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
Certificate serial:       46BAECEAADFF7409945269FBA9FF689D7B5C7AAE
Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
Signing time:             Wed 22 Oct 2025 00:38:33 +0000
ROA not before:           Wed 22 Oct 2025 00:33:33 +0000
ROA not after:            Wed 21 Oct 2026 00:38:33 +0000
asID:                     266228
IP address blocks:        2804:3cac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl
                          rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:27:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ba:ec:ea:ad:ff:74:09:94:52:69:fb:a9:ff:68:9d:7b:5c:7a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
        Validity
            Not Before: Oct 22 00:33:33 2025 GMT
            Not After : Oct 21 00:38:33 2026 GMT
        Subject: CN=FAD7077B827CAABE328C454D68310F7CE177A788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:23:aa:48:83:02:47:04:c4:6e:e2:f2:6b:
                    15:f6:a6:57:83:37:f1:4e:79:87:fb:9c:b2:8b:0e:
                    0e:0a:fa:5d:7d:ec:13:00:a5:1d:a4:f6:a5:ad:0d:
                    c6:da:9a:40:09:2c:0e:85:53:26:71:67:df:08:51:
                    29:31:b6:80:39:d6:9d:0c:dd:7f:35:89:c2:3b:48:
                    9e:b7:58:de:05:a8:19:06:b0:cd:2f:bb:c5:63:ca:
                    b6:78:a2:a7:0c:e8:42:2d:bc:06:c6:6f:57:62:17:
                    65:28:4b:16:fd:bb:ff:f5:53:a0:40:10:bc:7c:62:
                    bd:f8:8a:07:19:0c:4d:97:f7:84:44:fe:d2:8d:d0:
                    1e:03:e4:de:b9:67:5e:38:16:04:1f:40:52:2e:51:
                    a8:5c:21:e8:f3:f9:88:0f:c0:e9:19:1a:a2:08:e4:
                    47:5d:b9:a0:89:47:bd:b9:59:2d:ea:f5:40:06:75:
                    20:b8:0a:bc:bb:f5:51:da:35:22:4b:5e:43:e0:3b:
                    50:76:ed:d1:a2:d6:73:77:88:40:fa:8d:7c:37:8d:
                    f2:04:34:af:c2:db:e2:79:26:6d:6d:52:d5:ec:b6:
                    5d:57:12:87:d8:13:30:a2:29:91:62:ce:79:3b:e0:
                    80:f7:bd:3a:17:c6:a3:4a:41:96:2b:11:69:4c:1c:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:07:7B:82:7C:AA:BE:32:8C:45:4D:68:31:0F:7C:E1:77:A7:88
            X509v3 Authority Key Identifier:
                keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cac::/32
    Signature Algorithm: sha256WithRSAEncryption
         23:63:61:bc:87:1f:01:c1:3c:ac:6b:ff:e6:a6:78:6b:c9:ba:
         11:43:40:d3:60:36:69:b8:28:be:eb:d2:0a:9c:ff:d2:b5:41:
         85:95:a8:f7:cc:0b:18:46:2b:ed:d7:00:08:75:10:10:94:7f:
         94:6c:d0:6e:aa:4e:4f:f7:e4:db:e9:8c:42:02:12:f0:82:d8:
         f7:65:fd:5c:2f:1f:6c:a6:3c:58:1a:30:08:ff:0e:99:7b:56:
         c0:b6:2a:2b:35:d3:a2:92:6a:fa:d2:31:22:8b:bc:a7:3c:f8:
         84:be:fe:d4:20:c9:e7:63:bd:b5:ae:50:93:df:26:d1:a3:59:
         15:93:d2:84:78:e8:fe:c7:c0:45:ed:72:02:bd:4c:eb:70:ce:
         1f:a5:01:52:7e:21:76:a5:7c:39:42:95:95:19:d6:cd:b0:5e:
         7d:af:dc:84:50:b0:09:8e:1f:1a:b3:3f:8c:e5:fc:ae:3f:0c:
         a7:59:74:79:50:a9:57:46:81:b7:7b:38:d6:ff:47:85:b5:7a:
         f4:95:8b:6f:44:e6:1e:6f:56:ef:87:24:5a:38:dc:bd:b1:a5:
         b9:25:87:02:a0:75:bd:63:93:91:e3:32:03:f5:c3:3b:a2:c0:
         f0:49:1e:e0:59:41:1c:85:10:0b:eb:60:3f:a7:4d:e1:02:fb:
         8a:cb:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:44:39 2025 by rpki-client