
$ rpki-client -vvf rpki-repo.registro.br/repo/CygdLfyuThBpEQwpgei6jC8TpApGpki6QiH8wFQVzges/0/34352e3138362e3234382e302f32322d3332203d3e20323639343535.roa
File:                     34352e3138362e3234382e302f32322d3332203d3e20323639343535.roa (raw, json)
Hash identifier:          bK+Q6ZjqJFD11zNa0ww5bR7XXEGJ5m45oYz8ta+op34=
Subject key identifier:   50:35:E9:18:F3:23:97:C2:26:D0:36:B8:42:3F:71:79:9C:4C:40:3C
Certificate issuer:       /CN=6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65
Certificate serial:       71ADFEE09214640F2E8A01AC7AD20F55CA178712
Authority key identifier: 6A:6C:7E:CF:61:9D:9D:C2:6E:0F:CC:AB:03:CB:E3:85:CA:4B:2C:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CygdLfyuThBpEQwpgei6jC8TpApGpki6QiH8wFQVzges/0/34352e3138362e3234382e302f32322d3332203d3e20323639343535.roa
Signing time:             Tue 21 Oct 2025 00:56:33 +0000
ROA not before:           Tue 21 Oct 2025 00:51:33 +0000
ROA not after:            Tue 20 Oct 2026 00:56:33 +0000
asID:                     269455
IP address blocks:        45.186.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CygdLfyuThBpEQwpgei6jC8TpApGpki6QiH8wFQVzges/0/6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65.crl
                          rsync://rpki-repo.registro.br/repo/CygdLfyuThBpEQwpgei6jC8TpApGpki6QiH8wFQVzges/0/6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:44:11 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ad:fe:e0:92:14:64:0f:2e:8a:01:ac:7a:d2:0f:55:ca:17:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65
        Validity
            Not Before: Oct 21 00:51:33 2025 GMT
            Not After : Oct 20 00:56:33 2026 GMT
        Subject: CN=5035E918F32397C226D036B8423F71799C4C403C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:39:2c:79:b9:ea:07:6b:e8:f5:26:ba:f6:
                    e4:e6:5f:64:6f:ec:94:b6:c7:d7:86:70:97:fb:5f:
                    40:fa:1b:43:1b:39:ef:94:a6:17:0c:f6:d8:7a:b9:
                    4f:df:80:13:21:aa:b8:2e:cb:c2:b8:f4:a6:92:05:
                    9c:c9:e3:26:69:2c:0e:25:25:a5:bc:67:37:69:86:
                    fb:c1:87:9a:5a:c1:86:e9:3c:89:a3:ed:f2:f7:50:
                    67:8a:5e:e2:30:69:2e:ab:9d:22:42:b8:e7:67:9f:
                    ea:c0:66:16:de:dd:a2:f2:13:60:f7:30:11:80:b1:
                    23:46:73:a2:ac:f6:af:3c:dd:a9:27:96:7a:9e:70:
                    65:ad:26:13:da:af:0b:72:c0:30:45:9a:24:36:aa:
                    51:75:2b:49:f7:b5:c7:64:45:88:1a:cb:a1:42:e7:
                    24:cc:7e:ea:34:f2:4e:85:83:22:3d:43:2f:9a:c1:
                    84:6b:1f:fe:6b:ce:fe:0b:e2:ed:0a:18:1d:68:2b:
                    62:0c:3f:6e:e6:fa:48:3a:45:2e:06:9c:ec:27:2d:
                    ca:7a:3a:ea:05:a5:19:a1:1c:df:83:ae:3c:52:1e:
                    30:4e:1d:6d:47:31:6e:08:79:06:60:ff:99:b3:ba:
                    9f:4e:6e:a3:00:2c:45:7f:cf:a3:cd:2c:01:60:5a:
                    38:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:E9:18:F3:23:97:C2:26:D0:36:B8:42:3F:71:79:9C:4C:40:3C
            X509v3 Authority Key Identifier:
                keyid:6A:6C:7E:CF:61:9D:9D:C2:6E:0F:CC:AB:03:CB:E3:85:CA:4B:2C:65
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CygdLfyuThBpEQwpgei6jC8TpApGpki6QiH8wFQVzges/0/6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A6C7ECF619D9DC26E0FCCAB03CBE385CA4B2C65.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CygdLfyuThBpEQwpgei6jC8TpApGpki6QiH8wFQVzges/0/34352e3138362e3234382e302f32322d3332203d3e20323639343535.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.248.0/22
    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:fc:2a:0f:a7:11:05:b0:5c:b1:6d:ad:fa:ca:82:39:67:
         45:5c:47:8f:d9:4e:2d:4b:cc:01:4f:f3:51:7a:de:58:bb:be:
         18:ef:45:2b:fb:5e:b6:4a:76:9b:0c:66:4f:30:8c:52:b0:0d:
         84:60:d8:1f:77:46:9f:8c:6e:ec:61:93:7f:e4:e7:60:8d:71:
         51:76:23:4c:54:9e:e7:4b:70:ee:ec:57:c5:d7:c9:4e:20:ab:
         5e:bb:59:9f:0c:d3:38:60:78:95:f9:1c:f5:d4:b6:6e:d0:13:
         a5:10:0e:d1:22:db:e6:6d:1f:ac:5c:a3:b8:91:e2:11:3c:52:
         0f:df:18:9d:6c:11:b0:dc:7c:56:e0:12:0b:e2:c6:a5:0d:f2:
         ad:00:50:33:18:19:a8:4a:eb:12:ef:d4:ad:35:ba:94:8c:f8:
         3c:21:7d:f7:60:7b:80:94:08:9c:fb:d2:b7:3f:5d:04:e8:81:
         3e:b8:43:5e:0f:19:a8:91:0a:6b:99:d1:05:09:62:f4:fe:d5:
         ce:c0:9a:b9:c9:77:b3:e4:cc:c6:af:74:2c:9f:bd:6b:2f:8c:
         90:89:78:d2:d7:a3:ab:84:0d:0c:86:fe:83:00:ca:11:4e:7d:
         c4:7e:71:ff:40:93:d0:d0:2b:bc:84:e5:8c:ab:26:39:88:fb:
         14:74:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:25:17 2025 by rpki-client