
$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa
File:                     3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          r1aU+Gybl9YtApT2Dvny8lponSEwv8t/tLVLgU0wITc=
Subject key identifier:   40:AE:3E:FC:AF:9F:E3:19:FA:A1:85:79:97:2D:77:39:49:9A:18:28
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       1C419888A95BBD84DFF99AA335FAF71964FC6944
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 29 Oct 2025 23:40:28 +0000
ROA not before:           Wed 29 Oct 2025 23:35:28 +0000
ROA not after:            Wed 28 Oct 2026 23:40:28 +0000
asID:                     263635
IP address blocks:        170.254.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:50:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:41:98:88:a9:5b:bd:84:df:f9:9a:a3:35:fa:f7:19:64:fc:69:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct 29 23:35:28 2025 GMT
            Not After : Oct 28 23:40:28 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:b8:48:86:90:e4:da:20:d3:f5:cb:c5:9c:
                    0f:be:77:57:45:68:02:5f:1f:b6:95:c2:23:57:69:
                    a9:6b:d4:70:36:d1:25:8a:7a:df:ba:d7:0d:d5:57:
                    51:79:ec:13:27:c6:a2:4f:7f:d5:bf:86:a0:32:c1:
                    08:b7:f6:c3:0f:d7:ca:21:44:e6:15:47:62:6c:63:
                    03:ab:49:79:0d:f6:4f:43:a6:bd:e1:97:50:95:0d:
                    fd:20:fd:99:8b:b9:b5:73:3a:1b:0b:f4:6e:01:e8:
                    14:88:f6:7c:eb:ea:e7:08:ba:e2:b7:66:f5:20:65:
                    e1:89:03:f7:9e:2b:c3:b3:d7:4a:ac:e2:e9:57:36:
                    a4:f8:1a:a0:05:6d:ab:bf:ab:36:1a:51:6b:b2:0c:
                    7e:5f:54:68:fa:53:e3:42:da:e9:6c:6d:e6:64:e4:
                    1e:64:8c:36:ad:db:11:35:25:b2:1a:f4:1b:57:da:
                    11:d4:76:48:ba:98:4f:8b:87:a0:00:65:f4:cd:73:
                    a3:9b:5f:d3:b1:6f:98:40:cf:97:e7:07:3f:67:88:
                    7d:a8:e1:9d:ca:94:c4:e8:c8:eb:89:f8:12:00:ac:
                    d3:fb:4f:ad:76:c0:66:6b:b1:d7:4d:46:f5:13:21:
                    cf:fa:bd:ce:57:ad:d1:6a:77:d7:a0:c0:fd:1a:00:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AE:3E:FC:AF:9F:E3:19:FA:A1:85:79:97:2D:77:39:49:9A:18:28
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.180.0/24
    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:70:90:9b:e7:88:24:47:c0:6f:3b:19:85:4e:2a:6c:dc:
         9c:cf:2b:5a:14:97:c5:63:11:08:da:b9:93:2a:b9:48:57:1a:
         40:50:af:66:43:94:28:87:ae:94:d9:fd:7c:25:68:f3:a6:8e:
         6f:d3:8a:58:98:7f:5c:32:b7:b9:3f:aa:ad:c6:2b:2b:5a:ec:
         fc:de:df:79:78:8a:96:0a:fe:68:95:08:e1:8d:c5:3f:73:97:
         0b:0d:7e:14:37:6b:eb:18:0d:b1:6f:ad:ed:6a:3a:00:26:39:
         1c:8f:22:09:7e:e5:d1:01:09:8a:1b:f7:94:f3:6c:65:c2:07:
         8e:27:60:20:7a:77:97:dd:37:0d:e3:2b:ce:e9:35:ad:5f:74:
         6e:de:54:bf:23:31:40:2d:24:47:10:93:27:4a:ac:e0:a7:66:
         29:a5:c9:1a:e2:6c:7a:4c:07:69:04:bc:37:40:8c:c9:3c:be:
         bf:7e:2e:15:c2:11:31:42:f2:95:c7:fb:92:eb:96:40:8a:7e:
         56:0a:c8:4b:66:17:c1:f5:12:4e:90:9d:e2:40:94:40:e5:a5:
         a2:95:46:07:33:72:29:73:69:a5:13:73:7a:7f:ae:21:e1:a8:
         f6:26:80:0f:68:2e:3b:82:de:59:c2:49:fd:23:f8:c8:59:b1:
         94:6e:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:36:37 2025 by rpki-client