
$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132302e302f32342d3234203d3e20323633363335.roa
File:                     3137392e3132352e3132302e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          B5Iiq00Y3fdwHu8vBdjwmOGi8TTiF7P+CUde/JHYp7Q=
Subject key identifier:   1F:4D:4B:E6:C2:30:8D:32:04:C6:B5:5F:02:B7:C9:FC:BF:01:22:EE
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       7291A2AC5CF2E870ADDE2258831D54DDF161906C
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132302e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 29 Oct 2025 23:41:04 +0000
ROA not before:           Wed 29 Oct 2025 23:36:04 +0000
ROA not after:            Wed 28 Oct 2026 23:41:04 +0000
asID:                     263635
IP address blocks:        179.125.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:50:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:91:a2:ac:5c:f2:e8:70:ad:de:22:58:83:1d:54:dd:f1:61:90:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct 29 23:36:04 2025 GMT
            Not After : Oct 28 23:41:04 2026 GMT
        Subject: CN=3082010A0282010100C12BD9E715F923EBD8C964C62E63D695D35CDE5CFCAC9689DE2F89049F4A8EB7721A07AACC1AC498F11B2652D09B04045ED39297CD896F7DE29FE13816649DE138C3F43FD87B43C94F5E0E39F624813BE006613D5B23FA6332FB86B5FF21E3BA671AAFBACD1DF35560D432BB341FC6464E6AC4C918879D04CFADEF47A1B421255D13CA0F777057CF6C92DE8067A040EC0DF2BCE0AA5A1C276E566BD0347DA73207DB1B86C8B2AFF309B1919680286FCF227D19F09C7AFA85665B0E6FA4A9D966E57DAF62C0330FEEF23F6A1036AFA0C8C99C2EA4FE3D9488049018B93476CC9767E934EC4176F16B66334CEA38EBE70FFFDE5B5FA6EC0E2AEC458E6E59F91D330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:d9:e7:15:f9:23:eb:d8:c9:64:c6:2e:63:
                    d6:95:d3:5c:de:5c:fc:ac:96:89:de:2f:89:04:9f:
                    4a:8e:b7:72:1a:07:aa:cc:1a:c4:98:f1:1b:26:52:
                    d0:9b:04:04:5e:d3:92:97:cd:89:6f:7d:e2:9f:e1:
                    38:16:64:9d:e1:38:c3:f4:3f:d8:7b:43:c9:4f:5e:
                    0e:39:f6:24:81:3b:e0:06:61:3d:5b:23:fa:63:32:
                    fb:86:b5:ff:21:e3:ba:67:1a:af:ba:cd:1d:f3:55:
                    60:d4:32:bb:34:1f:c6:46:4e:6a:c4:c9:18:87:9d:
                    04:cf:ad:ef:47:a1:b4:21:25:5d:13:ca:0f:77:70:
                    57:cf:6c:92:de:80:67:a0:40:ec:0d:f2:bc:e0:aa:
                    5a:1c:27:6e:56:6b:d0:34:7d:a7:32:07:db:1b:86:
                    c8:b2:af:f3:09:b1:91:96:80:28:6f:cf:22:7d:19:
                    f0:9c:7a:fa:85:66:5b:0e:6f:a4:a9:d9:66:e5:7d:
                    af:62:c0:33:0f:ee:f2:3f:6a:10:36:af:a0:c8:c9:
                    9c:2e:a4:fe:3d:94:88:04:90:18:b9:34:76:cc:97:
                    67:e9:34:ec:41:76:f1:6b:66:33:4c:ea:38:eb:e7:
                    0f:ff:de:5b:5f:a6:ec:0e:2a:ec:45:8e:6e:59:f9:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:4B:E6:C2:30:8D:32:04:C6:B5:5F:02:B7:C9:FC:BF:01:22:EE
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132302e302f32342d3234203d3e20323633363335.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.120.0/24
    Signature Algorithm: sha256WithRSAEncryption
         b0:7f:3c:c7:e6:ac:73:95:31:25:eb:7e:30:94:85:fe:30:d4:
         7c:7d:80:41:63:1f:70:22:1e:1f:ed:d9:1e:37:1e:a9:b0:13:
         30:83:43:cc:e3:35:4b:f1:be:62:c0:90:6c:a6:31:c8:31:0b:
         2f:c6:9b:cb:8b:08:9d:fb:e7:06:bc:98:9d:4d:31:1c:ff:db:
         f6:75:e6:1f:9f:df:39:0f:d8:b9:76:22:07:21:fb:49:2e:39:
         52:c5:86:49:68:60:b9:dc:7f:62:f8:73:9d:23:42:9a:69:a8:
         24:a7:20:df:85:ba:e2:ad:54:fd:1e:63:11:2b:27:9e:0a:0e:
         48:2d:6f:96:51:5c:14:3a:1d:90:64:49:04:64:3f:43:7c:01:
         5a:ef:bf:7f:a6:a9:48:c5:9e:8c:64:a5:f4:e8:17:58:78:1c:
         c1:53:e5:87:70:b3:29:3f:15:44:1a:32:da:be:b2:4e:bd:a9:
         e1:a2:e1:58:3a:70:ce:1e:16:17:85:10:51:95:d6:fe:83:9e:
         dc:e8:79:33:70:5f:88:4b:e1:70:18:cb:37:2f:ed:e1:b1:0a:
         ab:45:50:74:78:67:4c:57:07:26:aa:97:c5:17:c9:43:51:5f:
         c4:ad:aa:66:c3:fa:6c:b0:d1:34:73:a5:84:39:da:c0:a7:ad:
         bc:37:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:36:39 2025 by rpki-client