
$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa
File:                     3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          lIp/IaWrvaAD4ixCzjLZDO1cn9WTH+RfB7YZz58VK2E=
Subject key identifier:   9C:6F:38:26:23:6D:1E:4B:FC:4E:DB:56:A8:66:5F:0D:F8:32:09:49
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       7F2834E1809CB82E8F9C96BC624545F872635C76
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 29 Oct 2025 23:41:21 +0000
ROA not before:           Wed 29 Oct 2025 23:36:21 +0000
ROA not after:            Wed 28 Oct 2026 23:41:21 +0000
asID:                     263635
IP address blocks:        179.125.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:50:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:34:e1:80:9c:b8:2e:8f:9c:96:bc:62:45:45:f8:72:63:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct 29 23:36:21 2025 GMT
            Not After : Oct 28 23:41:21 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:f9:76:b7:e7:31:ce:b3:76:17:c5:d6:91:
                    58:fd:c9:fc:c7:5b:1c:ea:43:a4:27:1c:69:08:e0:
                    0b:6e:70:20:a1:e6:76:4c:c4:1a:d7:6c:08:ba:b9:
                    c9:94:41:43:f0:e4:52:bb:2d:d5:e0:6b:c7:e3:71:
                    81:bd:2b:13:c4:d9:00:f5:bf:24:31:3f:06:c2:71:
                    7c:d8:ed:23:89:c3:59:bb:2b:11:38:7b:f5:70:a0:
                    90:78:f1:c7:8e:d5:95:dd:2b:c0:74:8d:9c:a5:e8:
                    c5:68:64:8c:68:50:ae:ec:7a:74:8a:e0:a5:0a:e2:
                    14:1c:81:df:12:b2:d0:83:7f:3c:41:80:c1:b4:6d:
                    29:43:49:3a:47:ba:89:e3:29:84:a8:ff:60:38:81:
                    85:43:84:73:1d:73:6a:ee:e3:a2:80:58:6d:e4:21:
                    db:ae:7d:40:85:a3:79:04:5e:4c:77:9d:c1:72:5e:
                    85:f9:cd:94:34:f9:a4:d5:3b:d3:e1:05:97:78:8c:
                    3f:23:bf:e6:01:16:fb:ab:6d:2b:60:dc:9b:b3:04:
                    9c:a9:2b:9b:0a:48:4c:75:84:68:9d:ee:31:26:c4:
                    5f:0e:e6:e8:3b:fd:03:45:18:34:c1:51:c7:11:37:
                    de:6c:9e:15:44:d3:eb:06:90:87:52:4f:f5:33:28:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6F:38:26:23:6D:1E:4B:FC:4E:DB:56:A8:66:5F:0D:F8:32:09:49
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.121.0/24
    Signature Algorithm: sha256WithRSAEncryption
         44:97:7b:93:92:3f:49:38:ff:97:76:3a:d0:a6:a3:37:3e:11:
         e8:e2:a1:e4:7d:a9:90:ca:d8:ff:0a:ea:cf:e6:c2:69:77:6b:
         c0:2c:32:24:d7:67:01:f8:5c:eb:32:64:f7:f9:52:9c:f3:4f:
         29:bc:5a:96:7e:f3:c2:70:fb:1e:c2:b2:4e:bf:75:c2:9f:cb:
         41:72:7f:1e:e0:55:25:ca:3e:db:2c:50:72:0e:4d:0c:ba:79:
         ba:ae:88:09:ef:bb:79:22:87:e1:19:f0:3d:66:6c:e8:54:a5:
         a7:be:56:5b:9f:17:68:f9:15:43:7f:ed:0e:47:53:49:d7:a6:
         a2:ea:bc:26:90:4f:5e:66:10:b1:01:58:51:db:25:98:62:96:
         11:f9:4e:8d:dd:3d:db:f8:11:8e:a5:ef:90:4c:17:25:a6:3e:
         c2:ef:2f:81:4e:f5:e7:a5:94:cf:97:3b:4b:08:6c:8e:5e:a7:
         ef:7f:90:07:57:d6:f9:20:72:ad:ab:3f:af:1b:8d:58:2c:e5:
         da:ac:81:53:90:8d:83:0a:a4:57:55:03:df:13:13:d7:ca:63:
         72:26:a6:31:eb:a0:6d:5b:91:07:48:c2:46:22:cc:9a:83:12:
         3a:86:0b:37:44:e2:11:2a:9f:8a:d6:00:f1:4a:4a:aa:de:34:
         d9:87:2f:d5
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUfyg04YCcuC6PnJa8YkVF+HJjXHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4MTQ4RkMwRkYwMTA0NjYyMDZGMTFENkFDMUM1OEE3
Q0JEM0FFOTAeFw0yNTEwMjkyMzM2MjFaFw0yNjEwMjgyMzQxMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBBOEY5NzZCN0U3MzFDRUIz
NzYxN0M1RDY5MTU4RkRDOUZDQzc1QjFDRUE0M0E0MjcxQzY5MDhFMDBCNkU3MDIw
QTFFNjc2NENDNDFBRDc2QzA4QkFCOUM5OTQ0MTQzRjBFNDUyQkIyREQ1RTA2QkM3
RTM3MTgxQkQyQjEzQzREOTAwRjVCRjI0MzEzRjA2QzI3MTdDRDhFRDIzODlDMzU5
QkIyQjExMzg3QkY1NzBBMDkwNzhGMUM3OEVENTk1REQyQkMwNzQ4RDlDQTVFOEM1
Njg2NDhDNjg1MEFFRUM3QTc0OEFFMEE1MEFFMjE0MUM4MURGMTJCMkQwODM3RjND
NDE4MEMxQjQ2RDI5NDM0OTNBNDdCQTg5RTMyOTg0QThGRjYwMzg4MTg1NDM4NDcz
MUQ3MzZBRUVFM0EyODA1ODZERTQyMURCQUU3RDQwODVBMzc5MDQ1RTRDNzc5REMx
NzI1RTg1RjlDRDk0MzRGOUE0RDUzQkQzRTEwNTk3Nzg4QzNGMjNCRkU2MDExNkZC
QUI2RDJCNjBEQzlCQjMwNDlDQTkyQjlCMEE0ODRDNzU4NDY4OURFRTMxMjZDNDVG
MEVFNkU4M0JGRDAzNDUxODM0QzE1MUM3MTEzN0RFNkM5RTE1NDREM0VCMDY5MDg3
NTI0RkY1MzMyOEFBNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsKj5drfnMc6zdhfF1pFY/cn8x1sc6kOkJxxpCOALbnAgoeZ2TMQa
12wIurnJlEFD8ORSuy3V4GvH43GBvSsTxNkA9b8kMT8GwnF82O0jicNZuysROHv1
cKCQePHHjtWV3SvAdI2cpejFaGSMaFCu7Hp0iuClCuIUHIHfErLQg388QYDBtG0p
Q0k6R7qJ4ymEqP9gOIGFQ4RzHXNq7uOigFht5CHbrn1AhaN5BF5Md53Bcl6F+c2U
NPmk1TvT4QWXeIw/I7/mARb7q20rYNybswScqSubCkhMdYRone4xJsRfDuboO/0D
RRg0wVHHETfebJ4VRNPrBpCHUk/1MyiqcQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJxvOCYjbR5L/E7bVqhmXw34MglJMB8GA1UdIwQYMBaAFDaBSPwP8BBGYgbxHWrB
xYp8vTrpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFr
R2dFcnc4M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0
NjYyMDZGMTFENkFDMUM1OEE3Q0JEM0FFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zNjgxNDhGQzBGRjAxMDQ2NjIwNkYxMUQ2QUMxQzU4QTdDQkQz
QUU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERW16dFpNQ1NMTHBxa0dnRXJ3
ODNvUG9jUU5EZDhkTlFUYXR4NjFacWhEMy8xLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNjMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfXkwDQYJKoZIhvcNAQELBQADggEBAESXe5OSP0k4/5d2OtCmozc+EejioeR9
qZDK2P8K6s/mwml3a8AsMiTXZwH4XOsyZPf5UpzzTym8WpZ+88Jw+x7Csk6/dcKf
y0Fyfx7gVSXKPtssUHIOTQy6ebquiAnvu3kih+EZ8D1mbOhUpae+VlufF2j5FUN/
7Q5HU0nXpqLqvCaQT15mELEBWFHbJZhilhH5To3dPdv4EY6l75BMFyWmPsLvL4FO
9eellM+XO0sIbI5ep+9/kAdX1vkgcq2rP68bjVgs5dqsgVOQjYMKpFdVA98TE9fK
Y3ImpjHroG1bkQdIwkYizJqDEjqGCzdE4hEqn4rWAPFKSqreNNmHL9U=
-----END CERTIFICATE-----
Generated at Tue Nov  4 02:36:37 2025 by rpki-client