
$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132332e302f32342d3234203d3e20323633363335.roa
File:                     3137392e3132352e3132332e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          FZK8PVGOZw4xNdGuuw5SJ1YcT2cv0/kh2czJw3iIZaA=
Subject key identifier:   82:B2:1C:43:20:5F:7E:10:9B:57:7D:A2:6B:BB:EA:FC:9F:F8:6F:E6
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       052DCF8E03E3E189FF4C37482C8E7AF4A7BBCB4B
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132332e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 29 Oct 2025 23:41:50 +0000
ROA not before:           Wed 29 Oct 2025 23:36:50 +0000
ROA not after:            Wed 28 Oct 2026 23:41:50 +0000
asID:                     263635
IP address blocks:        179.125.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:50:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:cf:8e:03:e3:e1:89:ff:4c:37:48:2c:8e:7a:f4:a7:bb:cb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct 29 23:36:50 2025 GMT
            Not After : Oct 28 23:41:50 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:a5:15:35:3e:fd:e5:eb:a6:5c:1c:1f:c4:
                    06:4b:a5:fa:23:e9:f0:bf:b9:81:61:3a:f6:f8:72:
                    3c:27:3f:60:8c:e1:20:9a:99:be:4f:f9:2f:3b:ee:
                    60:47:8a:bd:c9:90:8d:26:9e:85:b8:84:23:5b:36:
                    04:75:9e:56:94:e9:dc:0b:45:97:15:fd:08:e5:02:
                    9c:d1:ae:9a:3d:95:91:dd:fd:c0:d8:d1:e7:6b:a3:
                    7f:58:31:86:e3:99:c9:e6:99:5a:a9:be:eb:f2:4c:
                    0c:5b:09:48:eb:81:9f:33:20:1b:e7:8b:4b:db:86:
                    13:a8:d0:34:41:8a:d3:38:7f:a2:a6:f8:2e:14:02:
                    01:31:6f:d3:9b:9f:90:b2:58:45:40:57:60:d2:e9:
                    37:c9:86:fb:65:3c:71:5e:ad:8f:01:1a:12:c8:29:
                    e6:7d:7b:84:9c:a7:03:ac:37:86:07:01:4f:8b:64:
                    a8:d5:b1:30:f2:4d:31:3b:c4:8f:07:03:56:dc:a1:
                    ec:6b:75:1d:98:ab:33:d7:d1:02:f7:e1:12:37:1c:
                    93:89:f2:12:f3:67:e3:f6:13:f2:b2:ea:5e:42:5b:
                    f6:b2:33:4b:6b:64:a7:d4:de:45:bf:b3:8e:b3:34:
                    71:6a:48:24:a2:14:0d:c7:42:a7:2b:47:87:22:e1:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:1C:43:20:5F:7E:10:9B:57:7D:A2:6B:BB:EA:FC:9F:F8:6F:E6
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132332e302f32342d3234203d3e20323633363335.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.123.0/24
    Signature Algorithm: sha256WithRSAEncryption
         12:0b:69:b3:f1:cd:4b:4b:72:64:f7:4d:d2:8e:0a:8d:d9:c8:
         f0:a5:96:2a:7a:89:2c:c4:f5:c3:32:4b:c4:87:bc:27:75:8a:
         13:a7:6c:71:36:3d:34:50:e0:5e:84:a6:d7:62:28:31:8b:dd:
         48:f7:63:7f:97:c9:38:13:aa:5a:b1:4e:b6:6e:79:eb:aa:a2:
         4f:86:0d:82:7a:19:a4:b3:1e:5f:fc:e5:ce:5c:0e:d4:a9:f5:
         ac:c9:fa:f3:15:57:8a:c0:a9:c7:11:79:10:c3:c3:cd:47:c5:
         b7:c2:4c:2b:cb:06:65:27:ea:1c:ea:84:5f:00:cf:5b:df:41:
         d8:fe:85:eb:c4:85:04:2b:5c:ee:ee:d4:92:50:a7:ec:ea:2e:
         a4:0e:4b:23:dd:17:c8:3d:96:d6:eb:93:c7:a9:b5:d9:43:32:
         dd:66:60:bc:e3:b1:ed:e0:46:95:78:24:b4:b7:20:46:1e:c5:
         af:69:c3:25:1c:5f:3b:3e:f8:6f:8d:09:64:3f:8f:dd:70:20:
         c6:84:ef:62:7e:65:42:cc:77:b9:d3:e2:40:38:4d:f5:66:3a:
         a0:4b:d1:f5:fa:e4:14:06:bc:21:25:ec:51:58:15:aa:5c:14:
         98:88:ac:fc:55:f3:2c:3c:85:51:94:cf:10:31:26:ee:76:46:
         94:0f:f8:ad
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUBS3PjgPj4Yn/TDdILI569Ke7y0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4MTQ4RkMwRkYwMTA0NjYyMDZGMTFENkFDMUM1OEE3
Q0JEM0FFOTAeFw0yNTEwMjkyMzM2NTBaFw0yNjEwMjgyMzQxNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI2OEE1MTUzNTNFRkRFNUVC
QTY1QzFDMUZDNDA2NEJBNUZBMjNFOUYwQkZCOTgxNjEzQUY2Rjg3MjNDMjczRjYw
OENFMTIwOUE5OUJFNEZGOTJGM0JFRTYwNDc4QUJEQzk5MDhEMjY5RTg1Qjg4NDIz
NUIzNjA0NzU5RTU2OTRFOURDMEI0NTk3MTVGRDA4RTUwMjlDRDFBRTlBM0Q5NTkx
RERGREMwRDhEMUU3NkJBMzdGNTgzMTg2RTM5OUM5RTY5OTVBQTlCRUVCRjI0QzBD
NUIwOTQ4RUI4MTlGMzMyMDFCRTc4QjRCREI4NjEzQThEMDM0NDE4QUQzMzg3RkEy
QTZGODJFMTQwMjAxMzE2RkQzOUI5RjkwQjI1ODQ1NDA1NzYwRDJFOTM3Qzk4NkZC
NjUzQzcxNUVBRDhGMDExQTEyQzgyOUU2N0Q3Qjg0OUNBNzAzQUMzNzg2MDcwMTRG
OEI2NEE4RDVCMTMwRjI0RDMxM0JDNDhGMDcwMzU2RENBMUVDNkI3NTFEOThBQjMz
RDdEMTAyRjdFMTEyMzcxQzkzODlGMjEyRjM2N0UzRjYxM0YyQjJFQTVFNDI1QkY2
QjIzMzRCNkI2NEE3RDRERTQ1QkZCMzhFQjMzNDcxNkE0ODI0QTIxNDBEQzc0MkE3
MkI0Nzg3MjJFMUJGODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu2ilFTU+/eXrplwcH8QGS6X6I+nwv7mBYTr2+HI8Jz9gjOEgmpm+
T/kvO+5gR4q9yZCNJp6FuIQjWzYEdZ5WlOncC0WXFf0I5QKc0a6aPZWR3f3A2NHn
a6N/WDGG45nJ5plaqb7r8kwMWwlI64GfMyAb54tL24YTqNA0QYrTOH+ipvguFAIB
MW/Tm5+QslhFQFdg0uk3yYb7ZTxxXq2PARoSyCnmfXuEnKcDrDeGBwFPi2So1bEw
8k0xO8SPBwNW3KHsa3UdmKsz19EC9+ESNxyTifIS82fj9hPysupeQlv2sjNLa2Sn
1N5Fv7OOszRxakgkohQNx0KnK0eHIuG/gQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FIKyHEMgX34Qm1d9omu76vyf+G/mMB8GA1UdIwQYMBaAFDaBSPwP8BBGYgbxHWrB
xYp8vTrpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFr
R2dFcnc4M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0
NjYyMDZGMTFENkFDMUM1OEE3Q0JEM0FFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zNjgxNDhGQzBGRjAxMDQ2NjIwNkYxMUQ2QUMxQzU4QTdDQkQz
QUU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERW16dFpNQ1NMTHBxa0dnRXJ3
ODNvUG9jUU5EZDhkTlFUYXR4NjFacWhEMy8xLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNjMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfXswDQYJKoZIhvcNAQELBQADggEBABILabPxzUtLcmT3TdKOCo3ZyPCllip6
iSzE9cMyS8SHvCd1ihOnbHE2PTRQ4F6EptdiKDGL3Uj3Y3+XyTgTqlqxTrZueeuq
ok+GDYJ6GaSzHl/85c5cDtSp9azJ+vMVV4rAqccReRDDw81HxbfCTCvLBmUn6hzq
hF8Az1vfQdj+hevEhQQrXO7u1JJQp+zqLqQOSyPdF8g9ltbrk8eptdlDMt1mYLzj
se3gRpV4JLS3IEYexa9pwyUcXzs++G+NCWQ/j91wIMaE72J+ZULMd7nT4kA4TfVm
OqBL0fX65BQGvCEl7FFYFapcFJiIrPxV8yw8hVGUzxAxJu52RpQP+K0=
-----END CERTIFICATE-----
Generated at Tue Nov  4 02:36:41 2025 by rpki-client