
$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3332203d3e20323635323537.roa
File:                     3136382e302e3136382e302f32322d3332203d3e20323635323537.roa (raw, json)
Hash identifier:          P5xvh5HwtuNsE33adwnvGsZgdqm4YeQL75wLNQhpu7c=
Subject key identifier:   90:88:D0:89:BC:95:18:6B:BD:70:E1:6B:38:3F:9B:89:A4:E0:93:83
Certificate issuer:       /CN=9115D16733589A392CF57AE845CBFB93A02A8835
Certificate serial:       741E53A294ABB2C41D1D5D2141C276E0960BCCE3
Authority key identifier: 91:15:D1:67:33:58:9A:39:2C:F5:7A:E8:45:CB:FB:93:A0:2A:88:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3332203d3e20323635323537.roa
Signing time:             Thu 23 Oct 2025 18:54:48 +0000
ROA not before:           Thu 23 Oct 2025 18:49:48 +0000
ROA not after:            Thu 22 Oct 2026 18:54:48 +0000
asID:                     265257
IP address blocks:        168.0.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.crl
                          rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 02:02:57 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1e:53:a2:94:ab:b2:c4:1d:1d:5d:21:41:c2:76:e0:96:0b:cc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9115D16733589A392CF57AE845CBFB93A02A8835
        Validity
            Not Before: Oct 23 18:49:48 2025 GMT
            Not After : Oct 22 18:54:48 2026 GMT
        Subject: CN=9088D089BC95186BBD70E16B383F9B89A4E09383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:17:db:48:4b:a6:9e:15:1d:46:77:a5:99:
                    4b:6a:d3:37:51:cc:b1:b6:8f:c2:b1:29:ed:ec:d6:
                    7b:e0:b8:c2:6b:1c:cb:5c:29:d5:44:4f:64:94:f6:
                    35:76:f1:d8:60:a3:ef:a5:e0:f3:c3:c5:1d:f8:ea:
                    ae:5a:93:6b:e6:86:f0:0b:0a:e5:fa:63:eb:75:e5:
                    90:11:fd:88:df:3d:a3:f1:8b:5a:1a:63:42:c2:94:
                    65:43:df:3a:f2:e4:be:55:06:74:49:fd:7f:98:27:
                    bf:09:6f:27:b6:77:3a:ce:03:80:26:07:9b:7a:85:
                    0b:21:3c:e7:9c:11:34:8e:3b:bf:57:fe:fb:a3:5b:
                    af:00:d5:d0:00:62:ca:9b:cb:3f:44:96:d7:d7:f1:
                    3a:89:ae:ea:bd:d4:b7:25:89:f5:a5:17:9a:f4:aa:
                    dc:68:7e:39:99:36:9e:37:10:15:bb:50:d7:2a:24:
                    7a:3c:9a:82:a3:66:82:3d:26:69:43:f5:f7:8a:b5:
                    0a:7b:db:1c:c6:d3:54:ae:de:44:ef:0b:aa:d4:0c:
                    d4:22:42:88:f6:cb:bc:b1:89:f6:27:35:c6:da:f7:
                    31:94:63:43:02:a3:f9:76:b0:c9:48:86:96:89:37:
                    51:c0:e3:f3:03:48:5d:47:ae:99:65:ef:4d:11:09:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:D0:89:BC:95:18:6B:BD:70:E1:6B:38:3F:9B:89:A4:E0:93:83
            X509v3 Authority Key Identifier:
                keyid:91:15:D1:67:33:58:9A:39:2C:F5:7A:E8:45:CB:FB:93:A0:2A:88:35
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/9115D16733589A392CF57AE845CBFB93A02A8835.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9115D16733589A392CF57AE845CBFB93A02A8835.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/3136382e302e3136382e302f32322d3332203d3e20323635323537.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22
    Signature Algorithm: sha256WithRSAEncryption
         6d:18:5c:fa:56:bc:5b:ad:f7:df:8d:a9:af:bf:24:11:b0:d8:
         60:e3:45:46:4f:0c:b8:4f:4c:15:80:83:3c:43:37:4c:93:36:
         1c:70:0f:87:e4:a9:1a:62:04:9d:47:ca:01:e9:cb:cb:93:ac:
         f4:7b:a6:60:51:30:e6:d9:4b:ca:e5:20:03:38:ed:e1:0d:3f:
         e2:0f:9a:6a:a5:7d:3f:79:16:6a:82:f2:5c:2e:db:f0:97:45:
         9f:4e:fe:6a:80:3b:a8:24:05:d6:a5:b1:c8:e2:02:85:a6:0d:
         e2:d8:74:bb:31:79:66:0b:f8:73:a3:e2:5f:bb:89:30:19:a0:
         a5:c2:55:80:04:ee:01:37:af:45:5c:59:f5:d3:79:c7:4d:a9:
         ee:1f:ca:2f:65:b7:86:f6:0e:b5:c7:1d:88:67:e1:06:e5:c8:
         9f:f9:3f:d3:55:71:45:55:25:2e:59:b8:59:29:3f:96:a9:14:
         6c:79:be:9e:fb:11:21:a7:1b:af:cb:8f:8d:30:ad:4c:08:c4:
         75:27:b3:c3:ba:68:a5:aa:19:f2:ea:ac:a7:0c:ff:77:7a:98:
         c7:de:71:c3:3c:f7:6d:cf:9d:b7:96:50:80:ab:4d:fd:26:8e:
         0e:fa:42:4a:d8:83:7a:2f:5e:0f:23:d2:70:e0:92:87:49:c1:
         e4:17:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:13:48 2025 by rpki-client