
$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa
File:                     323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa (raw, json)
Hash identifier:          UQyUaG/vj6kHrSheNDIyZcmz9FGPXiIRCgvrbgXW9kc=
Subject key identifier:   86:28:A3:55:B3:45:E2:3A:9C:84:74:73:BD:A0:30:17:F4:3A:A4:0D
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       214159D04A866E73A30603911B1025F4267F5E2E
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa
Signing time:             Wed 29 Oct 2025 14:39:17 +0000
ROA not before:           Wed 29 Oct 2025 14:34:17 +0000
ROA not after:            Wed 28 Oct 2026 14:39:17 +0000
asID:                     263457
IP address blocks:        2804:121c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:40:25 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:41:59:d0:4a:86:6e:73:a3:06:03:91:1b:10:25:f4:26:7f:5e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Oct 29 14:34:17 2025 GMT
            Not After : Oct 28 14:39:17 2026 GMT
        Subject: CN=8628A355B345E23A9C847473BDA03017F43AA40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:54:b4:a3:3e:c7:3d:68:c8:12:20:e3:08:
                    81:c3:70:55:1b:c4:f2:66:c3:89:00:2d:93:56:e2:
                    40:2c:6d:b1:d3:66:3d:2f:08:62:20:99:fb:2b:13:
                    cd:fc:6d:d6:47:5b:13:ec:19:c1:1f:0c:38:9c:9a:
                    3b:da:73:b7:50:a3:3d:8f:f4:2d:ce:d4:5f:33:35:
                    0f:ce:89:83:50:23:3c:05:81:a5:d9:05:7d:81:7b:
                    98:22:59:59:4e:2e:a3:76:2b:56:71:88:f5:a0:00:
                    1a:22:e0:03:32:9d:11:56:fd:de:15:39:ba:ca:d0:
                    5d:0d:cb:c8:65:48:da:fa:88:0c:a7:03:bb:5f:1f:
                    ae:c8:04:1a:ab:3f:7c:06:3a:ed:99:c0:65:e0:8c:
                    5b:07:56:1e:e1:ea:75:c2:f6:74:40:e9:7b:21:93:
                    75:49:84:da:ae:9b:b5:54:51:b7:16:9f:0e:dc:61:
                    64:2b:93:91:55:70:36:85:b7:8f:9e:32:50:cd:ab:
                    50:32:cc:32:54:fc:a5:e1:42:29:ee:b7:ee:3e:3d:
                    e4:3c:1d:2c:0d:72:d7:e8:87:40:93:7e:d8:29:d9:
                    f7:c4:c6:46:9e:29:60:6a:52:c1:bb:40:59:d0:a5:
                    9e:0e:ac:60:77:fe:a4:a4:f1:49:8a:71:20:2e:e4:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:28:A3:55:B3:45:E2:3A:9C:84:74:73:BD:A0:30:17:F4:3A:A4:0D
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f33332d3333203d3e20323633343537.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:121c:8000::/33
    Signature Algorithm: sha256WithRSAEncryption
         12:ec:7b:10:2d:75:64:b1:de:73:15:bf:1f:ad:42:1e:de:0b:
         b9:29:c1:4c:43:07:09:43:2c:50:ce:0a:b1:c7:27:b6:34:bc:
         19:92:2c:28:0b:87:70:5b:e6:c3:f0:40:da:85:68:19:66:e2:
         a0:e9:4a:41:ec:f6:3a:e0:62:32:99:f7:f7:68:ad:1e:e0:f0:
         2e:eb:c5:18:6a:ac:a0:61:59:15:60:5a:38:79:6a:ae:06:12:
         e7:e9:0d:6e:c2:7c:82:08:6a:bf:16:5b:e6:0b:f9:92:f7:00:
         3e:e3:e9:fb:29:07:64:51:0f:3c:66:55:4e:a6:cb:a6:4e:d6:
         18:46:38:d3:ce:19:7f:39:41:eb:c4:46:84:fb:45:15:df:a2:
         ef:04:2c:f4:04:aa:f8:84:e5:77:88:95:e6:5d:58:10:97:19:
         7f:42:ee:86:28:94:af:a9:a8:c9:65:e3:84:48:f3:70:38:03:
         e9:0d:b8:13:29:d9:18:16:70:80:46:31:42:95:e6:39:47:65:
         c8:17:85:a4:81:b7:59:08:3c:d3:3b:1e:37:80:4f:8b:c3:42:
         f3:6b:05:25:f5:33:2a:f4:58:94:58:34:bb:f4:9b:3d:68:ea:
         d4:07:01:4f:42:e8:20:79:44:e9:e5:b3:2d:d6:51:5c:fb:f4:
         6f:94:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:22:22 2025 by rpki-client