
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          bLqJJkasthqOaqT8gpz8G1kBlRUmvgNUOS+ABxSh4FM=
Subject key identifier:   CC:14:DF:98:C8:54:77:B5:0F:D1:75:18:2F:EE:8B:EF:01:92:8C:F5
Certificate issuer:       /CN=9206B911EB707B51B01C514E2075DE8549D4A1EE
Certificate serial:       097CD8DAF144F2D30A1F64291EF48704E5CCA66C
Authority key identifier: 92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time:             Tue 28 Oct 2025 14:14:04 +0000
ROA not before:           Tue 28 Oct 2025 14:09:04 +0000
ROA not after:            Tue 27 Oct 2026 14:14:04 +0000
asID:                     263256
IP address blocks:        170.247.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:03:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:d8:da:f1:44:f2:d3:0a:1f:64:29:1e:f4:87:04:e5:cc:a6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9206B911EB707B51B01C514E2075DE8549D4A1EE
        Validity
            Not Before: Oct 28 14:09:04 2025 GMT
            Not After : Oct 27 14:14:04 2026 GMT
        Subject: CN=CC14DF98C85477B50FD175182FEE8BEF01928CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:7e:c3:07:9a:b1:4c:d0:51:b2:bb:91:2f:
                    77:e7:f0:cf:94:2a:57:c4:50:a1:cf:d2:f3:2f:d9:
                    17:ad:da:77:08:b4:63:b1:b9:c6:ab:fa:1d:f6:c9:
                    a2:63:06:5c:01:2a:af:23:48:3e:e8:71:b7:d8:b0:
                    6f:87:cd:c4:a1:3a:01:f6:94:b1:8f:cd:4c:02:24:
                    9a:fc:34:a5:79:23:cb:30:6e:fe:8a:4e:ef:4f:23:
                    9b:f1:c9:05:cc:a5:86:61:e5:54:49:bf:d7:7c:e6:
                    21:75:ff:5f:44:15:a8:b5:5c:29:15:25:b0:9e:3a:
                    65:12:d9:82:5f:6b:4b:a7:79:c7:cf:ec:49:a2:5d:
                    1e:bc:76:e8:c4:b2:91:a6:13:7a:b5:a4:24:6f:15:
                    0b:4d:c2:f0:d7:7f:de:ca:f5:f9:39:12:65:61:33:
                    27:94:94:2c:65:91:10:44:c0:cc:cc:7f:8b:fd:50:
                    9d:ae:d9:e5:61:99:10:57:57:ec:5c:10:bc:84:87:
                    ba:3e:df:76:25:ca:de:3b:98:86:3f:b3:96:3d:80:
                    83:ba:a7:7e:58:c9:42:8f:e8:00:30:c0:cb:cd:d6:
                    2d:64:52:f4:70:c6:27:e1:8e:f1:39:5a:82:97:7e:
                    02:d0:83:0e:95:44:98:54:ca:26:02:e3:6c:c5:da:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:14:DF:98:C8:54:77:B5:0F:D1:75:18:2F:EE:8B:EF:01:92:8C:F5
            X509v3 Authority Key Identifier:
                keyid:92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22
    Signature Algorithm: sha256WithRSAEncryption
         95:45:dc:de:2f:78:6e:56:bc:e8:d9:f1:7b:27:bc:6d:b6:28:
         06:91:fd:b4:82:b6:48:cc:9b:bd:bf:37:a1:db:61:e8:45:23:
         46:f7:f3:36:d5:3c:05:0d:87:b7:9b:2d:92:76:ba:7d:43:3a:
         67:cd:4f:b3:09:66:e8:37:91:4a:72:1d:8d:e5:d2:e5:87:e5:
         bc:b1:39:27:51:f9:11:e3:cf:ce:02:39:e9:63:28:e4:37:39:
         01:31:c1:0b:09:62:a6:b3:b2:8c:40:47:e5:54:f2:67:ae:ef:
         fd:91:54:08:70:6d:83:96:0a:b6:1a:cb:6b:36:69:fb:c9:bf:
         d5:33:cf:ba:a5:e5:26:fa:8a:29:43:c5:86:0d:97:fb:b9:03:
         c6:5f:0f:e1:65:78:39:6e:ac:2d:75:c6:be:db:59:9b:87:0e:
         a7:61:d9:4b:56:92:44:4c:e8:be:54:e9:00:e2:ef:20:e9:07:
         1b:1a:97:5b:dc:a0:33:3a:d8:7d:f1:02:96:33:ba:f0:dd:51:
         e7:41:dc:5e:a3:3d:ab:44:3a:4a:ec:8e:d1:03:da:6d:fd:1f:
         e4:11:96:d9:50:38:09:84:6e:1d:f0:88:86:5e:42:e0:d1:8a:
         af:ca:01:27:7d:4b:fd:ac:3e:91:f4:82:77:5a:f8:99:4d:aa:
         0e:c0:38:35
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCXzY2vFE8tMKH2QpHvSHBOXMpmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIwNkI5MTFFQjcwN0I1MUIwMUM1MTRFMjA3NURFODU0
OUQ0QTFFRTAeFw0yNTEwMjgxNDA5MDRaFw0yNjEwMjcxNDE0MDRaMDMxMTAvBgNV
BAMTKENDMTRERjk4Qzg1NDc3QjUwRkQxNzUxODJGRUU4QkVGMDE5MjhDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkn7DB5qxTNBRsruRL3fn8M+U
KlfEUKHP0vMv2Ret2ncItGOxucar+h32yaJjBlwBKq8jSD7ocbfYsG+HzcShOgH2
lLGPzUwCJJr8NKV5I8swbv6KTu9PI5vxyQXMpYZh5VRJv9d85iF1/19EFai1XCkV
JbCeOmUS2YJfa0unecfP7EmiXR68dujEspGmE3q1pCRvFQtNwvDXf97K9fk5EmVh
MyeUlCxlkRBEwMzMf4v9UJ2u2eVhmRBXV+xcELyEh7o+33Ylyt47mIY/s5Y9gIO6
p35YyUKP6AAwwMvN1i1kUvRwxifhjvE5WoKXfgLQgw6VRJhUyiYC42zF2m5rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzBTfmMhUd7UP0XUYL+6L7wGSjPUwHwYDVR0j
BBgwFoAUkga5Eetwe1GwHFFOIHXehUnUoe4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC85MjA2QjkxMUVCNzA3QjUxQjAxQzUxNEUyMDc1REU4NTQ5RDRBMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMDZCOTExRUI3MDdCNTFC
MDFDNTE0RTIwNzVERTg1NDlENEExRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzAzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3yDANBgkqhkiG9w0BAQsFAAOCAQEAlUXc
3i94bla86Nnxeye8bbYoBpH9tIK2SMybvb83odth6EUjRvfzNtU8BQ2Ht5stkna6
fUM6Z81Pswlm6DeRSnIdjeXS5YflvLE5J1H5EePPzgI56WMo5Dc5ATHBCwliprOy
jEBH5VTyZ67v/ZFUCHBtg5YKthrLazZp+8m/1TPPuqXlJvqKKUPFhg2X+7kDxl8P
4WV4OW6sLXXGvttZm4cOp2HZS1aSREzovlTpAOLvIOkHGxqXW9ygMzrYffECljO6
8N1R50HcXqM9q0Q6SuyO0QPabf0f5BGW2VA4CYRuHfCIhl5C4NGKr8oBJ31L/aw+
kfSCd1r4mU2qDsA4NQ==
-----END CERTIFICATE-----
Generated at Tue Nov  4 02:03:57 2025 by rpki-client