
$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32322d3332203d3e20323633333834.roa
File:                     3137372e38372e32382e302f32322d3332203d3e20323633333834.roa (raw, json)
Hash identifier:          2slGM5b9YYDtX/KGjzsQKgLP8u0fMrUO93ql8Gz+VhI=
Subject key identifier:   DF:A6:D6:67:33:C5:48:49:A2:A8:44:AE:89:A1:04:65:9E:34:64:78
Certificate issuer:       /CN=E8368A24073479BF2A14994A136ADFE43F6A2E6D
Certificate serial:       40ADE52A9A2518696C619D0D8BB35FBAEF0EC5FB
Authority key identifier: E8:36:8A:24:07:34:79:BF:2A:14:99:4A:13:6A:DF:E4:3F:6A:2E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32322d3332203d3e20323633333834.roa
Signing time:             Wed 22 Oct 2025 16:35:19 +0000
ROA not before:           Wed 22 Oct 2025 16:30:19 +0000
ROA not after:            Wed 21 Oct 2026 16:35:19 +0000
asID:                     263384
IP address blocks:        177.87.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.crl
                          rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 09:57:17 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ad:e5:2a:9a:25:18:69:6c:61:9d:0d:8b:b3:5f:ba:ef:0e:c5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8368A24073479BF2A14994A136ADFE43F6A2E6D
        Validity
            Not Before: Oct 22 16:30:19 2025 GMT
            Not After : Oct 21 16:35:19 2026 GMT
        Subject: CN=DFA6D66733C54849A2A844AE89A104659E346478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:88:cb:ef:62:a5:65:20:6e:fc:4a:e0:39:
                    f0:4a:75:ff:c4:66:80:55:ca:69:a0:f3:ca:6c:14:
                    eb:cf:69:51:b2:a9:42:8d:da:aa:9f:43:61:5b:3d:
                    37:65:1f:d1:92:9d:f7:ec:9f:a5:9e:3f:b0:6c:4c:
                    80:9f:c9:4d:1c:a5:90:9c:63:3c:98:b7:67:b7:b0:
                    6e:cb:83:ee:9c:bb:fd:5b:af:d3:ec:00:c4:82:d1:
                    ea:35:47:a3:ba:f3:fa:11:a6:fc:a9:38:0b:c4:50:
                    46:0f:36:9c:f6:d1:88:49:18:e8:53:28:a3:2c:2a:
                    ad:e7:4e:22:3b:26:d1:bc:b3:b8:3c:c0:93:df:0d:
                    3e:ca:e0:0b:89:e9:eb:fa:d8:61:1c:7e:f9:2d:63:
                    39:c2:97:89:8b:48:a6:98:d3:8e:4f:ab:80:4d:66:
                    d9:72:22:c7:fa:68:b1:39:75:f1:9f:ce:5d:ba:f9:
                    7c:64:8b:c4:c7:7b:6d:82:c9:29:d2:ba:9f:44:6e:
                    94:6c:22:7b:3c:75:82:46:14:34:47:58:5a:68:48:
                    a0:37:36:fc:d4:b5:6a:79:22:e6:24:44:20:ce:e0:
                    76:6f:ba:8d:c7:81:db:ed:fb:2e:ef:ce:b9:38:3e:
                    06:fa:ec:8a:c0:0a:65:d0:4b:c8:5e:08:41:a8:00:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:D6:67:33:C5:48:49:A2:A8:44:AE:89:A1:04:65:9E:34:64:78
            X509v3 Authority Key Identifier:
                keyid:E8:36:8A:24:07:34:79:BF:2A:14:99:4A:13:6A:DF:E4:3F:6A:2E:6D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32322d3332203d3e20323633333834.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.28.0/22
    Signature Algorithm: sha256WithRSAEncryption
         5b:da:aa:e1:4e:1e:d7:0e:91:ac:ce:72:18:8a:3b:cf:18:4e:
         1e:35:5e:32:d9:8b:de:88:aa:90:a8:a6:ec:d3:d9:50:08:e3:
         6b:8b:34:45:d0:4e:0b:bf:9b:32:2b:a4:b5:ad:13:6b:1b:fd:
         f8:c2:45:f7:ed:ca:49:3f:94:72:78:e1:61:e0:ac:0f:9d:8b:
         11:98:90:20:f5:94:5b:2a:13:57:21:60:fc:21:85:f5:16:09:
         d0:5b:cf:c0:e6:71:b1:95:97:f7:b4:a5:71:3b:dc:d8:f5:1f:
         b0:48:32:8c:c1:07:df:81:f5:12:ea:e2:f3:f4:59:5f:c0:8c:
         32:82:b2:1f:65:db:3a:a6:e3:d7:16:ba:dd:b1:7a:18:3f:08:
         b0:a2:6d:fc:ca:5a:69:b8:8c:fd:ae:41:97:7a:e3:ac:cb:8e:
         ee:10:3d:4c:e1:41:a1:a9:19:83:a0:98:34:51:3f:cb:f8:7c:
         05:98:de:6d:4b:bf:12:1e:6c:0a:e6:05:57:f2:ca:20:ea:3f:
         42:0c:73:b9:b0:61:f0:83:5a:ea:e7:a8:31:2f:8e:15:6c:1d:
         d5:84:fc:0e:a7:34:3f:25:89:33:92:b5:a5:c1:cb:30:32:19:
         67:4d:c8:c0:8c:89:61:99:c4:7f:4e:a0:3e:28:47:96:c9:ce:
         7f:07:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:35:56 2025 by rpki-client