
$ rpki-client -vvf rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/323830343a363831343a3a2f33322d3438203d3e20323639363638.roa
File:                     323830343a363831343a3a2f33322d3438203d3e20323639363638.roa (raw, json)
Hash identifier:          iQNWk3KGGyE0vgvIRaIexJ0C9qpQvoGyoO6p7uerspw=
Subject key identifier:   BC:6C:D3:E0:48:C1:34:43:73:88:A3:CF:A3:A9:FD:42:7B:8B:9D:21
Certificate issuer:       /CN=19BC8FA43D6FF4FA00E1A93F6B938AFF02446982
Certificate serial:       2DCDFED1F41D9B29FD9AC526730AEB6F02E509D5
Authority key identifier: 19:BC:8F:A4:3D:6F:F4:FA:00:E1:A9:3F:6B:93:8A:FF:02:44:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19BC8FA43D6FF4FA00E1A93F6B938AFF02446982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/323830343a363831343a3a2f33322d3438203d3e20323639363638.roa
Signing time:             Mon 27 Oct 2025 12:13:18 +0000
ROA not before:           Mon 27 Oct 2025 12:08:18 +0000
ROA not after:            Mon 26 Oct 2026 12:13:18 +0000
asID:                     269668
IP address blocks:        2804:6814::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/19BC8FA43D6FF4FA00E1A93F6B938AFF02446982.crl
                          rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/19BC8FA43D6FF4FA00E1A93F6B938AFF02446982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19BC8FA43D6FF4FA00E1A93F6B938AFF02446982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:19:18 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cd:fe:d1:f4:1d:9b:29:fd:9a:c5:26:73:0a:eb:6f:02:e5:09:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BC8FA43D6FF4FA00E1A93F6B938AFF02446982
        Validity
            Not Before: Oct 27 12:08:18 2025 GMT
            Not After : Oct 26 12:13:18 2026 GMT
        Subject: CN=BC6CD3E048C134437388A3CFA3A9FD427B8B9D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:3f:eb:44:58:31:29:c4:66:48:77:49:03:
                    7d:5d:22:c2:e4:c9:64:6c:98:87:4a:fc:79:80:97:
                    1e:ed:ae:81:a7:c1:9d:60:c6:1f:00:b3:41:27:57:
                    92:b5:5a:05:31:e2:8e:71:f7:4a:00:77:38:85:66:
                    e2:e4:ac:d6:c7:37:ac:bc:46:bb:09:d1:74:ef:5b:
                    91:bb:e6:9d:40:3a:20:fa:f7:32:7f:8b:d3:02:cb:
                    81:76:a3:30:6a:b6:6e:31:18:72:d4:f4:ca:5e:b7:
                    13:eb:9a:ba:d4:8f:0c:4b:b0:a9:e2:96:0a:ac:41:
                    81:da:03:0e:51:76:9f:3e:09:b9:2a:61:fc:9a:75:
                    39:ad:b1:55:2f:6e:95:8d:6c:45:62:60:97:2d:59:
                    78:76:28:d1:72:4b:f2:f1:03:03:7a:95:42:f7:cc:
                    f7:8f:c6:40:65:66:5c:43:7e:82:9d:f7:ee:c6:83:
                    ec:be:d7:53:9c:d3:11:79:f0:d5:9b:14:68:18:3b:
                    84:c8:f1:6c:5a:14:26:4b:6b:0d:46:cc:79:e1:d7:
                    59:a4:d2:e7:70:2b:ab:2c:75:93:29:2d:05:5d:e9:
                    33:46:23:dd:b3:bc:f5:7b:99:43:42:49:6e:3d:eb:
                    e0:f4:a5:1a:27:f0:77:c7:46:0a:e8:8c:0e:67:15:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6C:D3:E0:48:C1:34:43:73:88:A3:CF:A3:A9:FD:42:7B:8B:9D:21
            X509v3 Authority Key Identifier:
                keyid:19:BC:8F:A4:3D:6F:F4:FA:00:E1:A9:3F:6B:93:8A:FF:02:44:69:82
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/19BC8FA43D6FF4FA00E1A93F6B938AFF02446982.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19BC8FA43D6FF4FA00E1A93F6B938AFF02446982.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/323830343a363831343a3a2f33322d3438203d3e20323639363638.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6814::/32
    Signature Algorithm: sha256WithRSAEncryption
         1f:62:bc:0b:7c:89:8f:91:9f:f1:49:2e:77:51:2b:48:a9:bc:
         14:20:0d:18:2d:1f:78:3e:bc:a8:be:c0:b9:b3:cb:a7:be:64:
         4a:cc:ca:cb:c0:a4:be:2d:70:d7:d1:50:ab:54:2b:34:86:b6:
         a0:64:22:b5:75:f2:f8:10:4a:c5:f3:f9:b5:b4:2e:f8:35:e2:
         38:f7:22:d2:1d:f5:65:a0:43:42:b2:72:c9:2c:a9:c6:44:22:
         3e:c8:a6:10:ed:91:00:cf:91:7f:f3:d9:fa:4e:30:23:01:8f:
         91:8c:40:e7:7a:3b:5b:55:56:e7:fd:71:bd:81:f7:e7:7c:60:
         be:7b:b2:ee:5a:4e:12:1a:f0:ef:5f:d6:fc:b8:be:8f:cc:4b:
         1a:7c:07:54:5e:3b:39:51:4f:d0:31:d3:65:9f:2b:82:85:7a:
         86:fc:ae:e0:21:1c:5a:22:1c:63:12:6c:00:40:a1:ca:45:4c:
         4e:84:ee:b1:33:77:b2:2c:70:48:25:2c:d6:5c:ab:ac:01:a5:
         2e:88:6c:a6:d8:34:e4:81:a3:7a:7a:22:89:50:0e:ea:d8:c9:
         9f:b8:08:5e:0f:51:79:9b:5d:75:9a:00:dc:87:6a:f1:46:07:
         96:50:93:9b:97:47:78:f0:11:f5:fc:f5:94:15:5a:2d:92:f3:
         ec:75:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:26:46 2025 by rpki-client