
$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa (raw, json)
Hash identifier:          RucfoLX6oJGb0R3QwHX77hXM/FM6MzBwmi1KRSTB6Gk=
Subject key identifier:   AF:99:D0:AE:98:E2:85:32:39:0F:E0:57:47:61:6B:48:83:01:5C:DD
Certificate issuer:       /CN=0D05DB8387F5334BB020DA8E16953D4C469BA72B
Certificate serial:       027C8AF4C0D5CA3556A23D9944B7A5BD3CA6BBC0
Authority key identifier: 0D:05:DB:83:87:F5:33:4B:B0:20:DA:8E:16:95:3D:4C:46:9B:A7:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D05DB8387F5334BB020DA8E16953D4C469BA72B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa
Signing time:             Fri 31 Oct 2025 18:14:19 +0000
ROA not before:           Fri 31 Oct 2025 18:09:19 +0000
ROA not after:            Fri 30 Oct 2026 18:14:19 +0000
asID:                     265086
IP address blocks:        170.233.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/0D05DB8387F5334BB020DA8E16953D4C469BA72B.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/0D05DB8387F5334BB020DA8E16953D4C469BA72B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D05DB8387F5334BB020DA8E16953D4C469BA72B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:55:31 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:8a:f4:c0:d5:ca:35:56:a2:3d:99:44:b7:a5:bd:3c:a6:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D05DB8387F5334BB020DA8E16953D4C469BA72B
        Validity
            Not Before: Oct 31 18:09:19 2025 GMT
            Not After : Oct 30 18:14:19 2026 GMT
        Subject: CN=AF99D0AE98E28532390FE05747616B4883015CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:10:29:e2:82:27:b3:66:04:2a:6b:b3:b6:
                    11:94:c9:4e:3c:33:ba:af:ed:f9:ae:79:cf:54:f6:
                    b6:37:9b:66:af:5c:b3:0c:b4:b1:1f:5b:f3:0f:9d:
                    29:cb:70:e8:cc:5c:e3:c6:45:5e:bb:0a:32:23:a5:
                    f8:a4:64:33:78:63:59:35:29:52:c3:ba:d3:60:9e:
                    94:fb:a2:f0:19:05:33:98:d8:a2:41:ba:a8:2b:64:
                    57:49:ef:be:91:06:eb:ad:a2:ba:73:52:6c:31:7f:
                    8d:91:5d:fe:c0:17:34:8e:a1:d6:6f:d0:47:9f:27:
                    16:d8:f0:4b:0a:64:1a:fa:b0:5e:01:75:69:dd:b2:
                    3e:c9:09:58:ce:b6:b8:10:aa:b9:db:db:f8:51:16:
                    9e:74:9b:ea:90:eb:8e:c2:37:c0:00:5a:2b:a9:3c:
                    e5:0e:84:b3:2d:b8:b7:b0:93:ac:98:8e:07:5d:6c:
                    4d:60:13:35:de:79:07:02:65:01:c5:67:fc:ea:99:
                    a1:af:b6:11:0a:a1:6f:61:c3:a8:01:b7:ae:2e:21:
                    47:82:8b:f3:a0:44:99:39:1a:13:13:12:87:e2:9b:
                    84:c1:38:fc:19:62:73:fe:e2:81:9b:0e:1b:83:a4:
                    88:60:0d:ce:47:66:40:f6:ec:43:77:8d:03:29:0a:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:99:D0:AE:98:E2:85:32:39:0F:E0:57:47:61:6B:48:83:01:5C:DD
            X509v3 Authority Key Identifier:
                keyid:0D:05:DB:83:87:F5:33:4B:B0:20:DA:8E:16:95:3D:4C:46:9B:A7:2B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/0D05DB8387F5334BB020DA8E16953D4C469BA72B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D05DB8387F5334BB020DA8E16953D4C469BA72B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3332203d3e20323635303836.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22
    Signature Algorithm: sha256WithRSAEncryption
         a2:2d:cf:35:08:04:c1:e2:5c:72:4b:7f:22:f6:54:da:f3:ee:
         33:07:84:0d:02:29:f8:f1:3b:36:ce:fd:15:d0:4f:88:50:be:
         dc:78:ec:ca:e9:4a:99:3d:e2:00:0a:c2:7f:17:91:de:67:3b:
         4c:99:74:9e:0c:a9:d5:b4:fd:92:ee:68:f6:8e:4f:2d:11:b1:
         e4:7c:bd:94:a9:2e:46:17:60:b3:1e:b5:0c:e8:36:cc:37:85:
         db:c3:96:cc:85:c7:cc:bc:41:f2:ec:d6:ee:73:de:d5:e1:64:
         c9:bd:f8:c8:c6:01:a9:95:d4:0d:32:24:a4:b2:d8:c8:02:27:
         94:66:7b:64:35:55:e2:1c:a2:04:f4:85:6c:04:95:f7:38:d2:
         1f:0c:3a:07:b8:cd:bf:fb:3a:7d:ce:52:bd:78:ff:d6:99:cf:
         96:4a:0c:ce:54:c6:5a:a4:be:9b:c8:f8:57:7b:46:df:89:81:
         1f:e4:5b:ed:0c:02:bf:b2:fc:c0:36:b6:61:1c:94:bf:0c:34:
         11:8d:0a:ce:23:b1:9e:cd:97:29:56:bd:4f:1e:8e:29:55:b3:
         3d:ce:83:e1:45:a9:57:1d:15:b9:7f:af:1a:d0:e1:1a:22:ef:
         28:10:4f:bb:6a:58:97:71:5d:96:c6:fc:6c:ba:53:94:7e:42:
         c2:f3:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:28:32 2025 by rpki-client