
$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa
File:                     34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          ypjxhm/1i4AV1EGIbT+fixesuS7srk1aNOGHybex7V4=
Subject key identifier:   1A:B7:19:2C:B1:27:8F:91:39:00:28:88:62:60:B0:55:47:85:F1:8B
Certificate issuer:       /CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
Certificate serial:       352137D516F02631621D2756675B5C41BB6DA2F8
Authority key identifier: 48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa
Signing time:             Tue 28 Oct 2025 12:00:04 +0000
ROA not before:           Tue 28 Oct 2025 11:55:04 +0000
ROA not after:            Tue 27 Oct 2026 12:00:04 +0000
asID:                     269194
IP address blocks:        45.238.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:35:40 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:21:37:d5:16:f0:26:31:62:1d:27:56:67:5b:5c:41:bb:6d:a2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48022DC200AC7F7DEFAB830880AA3789A2E0C153
        Validity
            Not Before: Oct 28 11:55:04 2025 GMT
            Not After : Oct 27 12:00:04 2026 GMT
        Subject: CN=1AB7192CB1278F91390028886260B0554785F18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:b0:71:f5:62:9e:35:bf:ed:d0:9f:61:ca:
                    3c:d1:ec:d9:61:79:53:a6:6e:4b:9e:c2:2b:4b:c6:
                    6a:81:ba:61:ae:a9:2f:f0:9b:fa:59:40:9c:4d:fb:
                    81:44:17:05:93:b2:e9:dd:d2:f8:90:3f:76:63:48:
                    18:a2:06:30:bf:7e:38:8c:d9:a2:e2:16:43:c3:d5:
                    2f:0f:8a:cc:04:a7:c5:84:20:b5:35:0c:fd:6a:fa:
                    d5:cd:25:3f:80:05:cb:a3:11:47:5d:cf:f9:09:21:
                    3e:0c:39:c3:80:0d:6e:42:bd:b0:4a:65:06:25:da:
                    64:19:77:62:55:67:60:9a:b9:7d:87:3c:ff:99:b0:
                    1c:9b:c8:ea:36:f7:3d:a0:a2:e6:45:af:33:29:47:
                    ed:96:0f:bd:41:5e:a0:fd:2f:0a:c6:0e:80:75:f6:
                    d5:9c:0e:bc:4d:0c:d2:0e:8e:46:95:4e:68:77:9a:
                    c2:e2:a8:ef:9b:32:64:cc:2a:c1:fb:a8:89:c1:2d:
                    4d:66:6b:85:81:08:aa:77:8d:f1:a2:75:43:b0:a5:
                    75:92:da:83:da:95:83:f0:ea:63:05:5b:3b:5d:66:
                    eb:3d:a7:52:58:ee:de:b0:13:24:ea:24:78:de:04:
                    b5:ff:6e:ee:74:21:47:61:9a:43:f7:d7:b4:36:18:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B7:19:2C:B1:27:8F:91:39:00:28:88:62:60:B0:55:47:85:F1:8B
            X509v3 Authority Key Identifier:
                keyid:48:02:2D:C2:00:AC:7F:7D:EF:AB:83:08:80:AA:37:89:A2:E0:C1:53
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/48022DC200AC7F7DEFAB830880AA3789A2E0C153.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48022DC200AC7F7DEFAB830880AA3789A2E0C153.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.236.0/22
    Signature Algorithm: sha256WithRSAEncryption
         54:19:4a:c0:86:68:4a:39:fe:1f:4e:f7:00:be:ff:da:7c:e8:
         49:8d:74:14:0a:7b:35:ff:35:4c:5e:c9:31:8c:15:75:cd:ff:
         d6:d2:42:5a:af:2a:80:10:5f:9d:af:60:d0:0d:4b:1b:d2:6e:
         25:26:41:76:1c:70:ac:b3:06:d8:3d:93:bb:b1:10:c0:1d:5c:
         a1:14:fe:e2:ff:58:d8:c1:f2:a8:9b:e8:5a:c5:1f:09:38:31:
         99:0d:ac:1f:f0:bb:ea:e4:e5:d3:a1:77:72:31:8f:af:2c:98:
         5f:a4:1e:73:c9:ab:16:d5:f7:1c:61:89:80:32:fd:56:dc:3b:
         a9:0c:90:2c:f2:06:94:aa:62:f2:bd:59:67:4c:70:93:fe:15:
         c7:e9:d6:31:8c:92:61:32:99:95:63:d2:c1:b3:6d:99:06:04:
         8b:31:0c:35:03:a2:de:84:74:bf:e7:29:8a:be:da:06:3a:9a:
         ef:7e:7f:da:12:fb:21:da:d0:5b:fb:ac:45:15:6c:14:29:be:
         12:a7:e0:b5:e2:d9:16:98:ea:4c:a7:fe:99:bf:5e:d6:36:27:
         7c:51:22:0f:d3:23:9f:c2:ee:b0:2f:02:f9:9b:ea:24:56:59:
         7d:0d:9a:d7:2d:9c:57:2f:1c:25:06:58:cd:2f:9f:aa:a2:2a:
         9f:2a:02:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNSE31RbwJjFiHSdWZ1tcQbttovgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgwMjJEQzIwMEFDN0Y3REVGQUI4MzA4ODBBQTM3ODlB
MkUwQzE1MzAeFw0yNTEwMjgxMTU1MDRaFw0yNjEwMjcxMjAwMDRaMDMxMTAvBgNV
BAMTKDFBQjcxOTJDQjEyNzhGOTEzOTAwMjg4ODYyNjBCMDU1NDc4NUYxOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QrBx9WKeNb/t0J9hyjzR7Nlh
eVOmbkuewitLxmqBumGuqS/wm/pZQJxN+4FEFwWTsund0viQP3ZjSBiiBjC/fjiM
2aLiFkPD1S8PiswEp8WEILU1DP1q+tXNJT+ABcujEUddz/kJIT4MOcOADW5CvbBK
ZQYl2mQZd2JVZ2CauX2HPP+ZsBybyOo29z2gouZFrzMpR+2WD71BXqD9LwrGDoB1
9tWcDrxNDNIOjkaVTmh3msLiqO+bMmTMKsH7qInBLU1ma4WBCKp3jfGidUOwpXWS
2oPalYPw6mMFWztdZus9p1JY7t6wEyTqJHjeBLX/bu50IUdhmkP317Q2GDxdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGrcZLLEnj5E5ACiIYmCwVUeF8YswHwYDVR0j
BBgwFoAUSAItwgCsf33vq4MIgKo3iaLgwVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC80ODAyMkRDMjAwQUM3RjdERUZBQjgzMDg4MEFBMzc4OUEyRTBDMTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4MDIyREMyMDBBQzdGN0RF
RkFCODMwODgwQUEzNzg5QTJFMEMxNTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzQzNTJlMzIzMzM4MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7uwwDQYJKoZIhvcNAQELBQADggEBAFQZSsCG
aEo5/h9O9wC+/9p86EmNdBQKezX/NUxeyTGMFXXN/9bSQlqvKoAQX52vYNANSxvS
biUmQXYccKyzBtg9k7uxEMAdXKEU/uL/WNjB8qib6FrFHwk4MZkNrB/wu+rk5dOh
d3Ixj68smF+kHnPJqxbV9xxhiYAy/VbcO6kMkCzyBpSqYvK9WWdMcJP+Fcfp1jGM
kmEymZVj0sGzbZkGBIsxDDUDot6EdL/nKYq+2gY6mu9+f9oS+yHa0Fv7rEUVbBQp
vhKn4LXi2RaY6kyn/pm/XtY2J3xRIg/TI5/C7rAvAvmb6iRWWX0NmtctnFcvHCUG
WM0vn6qiKp8qAqs=
-----END CERTIFICATE-----
Generated at Tue Nov  4 02:00:54 2025 by rpki-client