
$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
File:                     3137372e38362e32342e302f32322d3234203d3e203532353636.roa (raw, json)
Hash identifier:          3eatoWNBAq2cihcmk1ht6Y9NncI8kYOCiFSCYXMoomY=
Subject key identifier:   67:AC:62:8C:FC:7D:1F:12:66:CE:3D:D9:5F:B0:3E:6C:B1:82:BE:46
Certificate issuer:       /CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
Certificate serial:       146F6AE278022B2B0030E6D5FB093D7F14685E90
Authority key identifier: 30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
Signing time:             Tue 28 Oct 2025 19:11:45 +0000
ROA not before:           Tue 28 Oct 2025 19:06:45 +0000
ROA not after:            Tue 27 Oct 2026 19:11:45 +0000
asID:                     52566
IP address blocks:        177.86.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.crl
                          rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 09:33:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6f:6a:e2:78:02:2b:2b:00:30:e6:d5:fb:09:3d:7f:14:68:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
        Validity
            Not Before: Oct 28 19:06:45 2025 GMT
            Not After : Oct 27 19:11:45 2026 GMT
        Subject: CN=67AC628CFC7D1F1266CE3DD95FB03E6CB182BE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:4d:38:a8:c4:d7:c4:74:eb:aa:ee:ac:eb:
                    dc:5a:ee:ea:09:d9:22:93:1f:95:7d:ee:7c:d6:1b:
                    b5:3a:39:24:6f:eb:c6:b5:1b:d8:a8:91:03:56:9b:
                    22:98:11:84:ac:6c:7d:67:2e:12:23:4d:f9:ee:dc:
                    8a:3b:ba:7f:c1:79:d2:c2:78:1e:6b:f7:a9:68:c9:
                    dd:51:b1:ba:58:78:ab:71:9a:7e:47:9d:a4:23:df:
                    ec:e8:5d:59:e2:0b:36:b1:97:a8:b2:0b:84:c7:96:
                    37:0f:24:55:d0:d4:7b:08:cb:42:5b:c7:15:ff:2c:
                    e4:98:df:65:2f:aa:41:f4:df:d2:70:c4:ec:6e:8d:
                    89:c4:16:99:1b:88:25:1b:12:df:9c:df:5c:c7:70:
                    fd:72:4e:5b:1d:4c:01:74:2f:db:c5:37:50:05:69:
                    38:4e:50:f3:e7:0f:c2:dc:67:f2:14:ac:d7:75:77:
                    98:ae:aa:03:c3:92:1b:9c:32:8b:4c:62:b5:a0:c1:
                    f3:cd:27:8c:0c:6e:e0:95:f5:32:8c:ce:d1:c8:e4:
                    a0:13:0e:a3:d2:ef:7a:e2:9e:04:57:10:6a:d3:d1:
                    50:2a:58:54:84:bf:01:d2:77:4c:11:ed:ff:ef:d2:
                    15:78:b6:26:e5:d8:be:b4:5d:d1:2d:46:92:25:ee:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:62:8C:FC:7D:1F:12:66:CE:3D:D9:5F:B0:3E:6C:B1:82:BE:46
            X509v3 Authority Key Identifier:
                keyid:30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.24.0/22
    Signature Algorithm: sha256WithRSAEncryption
         63:01:76:64:40:6b:98:42:50:08:9e:61:66:0a:3b:e0:94:dc:
         11:e8:02:56:07:71:f3:8a:c2:cb:9f:2a:ff:ab:89:f4:59:27:
         c6:41:6a:06:9c:4b:18:ff:d0:be:a9:00:2c:d0:6e:b7:b4:08:
         aa:ad:05:ed:71:a9:80:20:41:3c:ae:f7:05:d5:d1:05:26:67:
         f0:c1:5c:84:b4:aa:57:8b:14:24:59:45:4e:fb:d4:50:24:74:
         3c:0f:e1:0e:05:ed:80:37:a0:cd:2d:ad:a4:6b:7c:64:64:82:
         c3:14:f5:39:c4:80:de:e8:54:a7:9e:25:20:9e:21:43:83:61:
         0f:e0:89:3f:b8:65:2f:43:86:ee:a0:d2:08:45:66:d0:56:9d:
         63:7f:bb:72:c3:60:82:f8:a0:53:4c:8f:f0:6c:73:44:5a:d4:
         d2:48:e3:c9:00:ed:65:c5:d9:c6:ed:4b:7a:ae:f2:95:06:87:
         9d:22:c5:9d:95:db:2f:1c:32:f1:52:6e:1f:bc:7a:88:7f:cd:
         08:4d:50:1e:ea:9f:16:80:e6:bd:8f:4d:2a:f2:a4:98:65:68:
         c4:ba:86:d5:a0:d4:5e:a4:9a:bf:76:1c:df:1f:af:13:9a:70:
         a4:d6:7f:87:71:0d:ae:be:a5:cd:4a:ee:2b:a3:e1:70:4f:e1:
         07:82:47:49
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFG9q4ngCKysAMObV+wk9fxRoXpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzMEFDOUZEOUUyRjJCQzZFMEIzMTJGRDdDNTVFOEVB
QTU4NDI1ODAeFw0yNTEwMjgxOTA2NDVaFw0yNjEwMjcxOTExNDVaMDMxMTAvBgNV
BAMTKDY3QUM2MjhDRkM3RDFGMTI2NkNFM0REOTVGQjAzRTZDQjE4MkJFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDE04qMTXxHTrqu6s69xa7uoJ
2SKTH5V97nzWG7U6OSRv68a1G9iokQNWmyKYEYSsbH1nLhIjTfnu3Io7un/BedLC
eB5r96loyd1RsbpYeKtxmn5HnaQj3+zoXVniCzaxl6iyC4THljcPJFXQ1HsIy0Jb
xxX/LOSY32UvqkH039JwxOxujYnEFpkbiCUbEt+c31zHcP1yTlsdTAF0L9vFN1AF
aThOUPPnD8LcZ/IUrNd1d5iuqgPDkhucMotMYrWgwfPNJ4wMbuCV9TKMztHI5KAT
DqPS73ringRXEGrT0VAqWFSEvwHSd0wR7f/v0hV4tibl2L60XdEtRpIl7uKdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZ6xijPx9HxJmzj3ZX7A+bLGCvkYwHwYDVR0j
BBgwFoAUMDCsn9ni8rxuCzEv18VejqpYQlgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFQ0N0NhVkdGb2FHRkd4cXJXWE5GNjRhVUZpa3dWQWlXU1h6N1lLOTRZ
RHIvMC8zMDMwQUM5RkQ5RTJGMkJDNkUwQjMxMkZEN0M1NUU4RUFBNTg0MjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMzBBQzlGRDlFMkYyQkM2
RTBCMzEyRkQ3QzU1RThFQUE1ODQyNTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUNDdDYVZHRm9hR0ZHeHFyV1hORjY0YVVGaWt3VkFpV1NYejdZSzk0WURyLzAv
MzEzNzM3MmUzODM2MmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM1
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFWGDANBgkqhkiG9w0BAQsFAAOCAQEAYwF2ZEBrmEJQ
CJ5hZgo74JTcEegCVgdx84rCy58q/6uJ9FknxkFqBpxLGP/QvqkALNBut7QIqq0F
7XGpgCBBPK73BdXRBSZn8MFchLSqV4sUJFlFTvvUUCR0PA/hDgXtgDegzS2tpGt8
ZGSCwxT1OcSA3uhUp54lIJ4hQ4NhD+CJP7hlL0OG7qDSCEVm0FadY3+7csNggvig
U0yP8GxzRFrU0kjjyQDtZcXZxu1Leq7ylQaHnSLFnZXbLxwy8VJuH7x6iH/NCE1Q
HuqfFoDmvY9NKvKkmGVoxLqG1aDUXqSav3Yc3x+vE5pwpNZ/h3ENrr6lzUruK6Ph
cE/hB4JHSQ==
-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:11 2025 by rpki-client