
$ rpki-client -vvf rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/323830343a323233343a3a2f33322d3334203d3e20323634353937.roa
File:                     323830343a323233343a3a2f33322d3334203d3e20323634353937.roa (raw, json)
Hash identifier:          EC7fdzIID8rZyPtPy9R1cmWe7aUfBJR7NOY1aLcoL5k=
Subject key identifier:   97:32:0F:32:F4:DA:B1:C9:13:D6:E9:57:2D:07:C3:E0:96:02:F4:E5
Certificate issuer:       /CN=A15548E56C7EDE5C824C54387439E16BEA8D7F12
Certificate serial:       5046A4AA2CCCE6026B008E79DB3047C19647A52A
Authority key identifier: A1:55:48:E5:6C:7E:DE:5C:82:4C:54:38:74:39:E1:6B:EA:8D:7F:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/323830343a323233343a3a2f33322d3334203d3e20323634353937.roa
Signing time:             Mon 03 Nov 2025 19:38:33 +0000
ROA not before:           Mon 03 Nov 2025 19:33:33 +0000
ROA not after:            Mon 02 Nov 2026 19:38:33 +0000
asID:                     264597
IP address blocks:        2804:2234::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.crl
                          rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:57:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:46:a4:aa:2c:cc:e6:02:6b:00:8e:79:db:30:47:c1:96:47:a5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15548E56C7EDE5C824C54387439E16BEA8D7F12
        Validity
            Not Before: Nov  3 19:33:33 2025 GMT
            Not After : Nov  2 19:38:33 2026 GMT
        Subject: CN=97320F32F4DAB1C913D6E9572D07C3E09602F4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:b9:4a:19:a2:65:6a:a9:18:d9:5c:2e:ef:
                    56:71:b6:aa:a4:31:bc:23:3e:1c:47:98:83:d2:a3:
                    0b:34:bd:83:28:32:9d:4d:90:40:fe:cd:6f:d7:19:
                    98:0e:aa:5f:46:aa:e9:94:ff:61:55:7b:65:01:79:
                    b8:13:04:e4:03:26:8f:a1:8f:d7:fe:a8:e5:f4:f9:
                    fc:af:d0:a8:c8:3e:3b:ba:86:bf:ba:0a:25:ce:1a:
                    39:42:34:5d:1b:cc:f5:8c:73:0f:bd:89:42:49:a6:
                    67:e5:0b:93:2f:4c:d0:38:71:4b:f0:f5:4f:26:43:
                    02:7e:d1:90:80:9d:0b:41:5a:3e:05:ff:f3:56:55:
                    81:97:94:da:9f:0e:25:55:72:77:83:1e:ec:7a:2c:
                    9c:33:bb:f3:41:be:e5:ea:40:19:9a:a0:98:c1:02:
                    44:ec:dc:75:8e:e1:75:c2:b4:12:3b:fd:0d:f9:ec:
                    54:6c:c0:2c:fb:a6:4d:58:8f:5f:5c:e1:94:73:65:
                    e0:71:c5:2b:fe:f0:c9:76:15:f6:59:41:9a:6a:0c:
                    bc:cc:0f:6b:aa:e2:a3:2b:a4:00:f2:31:b2:cd:fd:
                    15:95:8f:62:f8:e3:ac:a8:8b:d8:6a:0e:d0:a3:04:
                    0f:26:e3:ad:67:2f:21:86:92:ea:b8:de:ec:d4:70:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:32:0F:32:F4:DA:B1:C9:13:D6:E9:57:2D:07:C3:E0:96:02:F4:E5
            X509v3 Authority Key Identifier:
                keyid:A1:55:48:E5:6C:7E:DE:5C:82:4C:54:38:74:39:E1:6B:EA:8D:7F:12
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/323830343a323233343a3a2f33322d3334203d3e20323634353937.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2234::/32
    Signature Algorithm: sha256WithRSAEncryption
         a0:8c:d4:16:43:89:74:14:5b:90:33:65:46:33:42:ad:89:1c:
         e4:42:52:09:72:92:82:c4:1e:3a:95:10:e8:fb:fa:0f:ab:ff:
         3e:fd:6f:9c:3e:65:6f:08:06:72:e2:d5:6e:a8:82:8b:0a:24:
         48:b1:94:1b:d2:1b:4d:c1:1f:f9:52:bc:84:c1:0d:70:26:af:
         71:6d:46:b4:ac:6f:2b:2a:6d:e7:70:77:4a:e4:30:84:7a:0d:
         5f:f5:8c:3f:c6:da:32:ec:f4:dc:79:47:62:b5:fd:61:1c:c9:
         32:bb:3a:06:39:f3:b6:39:ec:a8:f8:64:b6:c4:18:a8:8b:a4:
         41:b0:e7:8f:22:cf:e2:65:df:f1:9f:1d:c7:b7:40:7a:27:ca:
         8b:97:0c:c0:c4:ca:02:1f:2f:fd:52:e7:72:3b:49:54:0f:e9:
         d5:3a:06:5c:6b:b8:35:3e:ea:08:e9:9b:34:86:a2:35:16:b4:
         aa:de:d2:6e:2b:9e:85:7f:ca:02:cd:86:0d:f6:16:4a:5e:bb:
         47:6c:05:33:06:af:c4:54:d8:f2:51:5a:e8:f8:14:ca:f6:64:
         c9:fb:8b:9c:66:55:41:b2:b6:44:91:72:58:a2:e2:7a:d6:30:
         0f:95:7b:a0:30:ee:f2:cb:1d:2e:71:fc:43:9d:02:71:65:92:
         7d:71:8b:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUEakqizM5gJrAI552zBHwZZHpSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE1NTQ4RTU2QzdFREU1QzgyNEM1NDM4NzQzOUUxNkJF
QThEN0YxMjAeFw0yNTExMDMxOTMzMzNaFw0yNjExMDIxOTM4MzNaMDMxMTAvBgNV
BAMTKDk3MzIwRjMyRjREQUIxQzkxM0Q2RTk1NzJEMDdDM0UwOTYwMkY0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxLlKGaJlaqkY2Vwu71Zxtqqk
MbwjPhxHmIPSows0vYMoMp1NkED+zW/XGZgOql9GqumU/2FVe2UBebgTBOQDJo+h
j9f+qOX0+fyv0KjIPju6hr+6CiXOGjlCNF0bzPWMcw+9iUJJpmflC5MvTNA4cUvw
9U8mQwJ+0ZCAnQtBWj4F//NWVYGXlNqfDiVVcneDHux6LJwzu/NBvuXqQBmaoJjB
AkTs3HWO4XXCtBI7/Q357FRswCz7pk1Yj19c4ZRzZeBxxSv+8Ml2FfZZQZpqDLzM
D2uq4qMrpADyMbLN/RWVj2L446yoi9hqDtCjBA8m461nLyGGkuq43uzUcNZnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlzIPMvTasckT1ulXLQfD4JYC9OUwHwYDVR0j
BBgwFoAUoVVI5Wx+3lyCTFQ4dDnha+qNfxIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KTlBpZVpZU2tWaWV6ZmRCUXpCbUZlZkJtckJWaXBZc2E0RnNMcW93cDdo
LzAvQTE1NTQ4RTU2QzdFREU1QzgyNEM1NDM4NzQzOUUxNkJFQThEN0YxMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMTU1NDhFNTZDN0VERTVDODI0
QzU0Mzg3NDM5RTE2QkVBOEQ3RjEyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
TlBpZVpZU2tWaWV6ZmRCUXpCbUZlZkJtckJWaXBZc2E0RnNMcW93cDdoLzAvMzIz
ODMwMzQzYTMyMzIzMzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0MzUz
OTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQiNDANBgkqhkiG9w0BAQsFAAOCAQEAoIzUFkOJdBRb
kDNlRjNCrYkc5EJSCXKSgsQeOpUQ6Pv6D6v/Pv1vnD5lbwgGcuLVbqiCiwokSLGU
G9IbTcEf+VK8hMENcCavcW1GtKxvKypt53B3SuQwhHoNX/WMP8baMuz03HlHYrX9
YRzJMrs6BjnztjnsqPhktsQYqIukQbDnjyLP4mXf8Z8dx7dAeifKi5cMwMTKAh8v
/VLncjtJVA/p1ToGXGu4NT7qCOmbNIaiNRa0qt7SbiuehX/KAs2GDfYWSl67R2wF
MwavxFTY8lFa6PgUyvZkyfuLnGZVQbK2RJFyWKLietYwD5V7oDDu8ssdLnH8Q50C
cWWSfXGLBg==
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:50:12 2025 by rpki-client