
$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d313238203d3e20323732363439.roa
File:                     323830343a383638343a3a2f33322d313238203d3e20323732363439.roa (raw, json)
Hash identifier:          kRoJ3oERBW+BLPAE60d9U/Ne7fvM0oXoUeLouOtIrao=
Subject key identifier:   21:C2:A3:49:6B:E0:2F:73:80:0B:56:49:9F:7F:8C:4B:28:CF:0C:2E
Certificate issuer:       /CN=F014953495F46F0A94B3D2DBE6F0CB8C349E598E
Certificate serial:       07D66D8189D601A93B5052C73AF8C8CED40EB891
Authority key identifier: F0:14:95:34:95:F4:6F:0A:94:B3:D2:DB:E6:F0:CB:8C:34:9E:59:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d313238203d3e20323732363439.roa
Signing time:             Wed 29 Oct 2025 02:06:10 +0000
ROA not before:           Wed 29 Oct 2025 02:01:10 +0000
ROA not after:            Wed 28 Oct 2026 02:06:10 +0000
asID:                     272649
IP address blocks:        2804:8684::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.crl
                          rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 03:09:56 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d6:6d:81:89:d6:01:a9:3b:50:52:c7:3a:f8:c8:ce:d4:0e:b8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F014953495F46F0A94B3D2DBE6F0CB8C349E598E
        Validity
            Not Before: Oct 29 02:01:10 2025 GMT
            Not After : Oct 28 02:06:10 2026 GMT
        Subject: CN=21C2A3496BE02F73800B56499F7F8C4B28CF0C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:9b:d7:d5:eb:4d:02:ae:f9:82:38:1a:58:
                    46:a5:6a:a0:41:66:0d:3a:41:9c:eb:ea:96:19:7c:
                    c4:76:39:a6:82:b1:f0:fc:ed:0e:17:03:f9:c7:4f:
                    b0:1b:77:d7:fe:fd:4e:45:3e:04:ed:77:19:0b:78:
                    c1:95:f3:25:a0:d6:62:ae:96:12:84:b2:e0:12:29:
                    2e:ad:e3:2f:39:9d:0e:86:6e:e2:50:04:7b:8b:f9:
                    69:30:8b:64:3d:bd:a0:64:49:2a:ef:a6:af:55:90:
                    02:e5:08:27:ef:0f:0d:2c:43:03:b1:ee:72:a3:03:
                    89:71:55:c6:90:39:73:d4:b8:3b:6f:81:df:c4:eb:
                    48:12:39:6f:cf:12:e4:3b:67:b3:1e:09:0b:a3:27:
                    e3:d3:1c:c9:37:62:f5:87:58:e9:5c:29:f6:78:76:
                    13:5c:69:3c:f0:36:ea:b9:56:c4:0d:58:67:5d:e8:
                    5e:7b:28:96:55:f3:66:ef:c0:c3:6e:4f:63:0b:3b:
                    df:37:ad:06:1b:8d:23:54:79:d3:2b:db:13:6e:6d:
                    0e:df:73:68:a5:02:4a:5a:18:91:1f:77:d3:c8:96:
                    fa:cb:a4:f3:68:8f:80:2c:67:fc:28:bc:2a:e6:de:
                    1c:67:e2:55:44:9f:7f:de:fb:48:00:c6:1e:92:cc:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C2:A3:49:6B:E0:2F:73:80:0B:56:49:9F:7F:8C:4B:28:CF:0C:2E
            X509v3 Authority Key Identifier:
                keyid:F0:14:95:34:95:F4:6F:0A:94:B3:D2:DB:E6:F0:CB:8C:34:9E:59:8E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F014953495F46F0A94B3D2DBE6F0CB8C349E598E.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/323830343a383638343a3a2f33322d313238203d3e20323732363439.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8684::/32
    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:56:a0:fc:26:38:71:57:a1:28:f4:e9:8e:79:0f:bd:eb:
         4a:f7:6a:7d:75:ae:94:6d:01:c0:20:cf:4f:88:65:d6:58:57:
         d9:94:ce:ac:bf:1b:e6:76:90:d7:cc:72:11:0e:ac:06:ad:14:
         b7:2a:7e:d9:a0:26:f9:ee:f2:f0:86:93:14:01:f9:1a:6b:1a:
         b9:de:65:48:6d:e6:9d:da:c2:d4:d3:d4:0f:00:f4:e2:81:10:
         3c:1e:2b:d9:a8:a2:f3:f8:b6:e3:86:f8:40:55:47:c2:48:26:
         f0:d6:6b:ea:b5:20:c2:72:8c:73:6f:47:fc:e2:a4:41:e9:63:
         b6:9e:6d:64:cb:ca:12:ba:11:88:b1:6d:b4:49:b5:47:be:08:
         24:4a:97:27:22:a4:b0:ed:4a:b8:99:1c:32:77:6f:11:58:4d:
         90:7d:31:9d:87:05:11:d8:50:ad:37:71:2a:05:d4:b6:69:11:
         07:57:c6:2b:88:83:49:46:65:bc:4d:12:3b:d2:ca:fb:01:31:
         f0:15:b5:95:c0:27:ca:3a:1e:1e:c0:bb:c9:f7:f4:3f:7c:ce:
         cb:a7:f1:d3:91:ac:0d:7c:69:aa:e3:25:7b:a6:71:dd:06:83:
         6d:56:0a:d0:ba:d2:6b:8f:60:89:aa:75:fc:be:05:27:36:2b:
         82:62:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:04:44 2025 by rpki-client