
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33322d3332203d3e20323633393430.roa (raw, json)
Hash identifier:          tnCaEQ+vxZNJoJLJWd5CgimowfYprg2Cb+Tq4rtSLgc=
Subject key identifier:   D8:12:59:66:86:68:2B:46:AB:78:DF:53:84:25:2E:E4:D5:C7:B9:E2
Certificate issuer:       /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial:       37D7AE14342182EC81FC7DAF7224C30A01ADBED7
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
Signing time:             Wed 01 Oct 2025 17:59:35 +0000
ROA not before:           Wed 01 Oct 2025 17:54:35 +0000
ROA not after:            Wed 30 Sep 2026 17:59:35 +0000
asID:                     263940
IP address blocks:        2804:2818::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:11:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d7:ae:14:34:21:82:ec:81:fc:7d:af:72:24:c3:0a:01:ad:be:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
        Validity
            Not Before: Oct  1 17:54:35 2025 GMT
            Not After : Sep 30 17:59:35 2026 GMT
        Subject: CN=D812596686682B46AB78DF5384252EE4D5C7B9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:3a:86:cb:ad:4a:a7:e4:c8:53:97:57:31:
                    09:ef:1f:a0:62:06:08:d7:d2:ff:74:dd:ba:b1:e2:
                    14:34:9d:e2:94:30:4a:9d:74:82:17:7f:29:5d:57:
                    6f:a8:02:e2:17:f1:e3:b8:ce:64:c1:8e:b1:da:93:
                    25:91:e9:e8:7b:ea:f1:cb:9a:8b:87:c0:61:68:fc:
                    f8:a1:3e:30:27:e3:9e:00:e8:66:ce:ca:64:78:1e:
                    86:ec:fc:61:ae:2a:8c:1d:d6:01:a9:b0:07:1e:cb:
                    e1:a2:e7:4a:50:37:d3:1d:36:8a:62:73:15:ea:7c:
                    49:dc:1d:f3:4e:8d:33:a3:0e:e6:de:0e:ff:2c:fe:
                    75:d1:3a:7a:18:ed:5a:c9:7f:dc:b9:d7:53:04:26:
                    64:b6:1b:77:6c:70:32:56:e2:af:9f:eb:6c:db:22:
                    7c:32:12:51:36:4c:3c:c0:09:48:bc:47:1a:a2:8e:
                    55:f8:c6:cc:c8:ca:ac:9d:e6:42:72:1b:b2:6a:4d:
                    f4:a2:f1:e9:9e:98:ec:12:0e:22:41:cb:72:dd:2c:
                    70:52:16:94:52:6e:f6:de:9a:c5:c7:b5:6c:7e:ea:
                    2a:fd:aa:9d:84:ea:93:81:1b:3b:46:01:4d:88:97:
                    52:6a:e6:f5:e7:4e:70:b1:c8:94:3b:44:14:99:74:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:12:59:66:86:68:2B:46:AB:78:DF:53:84:25:2E:E4:D5:C7:B9:E2
            X509v3 Authority Key Identifier:
                keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/32
    Signature Algorithm: sha256WithRSAEncryption
         44:3c:80:d5:85:7a:82:21:4f:d7:7d:e9:da:b2:a7:66:b7:49:
         f1:37:83:0a:19:b6:33:1e:11:ad:0b:95:5a:36:fc:00:fe:3f:
         95:61:c7:08:49:17:ce:3c:3a:2f:5c:75:6a:2f:ac:7f:9c:79:
         50:92:cc:a4:e0:f4:0e:af:ec:7c:16:d3:58:01:81:d8:ec:85:
         62:e0:c0:e8:1c:7a:ce:05:a5:65:b2:64:73:d9:32:06:7e:21:
         7a:65:e4:10:ce:44:e3:60:ad:77:91:b0:72:79:60:95:7e:69:
         e8:90:4d:a9:b9:bf:57:4b:4a:01:f5:04:d5:b1:35:92:b9:37:
         9b:c0:14:64:8d:7f:8a:13:77:7c:c5:1b:30:bf:21:e7:5e:a7:
         53:ad:18:4f:78:6e:17:48:4c:80:a7:99:1d:2e:cb:9a:f5:dd:
         07:8b:0c:4b:39:be:f8:60:14:e0:c4:4d:73:63:b4:5c:ab:61:
         09:02:7a:94:6d:d0:6e:f0:84:2f:dd:da:0c:1b:5e:0e:16:43:
         2b:ab:64:62:f4:6c:ed:a2:c6:0d:74:64:e9:db:80:c1:31:72:
         26:6b:a3:0f:41:02:50:ea:a7:ac:b5:f1:82:e9:7f:34:fc:b6:
         42:2a:21:7f:76:cd:f6:95:5b:bc:9b:df:54:b0:b9:72:d3:39:
         f1:65:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:57:47 2025 by rpki-client