
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (raw, json)
Hash identifier:          6nFTNuG5EFWl6bFOpqqneFS6n/37QZ9k+qctY+fvJsM=
Subject key identifier:   7A:D9:B5:5F:5A:84:D9:70:1E:60:0C:C3:F8:9D:24:BD:BC:DF:BE:6F
Certificate issuer:       /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
Certificate serial:       2763F8E2844C53F8FA4C36993B6C330D7CE73EA9
Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
Signing time:             Mon 27 Oct 2025 14:50:52 +0000
ROA not before:           Mon 27 Oct 2025 14:45:52 +0000
ROA not after:            Mon 26 Oct 2026 14:50:52 +0000
asID:                     263026
IP address blocks:        2804:a28::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 06:05:37 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:63:f8:e2:84:4c:53:f8:fa:4c:36:99:3b:6c:33:0d:7c:e7:3e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68
        Validity
            Not Before: Oct 27 14:45:52 2025 GMT
            Not After : Oct 26 14:50:52 2026 GMT
        Subject: CN=7AD9B55F5A84D9701E600CC3F89D24BDBCDFBE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:16:f4:76:0c:bd:15:74:ea:fd:87:f1:bf:
                    ff:d5:cc:b9:3b:e8:0f:d8:9a:4e:5b:da:d1:8b:b5:
                    40:d8:29:92:ae:12:74:fe:10:1e:0c:13:e3:83:cd:
                    9f:53:b3:e0:54:b7:08:de:54:64:ca:3f:f1:b4:d0:
                    de:68:f8:60:cf:ab:c5:71:1c:78:a4:41:3d:68:98:
                    a6:d8:de:e4:3c:80:3a:8c:1c:05:df:27:86:a5:27:
                    4b:e8:84:36:09:44:33:cd:09:93:9d:84:e5:85:ef:
                    1b:e2:5d:cd:36:02:f7:3f:a1:f8:89:1a:72:87:bb:
                    b7:74:21:9b:2b:2c:03:17:92:9a:25:33:2b:75:6a:
                    08:0f:16:87:d5:55:ae:8a:64:cd:da:a3:0b:32:50:
                    d6:b6:d3:64:65:19:c1:db:75:76:cc:8f:7c:fd:6c:
                    30:72:3b:d2:66:bc:d6:d7:48:2f:b2:62:01:4d:bd:
                    7d:2e:a2:0d:23:c3:b7:76:3e:1c:cb:36:ea:a2:92:
                    af:91:87:86:8b:29:26:b7:b8:0c:46:68:5c:53:0c:
                    45:00:68:26:5f:46:23:92:f2:8e:aa:43:8a:4e:cc:
                    15:2f:c5:48:eb:55:99:6e:64:9e:59:49:eb:83:49:
                    8f:a9:e7:fd:8a:2e:f2:45:50:2d:60:f5:f1:9b:ac:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D9:B5:5F:5A:84:D9:70:1E:60:0C:C3:F8:9D:24:BD:BC:DF:BE:6F
            X509v3 Authority Key Identifier:
                keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/32
    Signature Algorithm: sha256WithRSAEncryption
         8e:45:09:c0:d6:83:7a:9c:d5:c3:0f:b9:56:0c:e2:a2:e6:40:
         0d:4f:ff:06:f2:67:4b:64:ad:e2:ee:c8:d0:aa:50:51:dc:81:
         b4:8b:d0:30:98:8c:58:2a:b5:d9:8f:0f:d9:ea:ba:2c:d6:c4:
         bb:63:16:dd:d2:ae:a2:a1:67:8c:1e:c8:6c:26:01:a9:a0:40:
         3b:6c:dc:f0:b8:0a:f0:f6:69:44:75:23:2a:e6:42:a9:49:c6:
         a7:c6:d4:31:2f:ff:2d:1d:8f:a9:da:bf:27:bb:24:64:f1:7f:
         f6:86:e4:5a:6c:0c:7a:f0:b5:f5:ee:ef:42:76:69:ec:f1:13:
         fa:6d:32:b6:d0:f6:5d:cc:13:b4:a0:15:83:12:48:cb:8a:b7:
         61:96:7c:60:c8:ed:30:1c:57:13:bb:f9:72:b9:4e:9a:65:9b:
         42:f8:d1:83:55:36:8c:4f:3b:d1:c5:32:99:5f:fc:47:42:a5:
         0d:2d:7b:d6:14:55:db:28:50:d8:ed:4f:96:8c:b0:21:d1:27:
         5c:3e:8e:8d:28:43:29:ec:24:e4:61:87:a8:1b:ae:87:fb:d2:
         e6:aa:49:3d:bd:1f:ae:41:f5:0f:46:44:60:06:a7:8a:b4:8f:
         86:c2:db:aa:c0:a4:24:66:06:a8:93:6a:2b:c8:dd:c2:21:31:
         68:0d:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:37:41 2025 by rpki-client