$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53059.roa File: AS53059.roa (raw, json) Hash identifier: s+LmQbhopeP1NjqUoYdepm9wJK8I7ZUZSHAnD+AnSHE= Subject key identifier: 3D:EA:CB:31:D0:24:5E:3D:8B:86:56:D3:2F:D8:D9:C6:B0:5A:7B:C6 Certificate issuer: /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E Certificate serial: 349519E18179DF0C95DD916B3D4BF703D1808561 Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53059.roa Signing time: Tue 21 Oct 2025 20:06:42 +0000 ROA not before: Tue 21 Oct 2025 20:01:42 +0000 ROA not after: Tue 20 Oct 2026 20:06:42 +0000 asID: 53059 IP address blocks: 138.0.100.0/22 maxlen: 22 168.228.68.0/22 maxlen: 22 177.137.193.0/24 maxlen: 24 177.137.194.0/24 maxlen: 24 177.137.195.0/24 maxlen: 24 177.137.196.0/24 maxlen: 24 177.137.197.0/24 maxlen: 24 177.137.198.0/24 maxlen: 24 177.137.199.0/24 maxlen: 24 177.137.200.0/24 maxlen: 24 177.137.201.0/24 maxlen: 24 177.137.202.0/24 maxlen: 24 177.137.203.0/24 maxlen: 24 177.137.204.0/24 maxlen: 24 177.137.205.0/24 maxlen: 24 177.137.206.0/24 maxlen: 24 177.137.207.0/24 maxlen: 24 179.96.240.0/20 maxlen: 20 186.193.96.0/20 maxlen: 20 186.208.213.0/24 maxlen: 24 186.208.214.0/24 maxlen: 24 186.208.215.0/24 maxlen: 24 186.251.113.0/24 maxlen: 24 186.251.116.0/24 maxlen: 24 186.251.117.0/24 maxlen: 24 187.49.192.0/20 maxlen: 20 2804:2140:100c::/48 maxlen: 48 2804:2140:1016::/48 maxlen: 48 2804:2140:1020::/46 maxlen: 46 2804:2140:1801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:95:19:e1:81:79:df:0c:95:dd:91:6b:3d:4b:f7:03:d1:80:85:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E Validity Not Before: Oct 21 20:01:42 2025 GMT Not After : Oct 20 20:06:42 2026 GMT Subject: CN=3DEACB31D0245E3D8B8656D32FD8D9C6B05A7BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:8e:3d:6b:11:f3:6f:2c:4f:95:9e:b0:40: 9f:7c:6c:77:cd:8a:5a:57:0b:67:32:7b:ca:e9:b8: 2e:50:e2:6e:c0:cf:92:97:7c:7b:14:ee:fa:d2:96: 73:2b:ef:9f:9b:3a:30:89:57:51:cc:1c:bf:fd:48: 6b:91:72:c8:3a:6b:4f:30:87:ca:10:aa:18:85:de: 22:3c:9f:5a:e6:75:d5:e0:c0:19:91:20:26:20:4d: 74:25:f3:28:d4:fa:92:20:8c:a6:fa:02:92:4d:55: d0:c7:c0:a2:9e:b1:02:c5:0d:72:b8:18:96:a8:a7: 6c:86:5f:1a:f0:56:8f:5a:67:33:2c:00:e0:03:2f: c8:2a:e1:7e:1b:b6:dd:ac:1a:f6:c8:82:59:c9:99: a2:a0:05:c4:34:e2:39:47:11:ca:d0:0c:79:36:2a: 01:59:0e:e1:31:23:bb:29:a1:e3:5d:fc:02:fa:30: 41:ca:1c:b1:14:b4:b0:da:12:42:a3:15:56:51:e1: c3:ef:f3:f2:a2:44:ee:c5:ec:94:f4:6d:d2:d3:6c: 7e:4c:be:08:7e:f1:b4:4b:ed:26:2b:f9:d3:1d:3b: dd:28:e3:0d:1a:28:cb:43:f1:5f:a8:c8:ec:86:2a: bf:dc:a2:1e:6b:6e:f8:f3:12:35:67:97:37:62:db: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:CB:31:D0:24:5E:3D:8B:86:56:D3:2F:D8:D9:C6:B0:5A:7B:C6 X509v3 Authority Key Identifier: keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.100.0/22 168.228.68.0/22 177.137.193.0-177.137.207.255 179.96.240.0/20 186.193.96.0/20 186.208.213.0-186.208.215.255 186.251.113.0/24 186.251.116.0/23 187.49.192.0/20 IPv6: 2804:2140:100c::/48 2804:2140:1016::/48 2804:2140:1020::/46 2804:2140:1801::/48 Signature Algorithm: sha256WithRSAEncryption 38:81:12:86:00:28:26:8f:78:a1:af:a2:79:ff:0b:93:6d:35: 82:cf:3c:89:75:36:ec:d3:74:8f:5d:bf:09:e5:f2:26:80:42: e2:25:1a:a6:aa:9a:2a:e0:3b:c5:ab:f1:87:1e:cd:18:ad:d6: f4:c8:a7:8a:06:6f:5a:08:e5:23:53:13:ce:49:df:d8:37:6d: 37:7a:36:b5:79:c1:26:7c:91:b2:0b:f9:d7:a1:d3:3f:47:d0: d1:5e:c8:f9:70:26:ae:f6:93:a7:80:8e:e3:44:97:50:3f:83: aa:a3:81:58:0d:0d:51:d5:0c:3a:ea:44:59:aa:46:2a:1c:f8: 4a:96:82:9f:53:c9:fe:9b:18:8e:55:60:9a:a9:cf:b0:d5:11: e5:9f:df:f9:8c:90:04:ce:d7:19:f4:15:c5:9d:61:69:bd:d5: 6c:88:82:2d:0d:39:d1:6c:6a:38:82:b6:e9:5e:91:34:8b:7e: 15:be:46:61:62:90:dd:da:b0:c6:ab:b8:be:c9:ea:9c:f0:1f: 4b:54:d2:92:68:cf:b6:8f:ca:d2:f5:70:87:89:ee:8b:a6:82: a4:6b:3f:a8:a7:e6:8b:95:12:fd:53:b4:cb:83:d9:24:9c:53: d7:b5:59:2f:ee:65:1f:35:19:c1:2b:3b:c6:a5:fb:17:33:e0: 55:ad:17:bb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUNJUZ4YF53wyV3ZFrPUv3A9GAhWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyRkE1NDBFNTlCODU3MDIwQzRCMjA5NTQyMzBFMEMw QUU4Q0EwRTAeFw0yNTEwMjEyMDAxNDJaFw0yNjEwMjAyMDA2NDJaMDMxMTAvBgNV BAMTKDNERUFDQjMxRDAyNDVFM0Q4Qjg2NTZEMzJGRDhEOUM2QjA1QTdCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvY49axHzbyxPlZ6wQJ98bHfN ilpXC2cye8rpuC5Q4m7Az5KXfHsU7vrSlnMr75+bOjCJV1HMHL/9SGuRcsg6a08w h8oQqhiF3iI8n1rmddXgwBmRICYgTXQl8yjU+pIgjKb6ApJNVdDHwKKesQLFDXK4 GJaop2yGXxrwVo9aZzMsAOADL8gq4X4btt2sGvbIglnJmaKgBcQ04jlHEcrQDHk2 KgFZDuExI7spoeNd/AL6MEHKHLEUtLDaEkKjFVZR4cPv8/KiRO7F7JT0bdLTbH5M vgh+8bRL7SYr+dMdO90o4w0aKMtD8V+oyOyGKr/coh5rbvjzEjVnlzdi257HAgMB AAGjggKIMIIChDAdBgNVHQ4EFgQUPerLMdAkXj2LhlbTL9jZxrBae8YwHwYDVR0j BBgwFoAU9i+lQOWbhXAgxLIJVCMODAroyg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9GNjJGQTU0MEU1OUI4NTcwMjBDNEIyMDk1NDIzMEUwQzBBRThDQTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MkZBNTQwRTU5Qjg1NzAy MEM0QjIwOTU0MjMwRTBDMEFFOENBMEUuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTNTMw NTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYsGCCsGAQUFBwEHAQH/ BHwwejBMBAIAATBGAwQCigBkAwQCqOREMAwDBACxicEDBASxicADBASzYPADBAS6 wWAwDAMEALrQ1QMEA7rQ0AMEALr7cQMEAbr7dAMEBLsxwDAqBAIAAjAkAwcAKAQh QBAMAwcAKAQhQBAWAwcCKAQhQBAgAwcAKAQhQBgBMA0GCSqGSIb3DQEBCwUAA4IB AQA4gRKGACgmj3ihr6J5/wuTbTWCzzyJdTbs03SPXb8J5fImgELiJRqmqpoq4DvF q/GHHs0Yrdb0yKeKBm9aCOUjUxPOSd/YN203eja1ecEmfJGyC/nXodM/R9DRXsj5 cCau9pOngI7jRJdQP4Oqo4FYDQ1R1Qw66kRZqkYqHPhKloKfU8n+mxiOVWCaqc+w 1RHln9/5jJAEztcZ9BXFnWFpvdVsiIItDTnRbGo4grbpXpE0i34VvkZhYpDd2rDG q7i+yeqc8B9LVNKSaM+2j8rS9XCHie6LpoKkaz+op+aLlRL9U7TLg9kknFPXtVkv 7mUfNRnBKzvGpfsXM+BVrRe7 -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:17 2025 by rpki-client