$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262272.roa File: AS262272.roa (raw, json) Hash identifier: 0/SQ74U4eOR97YwZt0sfoeRnL7np5pYvNFq50s38NQQ= Subject key identifier: 96:D4:84:7F:BC:46:BA:A8:60:B2:19:C2:D7:46:A9:A3:E1:72:9D:47 Certificate issuer: /CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Certificate serial: 08388B3A5E12E502339BC3D7C44DB4AE69745A99 Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262272.roa Signing time: Mon 29 Sep 2025 11:46:38 +0000 ROA not before: Mon 29 Sep 2025 11:41:38 +0000 ROA not after: Mon 28 Sep 2026 11:46:38 +0000 asID: 262272 IP address blocks: 45.70.232.0/22 maxlen: 24 138.36.180.0/22 maxlen: 24 177.21.128.0/20 maxlen: 24 177.154.32.0/20 maxlen: 24 187.1.16.0/20 maxlen: 24 187.120.128.0/19 maxlen: 24 2804:21f8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:38:8b:3a:5e:12:e5:02:33:9b:c3:d7:c4:4d:b4:ae:69:74:5a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Validity Not Before: Sep 29 11:41:38 2025 GMT Not After : Sep 28 11:46:38 2026 GMT Subject: CN=96D4847FBC46BAA860B219C2D746A9A3E1729D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:f4:cc:1b:1d:da:41:cf:f7:ab:a4:b8:27: ae:8e:ae:86:ac:54:f9:a5:6d:4e:b6:d3:1d:56:8d: 04:28:a8:8c:8b:de:24:b4:74:a0:58:0b:7b:e8:52: 6c:86:a2:b8:66:e2:ce:b4:5a:1f:c9:78:d8:c5:c5: 63:ea:2d:66:9d:ec:42:c4:6f:d4:bc:61:7c:96:8c: e8:9d:d4:c8:aa:c0:93:21:f5:18:f4:7a:8a:07:74: 3a:1b:da:2f:3a:f4:c8:33:10:ab:9c:3b:c2:92:37: b1:69:fd:f6:e8:2f:94:65:8a:c6:f5:50:c4:36:30: b5:80:aa:05:65:ee:cb:ff:d7:d4:6f:e3:9c:8c:7d: ff:ac:10:e5:39:6c:ff:21:f4:10:ef:7c:10:d7:0f: a1:66:55:3b:ed:88:30:17:3d:fe:31:fe:1b:76:14: e9:db:92:fb:ab:9a:fc:b8:6f:c5:0b:7e:01:8f:12: db:3c:49:8f:72:b8:6b:71:1b:33:e3:c4:2f:84:a4: 80:08:b7:02:48:75:cd:86:32:4c:af:a9:e4:9f:0f: e3:09:bc:1b:a6:5f:7f:17:ec:9c:b1:7e:d8:18:39: 97:d5:7f:3f:d1:79:31:2d:7d:c6:ba:4f:07:2d:51: ba:0e:14:d6:f7:10:7b:fc:c7:01:67:0f:69:71:92: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:84:7F:BC:46:BA:A8:60:B2:19:C2:D7:46:A9:A3:E1:72:9D:47 X509v3 Authority Key Identifier: keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262272.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.232.0/22 138.36.180.0/22 177.21.128.0/20 177.154.32.0/20 187.1.16.0/20 187.120.128.0/19 IPv6: 2804:21f8::/32 Signature Algorithm: sha256WithRSAEncryption 06:6b:07:87:32:7a:c1:59:bc:bb:86:02:e6:3a:02:29:ce:82: 2b:58:39:bb:0b:ac:83:5c:ec:e7:e6:82:64:50:72:c4:05:38: 48:69:66:7f:72:01:08:ca:2f:31:6f:a4:fc:15:e1:0f:48:5e: 46:ad:fa:7f:9d:30:e1:89:45:d4:ce:f4:e0:c4:e6:e8:40:cf: 8d:75:ab:48:f5:5c:6e:00:8e:bc:1e:e4:37:c4:2d:13:4e:71: 53:3e:6b:a4:52:7d:77:56:f2:7f:14:ea:21:37:cc:0c:dd:6b: 4a:89:5a:a8:8d:72:36:f9:57:39:55:f4:60:b5:56:2f:5a:a4: ab:dd:dc:63:70:de:a7:13:51:fc:94:ee:51:b4:64:b7:28:33: 54:e1:b8:05:74:a7:6f:cf:14:5b:0b:c6:a7:2b:d5:f4:c8:03: ab:2c:af:42:4b:e4:30:05:90:ce:6b:c6:93:a7:75:94:1a:9a: 8a:fa:e6:68:0d:de:6a:6a:5a:9b:f9:c6:0e:b8:cb:b9:a7:1f: 25:41:26:61:aa:63:18:f9:11:2a:4e:ee:4b:e9:ab:b9:b4:ce: 4e:a9:78:e8:04:32:89:2d:81:a8:c4:ec:85:d5:bb:88:e9:34: 78:83:e0:29:ba:44:85:07:d2:22:d5:f4:34:3a:d2:87:fc:3d: da:93:44:cf -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUCDiLOl4S5QIzm8PXxE20rml0WpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVBMENBQ0I2RjVENkI0NTAwNjEzNjM5MjI1NTY3MEI4 MURCNjZGODAeFw0yNTA5MjkxMTQxMzhaFw0yNjA5MjgxMTQ2MzhaMDMxMTAvBgNV BAMTKDk2RDQ4NDdGQkM0NkJBQTg2MEIyMTlDMkQ3NDZBOUEzRTE3MjlENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbvTMGx3aQc/3q6S4J66Oroas VPmlbU620x1WjQQoqIyL3iS0dKBYC3voUmyGorhm4s60Wh/JeNjFxWPqLWad7ELE b9S8YXyWjOid1MiqwJMh9Rj0eooHdDob2i869MgzEKucO8KSN7Fp/fboL5Rlisb1 UMQ2MLWAqgVl7sv/19Rv45yMff+sEOU5bP8h9BDvfBDXD6FmVTvtiDAXPf4x/ht2 FOnbkvurmvy4b8ULfgGPEts8SY9yuGtxGzPjxC+EpIAItwJIdc2GMkyvqeSfD+MJ vBumX38X7JyxftgYOZfVfz/ReTEtfca6TwctUboOFNb3EHv8xwFnD2lxkjcDAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUltSEf7xGuqhgshnC10apo+FynUcwHwYDVR0j BBgwFoAUFaDKy29da0UAYTY5IlVnC4HbZvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvNC8xNUEwQ0FDQjZGNUQ2QjQ1MDA2MTM2MzkyMjU1NjcwQjgxREI2NkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1QTBDQUNCNkY1RDZCNDUw MDYxMzYzOTIyNTU2NzBCODFEQjY2RjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS80L0FTMjYy MjcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQCLUboAwQCiiS0AwQEsRWAAwQEsZogAwQEuwEQAwQFu3iA MA0EAgACMAcDBQAoBCH4MA0GCSqGSIb3DQEBCwUAA4IBAQAGaweHMnrBWby7hgLm OgIpzoIrWDm7C6yDXOzn5oJkUHLEBThIaWZ/cgEIyi8xb6T8FeEPSF5Grfp/nTDh iUXUzvTgxOboQM+NdatI9VxuAI68HuQ3xC0TTnFTPmukUn13VvJ/FOohN8wM3WtK iVqojXI2+Vc5VfRgtVYvWqSr3dxjcN6nE1H8lO5RtGS3KDNU4bgFdKdvzxRbC8an K9X0yAOrLK9CS+QwBZDOa8aTp3WUGpqK+uZoDd5qalqb+cYOuMu5px8lQSZhqmMY +REqTu5L6au5tM5OqXjoBDKJLYGoxOyF1buI6TR4g+ApukSFB9Ii1fQ0OtKH/D3a k0TP -----END CERTIFICATE-----Generated at Wed Nov 5 09:57:58 2025 by rpki-client