$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa File: AS262605.roa (raw, json) Hash identifier: +O73ekCzDhj1cZuFEn+nj0olY8ziazD58cQdhJj2WnM= Subject key identifier: C1:80:7D:56:4A:E0:DF:E3:B6:96:68:B0:88:BC:12:3E:19:7E:88:01 Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 5A8CB65EEC442A879BD6706C72E1D45920A25CE4 Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa Signing time: Wed 12 Mar 2025 23:23:56 +0000 ROA not before: Wed 12 Mar 2025 23:18:56 +0000 ROA not after: Wed 11 Mar 2026 23:23:56 +0000 asID: 262605 IP address blocks: 132.255.252.0/22 maxlen: 24 138.99.84.0/22 maxlen: 24 143.202.108.0/22 maxlen: 24 170.80.104.0/22 maxlen: 24 177.84.232.0/22 maxlen: 24 177.128.44.0/22 maxlen: 24 177.184.248.0/21 maxlen: 24 186.250.8.0/22 maxlen: 24 186.250.12.0/22 maxlen: 24 2804:24c::/32 maxlen: 48 2804:da8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8c:b6:5e:ec:44:2a:87:9b:d6:70:6c:72:e1:d4:59:20:a2:5c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Mar 12 23:18:56 2025 GMT Not After : Mar 11 23:23:56 2026 GMT Subject: CN=C1807D564AE0DFE3B69668B088BC123E197E8801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:aa:39:9d:f6:7b:d4:e4:dd:01:71:8e:2f: fe:cc:e1:df:06:f7:02:11:e4:93:36:3f:c4:88:f4: 9c:21:09:70:1e:90:63:b5:be:e9:f5:e6:14:d1:70: 6a:48:6c:fb:75:bf:f9:6d:2b:46:d7:a2:f4:a9:0e: 8b:a6:2f:e0:78:c4:e1:08:76:d7:b5:54:75:92:7b: af:63:a5:6f:d8:2e:16:f9:8f:81:5d:4c:a4:e9:40: e4:5e:de:ca:fe:3c:82:b0:d7:cc:40:f4:64:4a:94: 2d:be:03:6d:f1:19:0b:5b:1d:4a:28:0a:36:96:96: 9b:fb:7c:58:90:2d:0e:84:a0:f4:53:06:5c:aa:e9: 06:d6:5d:89:cc:58:d0:a3:3a:71:cc:54:01:48:35: e6:16:dd:48:db:c4:1b:39:46:3d:02:c4:55:d9:35: 6f:dc:c1:c2:75:3d:9f:00:c7:4b:12:82:cf:b4:e6: 29:95:9d:00:78:cf:36:ef:fb:78:03:42:d6:cd:c1: c5:34:56:47:fe:a2:fa:ce:bc:81:ff:29:8f:c2:3b: 70:5f:31:9b:03:4a:90:0e:ef:f8:2a:9b:d4:b7:ec: b8:de:6f:33:1b:ce:d4:c8:30:1d:b1:25:03:32:02: 20:21:a1:c8:52:c7:97:b0:95:92:04:de:16:0b:64: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:80:7D:56:4A:E0:DF:E3:B6:96:68:B0:88:BC:12:3E:19:7E:88:01 X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.252.0/22 138.99.84.0/22 143.202.108.0/22 170.80.104.0/22 177.84.232.0/22 177.128.44.0/22 177.184.248.0/21 186.250.8.0/21 IPv6: 2804:24c::/32 2804:da8::/32 Signature Algorithm: sha256WithRSAEncryption 6c:06:5c:91:7d:7d:7a:78:b2:ea:7f:0e:bc:ce:b4:4d:ae:8a: ae:16:f4:6b:92:a8:08:c7:68:f8:0d:40:3b:74:ed:f0:11:89: d6:09:a5:22:e1:d4:53:9d:6d:2c:f8:47:a7:b5:a7:d4:0a:9e: 41:61:3b:d9:05:93:b4:f8:eb:f2:60:9c:b9:d9:42:ec:7c:7c: 29:ed:6a:04:9f:82:43:0b:17:3f:60:05:0c:a9:32:ff:b7:ae: 16:e7:65:19:a2:e1:69:99:58:af:91:5a:66:75:3a:da:a4:10: 4b:19:e6:a7:ab:1d:06:e4:63:4e:43:0c:23:e1:09:ac:d8:24: 0b:c0:ea:0b:bf:eb:50:e8:1b:87:1a:d8:40:0e:cb:37:a4:83: a4:4a:5a:3b:d9:27:a9:c8:ec:b5:b7:f5:a7:30:e4:de:2f:20: c6:1e:c5:02:01:99:cd:6d:1d:7d:56:24:c9:e6:22:62:5f:64: a0:c5:d5:ba:b4:8f:89:88:02:68:fc:7a:f6:8e:38:df:61:82: 32:db:4c:3c:64:2a:c5:2e:63:d7:f0:f2:b6:6e:df:1c:b2:fd: 02:3a:92:8a:e9:ae:49:08:f9:ca:c1:a6:30:66:f2:a2:35:e1: 48:97:10:41:2b:1a:7b:e9:70:b8:94:a9:1b:76:b2:7a:6a:b7: 7f:3a:50:c5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUWoy2XuxEKoeb1nBscuHUWSCiXOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNTAzMTIyMzE4NTZaFw0yNjAzMTEyMzIzNTZaMDMxMTAvBgNV BAMTKEMxODA3RDU2NEFFMERGRTNCNjk2NjhCMDg4QkMxMjNFMTk3RTg4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvqo5nfZ71OTdAXGOL/7M4d8G 9wIR5JM2P8SI9JwhCXAekGO1vun15hTRcGpIbPt1v/ltK0bXovSpDoumL+B4xOEI dte1VHWSe69jpW/YLhb5j4FdTKTpQORe3sr+PIKw18xA9GRKlC2+A23xGQtbHUoo CjaWlpv7fFiQLQ6EoPRTBlyq6QbWXYnMWNCjOnHMVAFINeYW3UjbxBs5Rj0CxFXZ NW/cwcJ1PZ8Ax0sSgs+05imVnQB4zzbv+3gDQtbNwcU0Vkf+ovrOvIH/KY/CO3Bf MZsDSpAO7/gqm9S37LjebzMbztTIMB2xJQMyAiAhochSx5ewlZIE3hYLZFVtAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUwYB9Vkrg3+O2lmiwiLwSPhl+iAEwHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjYy NjA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/ BFAwTjA2BAIAATAwAwQChP/8AwQCimNUAwQCj8psAwQCqlBoAwQCsVToAwQCsYAs AwQDsbj4AwQDuvoIMBQEAgACMA4DBQAoBAJMAwUAKAQNqDANBgkqhkiG9w0BAQsF AAOCAQEAbAZckX19eniy6n8OvM60Ta6Krhb0a5KoCMdo+A1AO3Tt8BGJ1gmlIuHU U51tLPhHp7Wn1AqeQWE72QWTtPjr8mCcudlC7Hx8Ke1qBJ+CQwsXP2AFDKky/7eu FudlGaLhaZlYr5FaZnU62qQQSxnmp6sdBuRjTkMMI+EJrNgkC8DqC7/rUOgbhxrY QA7LN6SDpEpaO9knqcjstbf1pzDk3i8gxh7FAgGZzW0dfVYkyeYiYl9koMXVurSP iYgCaPx69o4432GCMttMPGQqxS5j1/Dytm7fHLL9AjqSiumuSQj5ysGmMGbyojXh SJcQQSsae+lwuJSpG3ayemq3fzpQxQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:18 2025 by rpki-client