$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262907.roa File: AS262907.roa (raw, json) Hash identifier: IXax5BtzNmc+NoMD6T7wtydhQ6wqZXl01rM23UqL1Jw= Subject key identifier: 00:DE:13:2F:BB:97:F9:1B:99:7E:DE:54:85:F9:D1:B1:72:C3:23:2D Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 466DAA68E26A5D0CF39DC41B0D0673E771FAC197 Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262907.roa Signing time: Thu 26 Jun 2025 18:53:05 +0000 ROA not before: Thu 26 Jun 2025 18:48:05 +0000 ROA not after: Thu 25 Jun 2026 18:53:05 +0000 asID: 262907 IP address blocks: 45.178.40.0/22 maxlen: 24 45.184.148.0/22 maxlen: 24 45.226.16.0/22 maxlen: 24 45.237.80.0/22 maxlen: 24 45.237.252.0/22 maxlen: 24 131.161.0.0/22 maxlen: 24 131.221.52.0/22 maxlen: 24 143.208.76.0/22 maxlen: 24 168.0.88.0/22 maxlen: 24 168.0.160.0/22 maxlen: 24 168.121.92.0/22 maxlen: 24 168.197.252.0/22 maxlen: 24 168.227.168.0/22 maxlen: 24 170.83.72.0/22 maxlen: 24 170.254.188.0/22 maxlen: 24 177.11.192.0/21 maxlen: 24 177.11.200.0/21 maxlen: 24 177.36.32.0/20 maxlen: 24 177.44.192.0/20 maxlen: 24 177.66.176.0/22 maxlen: 24 177.72.96.0/21 maxlen: 24 177.87.184.0/22 maxlen: 24 177.87.188.0/22 maxlen: 24 177.87.216.0/21 maxlen: 24 177.92.168.0/21 maxlen: 24 177.104.96.0/20 maxlen: 24 177.130.32.0/20 maxlen: 24 177.155.102.0/23 maxlen: 24 177.155.104.0/22 maxlen: 24 177.185.124.0/22 maxlen: 24 186.195.16.0/20 maxlen: 24 186.209.80.0/21 maxlen: 24 186.251.168.0/22 maxlen: 24 187.16.224.0/20 maxlen: 24 187.49.156.0/22 maxlen: 24 187.60.96.0/20 maxlen: 24 187.60.176.0/20 maxlen: 24 187.84.48.0/20 maxlen: 24 191.6.160.0/22 maxlen: 24 191.253.192.0/20 maxlen: 24 200.18.112.0/20 maxlen: 24 201.87.192.0/20 maxlen: 24 2804:297c::/32 maxlen: 48 2804:4f8c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6d:aa:68:e2:6a:5d:0c:f3:9d:c4:1b:0d:06:73:e7:71:fa:c1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Jun 26 18:48:05 2025 GMT Not After : Jun 25 18:53:05 2026 GMT Subject: CN=00DE132FBB97F91B997EDE5485F9D1B172C3232D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:98:78:9e:69:84:a8:37:8a:0f:9c:62:69: 57:d2:c4:bc:15:4e:15:94:a4:eb:33:5d:ba:96:c4: ef:0e:32:4e:82:d5:21:e4:04:ac:3e:5b:be:fe:f7: 9b:83:32:a8:47:db:e2:ba:16:50:67:a0:d3:40:b4: 06:25:14:19:03:6b:5c:1c:e2:6c:db:89:a2:db:f6: 04:9a:6a:8e:0c:2f:bc:fe:82:c1:34:dd:83:95:d3: fc:f2:4a:d6:91:18:53:10:98:ac:a8:13:1f:da:b4: 4a:3b:0a:8e:be:4d:71:bc:47:5a:ee:4c:ac:cf:55: 95:d4:f3:78:1c:4f:db:5c:0f:1f:21:43:59:42:64: 10:c2:36:48:a7:79:14:12:33:8f:5d:2e:22:d8:0f: 09:1b:ef:c6:c0:34:d1:1f:4c:9d:e5:79:b9:9a:eb: 66:62:11:2c:13:27:47:95:20:46:59:a9:86:de:64: 66:00:b8:82:f9:d6:f9:52:ae:a1:b8:fc:95:b3:35: 50:63:b0:b8:df:1a:2f:41:6e:9d:04:43:ef:35:59: 06:d3:98:44:e3:8c:2a:2f:b3:6b:63:9c:0c:a0:30: d2:02:7a:2a:c3:45:fb:f6:ed:e7:47:d8:87:d5:c2: f4:9a:89:f3:55:90:15:9a:66:c4:93:cb:47:8b:65: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DE:13:2F:BB:97:F9:1B:99:7E:DE:54:85:F9:D1:B1:72:C3:23:2D X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.40.0/22 45.184.148.0/22 45.226.16.0/22 45.237.80.0/22 45.237.252.0/22 131.161.0.0/22 131.221.52.0/22 143.208.76.0/22 168.0.88.0/22 168.0.160.0/22 168.121.92.0/22 168.197.252.0/22 168.227.168.0/22 170.83.72.0/22 170.254.188.0/22 177.11.192.0/20 177.36.32.0/20 177.44.192.0/20 177.66.176.0/22 177.72.96.0/21 177.87.184.0/21 177.87.216.0/21 177.92.168.0/21 177.104.96.0/20 177.130.32.0/20 177.155.102.0-177.155.107.255 177.185.124.0/22 186.195.16.0/20 186.209.80.0/21 186.251.168.0/22 187.16.224.0/20 187.49.156.0/22 187.60.96.0/20 187.60.176.0/20 187.84.48.0/20 191.6.160.0/22 191.253.192.0/20 200.18.112.0/20 201.87.192.0/20 IPv6: 2804:297c::/32 2804:4f8c::/32 Signature Algorithm: sha256WithRSAEncryption 15:8c:36:13:b4:e2:09:62:bc:11:5a:5a:7f:b7:83:48:13:7e: ff:af:2e:5e:cd:c9:34:04:16:59:a2:41:d3:95:61:a3:e9:3e: bb:58:43:6f:fc:ce:0b:34:e4:4f:22:51:52:8e:04:fa:18:c6: 33:80:aa:8c:da:a8:ee:a1:af:45:ee:51:1c:be:ff:b4:d3:90: 66:d4:72:ab:60:81:f0:26:c6:f3:07:1f:dd:f8:11:90:84:85: 0d:83:be:6d:13:6d:1a:81:a3:c0:5a:c7:83:77:45:09:98:c8: 1a:5a:10:99:0f:61:fa:a4:0c:b9:66:d7:36:d3:71:63:1e:78: ad:d5:0b:69:be:8b:98:0e:2c:ae:fe:64:7f:ad:36:c2:f2:4f: 10:5a:dd:96:df:c2:3f:d5:2b:8e:9c:d2:2f:e2:f6:d6:02:5a: 84:49:a2:c9:02:4c:41:c5:b6:06:a6:e6:12:79:ba:9d:57:28: 54:ae:e0:44:66:a2:c5:24:28:22:40:ba:cb:cb:94:86:52:73: 9c:d5:ac:af:62:33:04:f8:a9:e8:d0:92:6b:a4:c4:cb:10:5e: 11:72:66:3c:1b:cc:7f:95:89:c9:41:93:3e:c0:22:a0:4b:5f: 15:30:2b:cd:14:d4:36:f0:c9:cf:33:14:4c:8c:45:a5:1a:48: 2e:bc:e9:7d -----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgIURm2qaOJqXQzzncQbDQZz53H6wZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNTA2MjYxODQ4MDVaFw0yNjA2MjUxODUzMDVaMDMxMTAvBgNV BAMTKDAwREUxMzJGQkI5N0Y5MUI5OTdFREU1NDg1RjlEMUIxNzJDMzIzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+5h4nmmEqDeKD5xiaVfSxLwV ThWUpOszXbqWxO8OMk6C1SHkBKw+W77+95uDMqhH2+K6FlBnoNNAtAYlFBkDa1wc 4mzbiaLb9gSaao4ML7z+gsE03YOV0/zyStaRGFMQmKyoEx/atEo7Co6+TXG8R1ru TKzPVZXU83gcT9tcDx8hQ1lCZBDCNkineRQSM49dLiLYDwkb78bANNEfTJ3lebma 62ZiESwTJ0eVIEZZqYbeZGYAuIL51vlSrqG4/JWzNVBjsLjfGi9Bbp0EQ+81WQbT mETjjCovs2tjnAygMNICeirDRfv27edH2IfVwvSaifNVkBWaZsSTy0eLZX7tAgMB AAGjggMmMIIDIjAdBgNVHQ4EFgQUAN4TL7uX+RuZft5UhfnRsXLDIy0wHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjYy OTA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcB Af8EggEWMIIBEjCB+QQCAAEwgfIDBAItsigDBAItuJQDBAIt4hADBAIt7VADBAIt 7fwDBAKDoQADBAKD3TQDBAKP0EwDBAKoAFgDBAKoAKADBAKoeVwDBAKoxfwDBAKo 46gDBAKqU0gDBAKq/rwDBASxC8ADBASxJCADBASxLMADBAKxQrADBAOxSGADBAOx V7gDBAOxV9gDBAOxXKgDBASxaGADBASxgiAwDAMEAbGbZgMEArGbaAMEArG5fAME BLrDEAMEA7rRUAMEArr7qAMEBLsQ4AMEArsxnAMEBLs8YAMEBLs8sAMEBLtUMAME Ar8GoAMEBL/9wAMEBMgScAMEBMlXwDAUBAIAAjAOAwUAKAQpfAMFACgET4wwDQYJ KoZIhvcNAQELBQADggEBABWMNhO04glivBFaWn+3g0gTfv+vLl7NyTQEFlmiQdOV YaPpPrtYQ2/8zgs05E8iUVKOBPoYxjOAqozaqO6hr0XuURy+/7TTkGbUcqtggfAm xvMHH934EZCEhQ2Dvm0TbRqBo8Bax4N3RQmYyBpaEJkPYfqkDLlm1zbTcWMeeK3V C2m+i5gOLK7+ZH+tNsLyTxBa3Zbfwj/VK46c0i/i9tYCWoRJoskCTEHFtgam5hJ5 up1XKFSu4ERmosUkKCJAusvLlIZSc5zVrK9iMwT4qejQkmukxMsQXhFyZjwbzH+V iclBkz7AIqBLXxUwK80U1Dbwyc8zFEyMRaUaSC686X0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:28 2025 by rpki-client