$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS271242.roa File: AS271242.roa (raw, json) Hash identifier: 9kWCYinMJueUKU3zBsW4hsI8LFnmlpLSN9s8YC+aA9o= Subject key identifier: 84:C0:DA:42:A6:02:39:D1:B3:59:02:38:0E:87:E3:BF:6C:0C:AA:25 Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 4DE48D54193200BFC57DBDB9F8A96FBEA4289D25 Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS271242.roa Signing time: Mon 21 Jul 2025 14:35:48 +0000 ROA not before: Mon 21 Jul 2025 14:30:48 +0000 ROA not after: Mon 20 Jul 2026 14:35:48 +0000 asID: 271242 IP address blocks: 2804:7870::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e4:8d:54:19:32:00:bf:c5:7d:bd:b9:f8:a9:6f:be:a4:28:9d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Jul 21 14:30:48 2025 GMT Not After : Jul 20 14:35:48 2026 GMT Subject: CN=84C0DA42A60239D1B35902380E87E3BF6C0CAA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:a1:c2:81:64:35:c0:eb:2a:f6:2b:90:8d: 3f:b8:e6:7e:95:08:56:47:96:a8:bb:55:bb:01:62: 78:4d:be:48:79:dd:aa:02:7b:e2:de:ff:1a:08:c0: 15:b3:8c:28:70:01:89:03:be:66:4d:86:e0:ef:ae: 8d:ce:a5:5b:0f:be:fa:7c:08:13:9a:7f:72:57:e4: 12:fa:f6:ac:43:14:e9:7a:08:06:63:f3:20:e2:fc: d2:24:1e:6b:45:14:2e:5e:20:d8:95:2b:26:81:9c: 9b:92:f9:34:8c:6c:c7:86:1a:cd:e8:87:f1:2f:e4: 9a:00:fb:d8:3e:ef:c9:24:10:97:8c:6a:c6:7b:fb: 69:c7:1e:9b:93:c7:ef:aa:66:3c:ed:9b:47:07:09: 92:83:1d:d2:65:16:29:aa:fc:c5:58:53:d4:3d:f7: f5:d8:b7:38:c6:5d:e7:78:42:60:7a:53:9a:90:03: d1:84:8d:15:55:fe:5a:24:7b:4f:61:03:b0:e4:ea: db:4e:58:e4:93:77:ab:a6:5b:a9:90:40:e5:2d:1b: 32:21:d8:70:73:0d:06:1a:00:31:dd:b3:c2:12:85: a4:d5:60:fe:29:44:cc:b1:32:31:2b:fd:a2:f3:8b: b2:7b:d0:4d:71:ba:f0:93:af:db:6a:13:b0:b7:c5: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:DA:42:A6:02:39:D1:B3:59:02:38:0E:87:E3:BF:6C:0C:AA:25 X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS271242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7870::/32 Signature Algorithm: sha256WithRSAEncryption 16:1f:6f:14:87:8c:bc:7a:7d:2b:b4:16:55:47:c5:71:83:18: b5:c1:7d:5b:e7:66:fd:14:e0:c5:16:c1:7e:c7:78:db:5d:fd: c2:a4:e9:67:96:a2:b4:96:9d:7e:74:23:95:95:00:6c:b5:87: cc:f2:f0:dd:5f:31:79:d5:36:b1:7a:91:83:d3:a7:3c:89:f4: d5:aa:2f:61:e1:fa:ea:81:85:cd:7c:96:32:ce:df:ad:df:45: 62:fd:ac:25:fe:53:6d:8d:ef:79:57:9f:40:79:51:e5:85:21: b9:74:c3:fe:9b:5a:ce:88:55:69:9a:ab:27:29:4b:a9:4f:04: e2:05:bb:fe:c1:47:e7:2a:8d:ad:b9:0c:20:6f:c5:63:e4:ed: 92:b3:e2:31:6e:17:32:e5:de:89:3f:a2:f3:d4:7e:13:ff:3a: d9:38:1d:69:4d:85:d7:74:e0:89:f8:85:c0:2b:68:93:cc:eb: ba:90:3e:4d:e1:71:a6:86:35:29:58:05:72:f5:00:7f:ad:67: f7:7d:ee:3a:7c:82:b7:82:35:1b:6a:40:70:dc:d5:15:c9:59: 8e:bc:91:21:7b:7c:35:62:1d:ec:ad:35:39:6f:69:99:d6:b4: 4f:a8:30:94:ef:ad:d1:ed:c3:45:26:24:1c:7e:00:74:4a:de: 8a:45:dd:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTeSNVBkyAL/Ffb25+KlvvqQonSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNTA3MjExNDMwNDhaFw0yNjA3MjAxNDM1NDhaMDMxMTAvBgNV BAMTKDg0QzBEQTQyQTYwMjM5RDFCMzU5MDIzODBFODdFM0JGNkMwQ0FBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RaHCgWQ1wOsq9iuQjT+45n6V CFZHlqi7VbsBYnhNvkh53aoCe+Le/xoIwBWzjChwAYkDvmZNhuDvro3OpVsPvvp8 CBOaf3JX5BL69qxDFOl6CAZj8yDi/NIkHmtFFC5eINiVKyaBnJuS+TSMbMeGGs3o h/Ev5JoA+9g+78kkEJeMasZ7+2nHHpuTx++qZjztm0cHCZKDHdJlFimq/MVYU9Q9 9/XYtzjGXed4QmB6U5qQA9GEjRVV/loke09hA7Dk6ttOWOSTd6umW6mQQOUtGzIh 2HBzDQYaADHds8IShaTVYP4pRMyxMjEr/aLzi7J70E1xuvCTr9tqE7C3xd/XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhMDaQqYCOdGzWQI4Dofjv2wMqiUwHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjcx MjQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAKAR4cDANBgkqhkiG9w0BAQsFAAOCAQEAFh9vFIeMvHp9 K7QWVUfFcYMYtcF9W+dm/RTgxRbBfsd42139wqTpZ5aitJadfnQjlZUAbLWHzPLw 3V8xedU2sXqRg9OnPIn01aovYeH66oGFzXyWMs7frd9FYv2sJf5TbY3veVefQHlR 5YUhuXTD/ptazohVaZqrJylLqU8E4gW7/sFH5yqNrbkMIG/FY+TtkrPiMW4XMuXe iT+i89R+E/862TgdaU2F13TgifiFwCtok8zrupA+TeFxpoY1KVgFcvUAf61n933u OnyCt4I1G2pAcNzVFclZjryRIXt8NWId7K01OW9pmda0T6gwlO+t0e3DRSYkHH4A dEreikXdeQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:55 2025 by rpki-client