$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa File: AS52866.roa (raw, json) Hash identifier: t1xp8cgcwusJDFmCRDHkFb5HdcIr8m49J+1uav1FUIc= Subject key identifier: 64:64:1A:A7:02:69:81:23:74:CE:49:EE:B1:4B:F2:18:2C:C1:9D:BD Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 6F181197B12D6A8FDAA9084B3D168DFBDC39358C Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa Signing time: Wed 12 Mar 2025 23:23:52 +0000 ROA not before: Wed 12 Mar 2025 23:18:52 +0000 ROA not after: Wed 11 Mar 2026 23:23:52 +0000 asID: 52866 IP address blocks: 131.100.128.0/22 maxlen: 24 138.94.112.0/22 maxlen: 24 170.81.244.0/22 maxlen: 24 177.125.24.0/22 maxlen: 24 186.233.220.0/22 maxlen: 24 2804:bdc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:18:11:97:b1:2d:6a:8f:da:a9:08:4b:3d:16:8d:fb:dc:39:35:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Mar 12 23:18:52 2025 GMT Not After : Mar 11 23:23:52 2026 GMT Subject: CN=64641AA70269812374CE49EEB14BF2182CC19DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:24:4e:32:a9:e4:21:9e:d0:55:49:e7:9c: ff:1d:80:0f:5d:bf:f4:f6:fe:17:99:7c:3d:28:cc: 41:c2:44:01:51:4c:e4:65:8d:70:c2:55:94:22:ad: 30:7c:52:9f:9d:c3:d6:c8:44:73:eb:59:8d:5d:8c: af:c4:97:2d:b4:ac:34:fc:34:da:f4:d7:76:76:67: 4e:64:32:6d:4b:f9:9f:12:48:21:fc:bf:33:ee:23: ac:f1:d1:e0:08:3f:37:f6:d4:fe:fe:d5:99:85:bd: 3a:a3:78:15:40:cb:2d:3f:c7:aa:a0:c2:b8:1c:1b: 57:e9:c6:53:f2:99:4c:81:7f:e9:cc:be:e5:08:0a: ff:39:2b:f8:8d:64:81:3f:bf:0b:fa:09:62:b2:0b: 4e:63:c9:6a:7b:5d:10:a8:da:f9:4d:3e:2d:91:ad: 76:bb:02:c8:08:e6:a0:16:5f:c0:88:35:3d:46:e3: 52:7b:b5:6c:5d:d7:40:68:cb:3b:fe:83:db:ee:18: 5b:1f:cd:9d:5b:2c:6a:6e:a1:ce:6b:9a:c2:78:12: e3:78:5d:60:14:f9:ef:35:a9:ef:98:fc:3d:c9:15: 1e:da:fd:5d:bf:8e:92:fe:c1:f0:48:a9:5b:d2:78: 0f:8d:29:7b:90:57:eb:5d:9e:81:2c:e3:33:7d:a9: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:64:1A:A7:02:69:81:23:74:CE:49:EE:B1:4B:F2:18:2C:C1:9D:BD X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.128.0/22 138.94.112.0/22 170.81.244.0/22 177.125.24.0/22 186.233.220.0/22 IPv6: 2804:bdc::/32 Signature Algorithm: sha256WithRSAEncryption 3d:6a:c4:1e:19:6a:51:ab:09:68:56:eb:cb:29:9f:47:d4:72: c2:e7:43:63:9e:7e:b0:11:bb:d4:98:13:e2:98:fb:dc:91:8f: f6:b4:52:01:54:fe:d2:c9:70:8e:42:ed:a0:d0:b2:92:d7:15: 45:e5:4f:c9:0c:18:d8:93:01:c9:6b:e1:7c:8f:12:57:70:cc: 9f:55:fa:b8:41:36:4e:db:70:ef:c0:32:29:e8:3c:4d:82:6b: be:b7:d8:d3:2d:7b:88:cd:af:2c:90:b6:6b:5c:48:24:1d:12: 9c:cc:d0:de:bb:df:4e:a8:37:c7:cb:39:86:ec:c9:22:31:76: 3a:2f:66:71:3e:ba:53:94:4a:eb:83:c0:71:fa:a2:15:83:b2: 88:eb:bc:f5:68:bf:80:36:b7:18:d1:4c:91:ad:08:86:53:54: 1d:28:dc:3d:9f:63:86:57:ca:7f:00:6e:a2:28:54:69:1f:b6: 5d:5a:c3:5a:bd:35:6f:ba:b7:1e:41:60:28:6c:76:da:e9:07: 70:1e:d0:22:14:e3:64:67:d4:5b:c2:f2:26:38:37:ed:52:ca: 78:86:a7:a4:40:04:66:4d:4d:2e:1f:9f:98:28:82:62:c3:25: f7:62:b1:d3:ef:88:13:96:da:40:7e:20:e6:3e:da:d7:00:b5: a6:66:43:17 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUbxgRl7Etao/aqQhLPRaN+9w5NYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNTAzMTIyMzE4NTJaFw0yNjAzMTEyMzIzNTJaMDMxMTAvBgNV BAMTKDY0NjQxQUE3MDI2OTgxMjM3NENFNDlFRUIxNEJGMjE4MkNDMTlEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJCROMqnkIZ7QVUnnnP8dgA9d v/T2/heZfD0ozEHCRAFRTORljXDCVZQirTB8Up+dw9bIRHPrWY1djK/Ely20rDT8 NNr013Z2Z05kMm1L+Z8SSCH8vzPuI6zx0eAIPzf21P7+1ZmFvTqjeBVAyy0/x6qg wrgcG1fpxlPymUyBf+nMvuUICv85K/iNZIE/vwv6CWKyC05jyWp7XRCo2vlNPi2R rXa7AsgI5qAWX8CINT1G41J7tWxd10Boyzv+g9vuGFsfzZ1bLGpuoc5rmsJ4EuN4 XWAU+e81qe+Y/D3JFR7a/V2/jpL+wfBIqVvSeA+NKXuQV+tdnoEs4zN9qUSlAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUZGQapwJpgSN0zknusUvyGCzBnb0wHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTNTI4 NjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAKDZIADBAKKXnADBAKqUfQDBAKxfRgDBAK66dwwDQQCAAIw BwMFACgEC9wwDQYJKoZIhvcNAQELBQADggEBAD1qxB4ZalGrCWhW68spn0fUcsLn Q2OefrARu9SYE+KY+9yRj/a0UgFU/tLJcI5C7aDQspLXFUXlT8kMGNiTAclr4XyP EldwzJ9V+rhBNk7bcO/AMinoPE2Ca7632NMte4jNryyQtmtcSCQdEpzM0N67306o N8fLOYbsySIxdjovZnE+ulOUSuuDwHH6ohWDsojrvPVov4A2txjRTJGtCIZTVB0o 3D2fY4ZXyn8AbqIoVGkftl1aw1q9NW+6tx5BYChsdtrpB3Ae0CIU42Rn1FvC8iY4 N+1SyniGp6RABGZNTS4fn5gogmLDJfdisdPviBOW2kB+IOY+2tcAtaZmQxc= -----END CERTIFICATE-----Generated at Thu Nov 6 06:11:20 2025 by rpki-client