$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28124.roa File: AS28124.roa (raw, json) Hash identifier: WNYO2twBW+qiipMaDtlSqMAkSWOfeR4LMrNSr6QlITU= Subject key identifier: E9:E5:1C:90:37:F6:DC:0B:78:E3:23:3B:94:4B:61:7F:6B:1E:B4:63 Certificate issuer: /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0 Certificate serial: 16BDF5A108C77420DE899E73FAF7049027E4CC99 Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28124.roa Signing time: Thu 12 Feb 2026 13:37:16 +0000 ROA not before: Thu 12 Feb 2026 13:32:16 +0000 ROA not after: Thu 11 Feb 2027 13:37:16 +0000 asID: 28124 IP address blocks: 187.108.224.0/20 maxlen: 20 187.108.224.0/22 maxlen: 22 187.108.224.0/24 maxlen: 24 187.108.225.0/24 maxlen: 24 187.108.226.0/24 maxlen: 24 187.108.227.0/24 maxlen: 24 187.108.228.0/22 maxlen: 22 187.108.228.0/24 maxlen: 24 187.108.229.0/24 maxlen: 24 187.108.230.0/24 maxlen: 24 187.108.231.0/24 maxlen: 24 187.108.232.0/22 maxlen: 22 187.108.232.0/24 maxlen: 24 187.108.233.0/24 maxlen: 24 187.108.234.0/24 maxlen: 24 187.108.235.0/24 maxlen: 24 187.108.236.0/24 maxlen: 24 187.108.237.0/24 maxlen: 24 187.108.238.0/24 maxlen: 24 187.108.239.0/24 maxlen: 24 2804:470::/32 maxlen: 32 2804:2b78::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 13:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:bd:f5:a1:08:c7:74:20:de:89:9e:73:fa:f7:04:90:27:e4:cc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0 Validity Not Before: Feb 12 13:32:16 2026 GMT Not After : Feb 11 13:37:16 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:10:a4:67:24:04:b7:da:eb:9d:46:c8:31: a7:f5:96:63:af:e7:6a:d1:3f:c7:60:6c:ce:3f:87: bb:27:16:90:9c:d6:ee:bf:6a:9b:fe:8c:74:fe:3e: db:dd:43:06:a4:fb:82:34:00:8a:1d:eb:71:67:f7: 41:1e:fd:12:7d:10:36:f4:76:32:86:aa:96:65:8f: ba:b4:30:03:b6:a8:99:a8:a5:fb:7d:85:27:3a:95: bb:bd:dc:a5:dc:8d:68:41:4d:05:08:c4:03:e3:33: a6:28:d3:92:fb:e6:6d:10:4d:d8:29:72:cf:3e:98: 39:33:21:96:ac:2b:b0:fb:0a:53:2e:4f:09:3c:2c: 04:f7:43:bb:e0:21:23:e8:64:4c:60:17:4d:4c:0a: fa:f3:de:59:26:02:50:01:2a:d0:41:58:4b:34:56: c6:ff:86:55:dd:22:d9:25:17:e4:7c:2b:85:0c:7a: 56:78:40:fb:72:64:11:e4:f0:64:72:ac:d0:25:16: be:6f:79:53:0a:2e:af:f8:33:7c:ab:34:53:41:3e: 1c:3c:21:9a:a3:cf:08:f1:4f:5d:0d:6a:6d:64:f4: 5e:82:85:a8:dd:61:5e:c5:01:80:d5:41:f5:54:80: 35:f3:84:87:0e:9a:78:17:1e:f0:7d:51:99:11:f5: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E5:1C:90:37:F6:DC:0B:78:E3:23:3B:94:4B:61:7F:6B:1E:B4:63 X509v3 Authority Key Identifier: keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28124.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.108.224.0/20 IPv6: 2804:470::/32 2804:2b78::/33 Signature Algorithm: sha256WithRSAEncryption 49:a1:88:44:fa:40:f1:4d:d8:0b:1b:e5:a6:fd:ec:e6:e7:f1: 14:16:dd:4d:8e:d4:c7:c6:d3:f9:ae:40:3a:72:90:42:9f:e6: 24:7e:8c:63:23:f9:01:cd:00:39:7d:eb:1b:73:ca:55:72:e5: 42:a6:66:27:96:d5:1f:9a:93:b3:b7:54:30:c6:01:65:98:e9: 89:cb:c9:a2:50:bb:c7:68:cb:f0:7c:40:77:8b:39:a1:9a:b6: 01:9c:60:bc:b2:db:39:2a:02:07:cd:ac:7b:c8:f1:1c:f7:93: 5b:0b:c7:33:4a:84:0f:df:6f:1f:e4:a5:07:22:67:b7:69:b4: 66:f5:a4:18:ef:ef:65:e0:93:88:cc:f5:0a:f4:06:1f:8c:5d: 51:d5:1f:e1:2e:49:50:3a:18:38:d0:41:e3:39:c2:9d:7a:19: 36:8c:be:cb:98:7c:d1:32:28:2b:cb:01:06:9b:83:4f:de:77: c1:70:f2:35:f5:cd:3d:52:c1:46:75:56:19:ae:07:f5:dd:cd: 4d:ba:90:e3:c3:20:49:e0:36:ea:da:12:0c:09:01:77:5b:fd: 8b:b1:ce:a2:70:e9:a3:ab:32:fd:db:c6:3c:ef:1c:d1:5d:6a: 74:ca:22:24:ec:bd:01:a6:79:cb:52:74:a8:ad:4f:93:fe:cc: 70:67:44:8d -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUFr31oQjHdCDeiZ5z+vcEkCfkzJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy REMzNzlGMDAeFw0yNjAyMTIxMzMyMTZaFw0yNzAyMTExMzM3MTZaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjUwMDEwQTQ2NzI0MDRCN0RB RUI5RDQ2QzgzMUE3RjU5NjYzQUZFNzZBRDEzRkM3NjA2Q0NFM0Y4N0JCMjcxNjkw OUNENkVFQkY2QTlCRkU4Qzc0RkUzRURCREQ0MzA2QTRGQjgyMzQwMDhBMURFQjcx NjdGNzQxMUVGRDEyN0QxMDM2RjQ3NjMyODZBQTk2NjU4RkJBQjQzMDAzQjZBODk5 QThBNUZCN0Q4NTI3M0E5NUJCQkREQ0E1REM4RDY4NDE0RDA1MDhDNDAzRTMzM0E2 MjhEMzkyRkJFNjZEMTA0REQ4Mjk3MkNGM0U5ODM5MzMyMTk2QUMyQkIwRkIwQTUz MkU0RjA5M0MyQzA0Rjc0M0JCRTAyMTIzRTg2NDRDNjAxNzRENEMwQUZBRjNERTU5 MjYwMjUwMDEyQUQwNDE1ODRCMzQ1NkM2RkY4NjU1REQyMkQ5MjUxN0U0N0MyQjg1 MEM3QTU2Nzg0MEZCNzI2NDExRTRGMDY0NzJBQ0QwMjUxNkJFNkY3OTUzMEEyRUFG RjgzMzdDQUIzNDUzNDEzRTFDM0MyMTlBQTNDRjA4RjE0RjVEMEQ2QTZENjRGNDVF ODI4NUE4REQ2MTVFQzUwMTgwRDU0MUY1NTQ4MDM1RjM4NDg3MEU5QTc4MTcxRUYw N0Q1MTk5MTFGNTI1NTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtQAQpGckBLfa651GyDGn9ZZjr+dq0T/HYGzOP4e7JxaQnNbuv2qb /ox0/j7b3UMGpPuCNACKHetxZ/dBHv0SfRA29HYyhqqWZY+6tDADtqiZqKX7fYUn OpW7vdyl3I1oQU0FCMQD4zOmKNOS++ZtEE3YKXLPPpg5MyGWrCuw+wpTLk8JPCwE 90O74CEj6GRMYBdNTAr6895ZJgJQASrQQVhLNFbG/4ZV3SLZJRfkfCuFDHpWeED7 cmQR5PBkcqzQJRa+b3lTCi6v+DN8qzRTQT4cPCGao88I8U9dDWptZPRegoWo3WFe xQGA1UH1VIA184SHDpp4Fx7wfVGZEfUlVwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE FOnlHJA39twLeOMjO5RLYX9rHrRjMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0 TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1 Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3 OUYwLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnl5OXQ3YkFhWTFTUnRNamprWHdVTW5F Y3hZdWVxNjVkWjlMYVYxTkQyeUEvMS9BUzI4MTI0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQEu2zgMBUE AgACMA8DBQAoBARwAwYHKAQreAAwDQYJKoZIhvcNAQELBQADggEBAEmhiET6QPFN 2Asb5ab97Obn8RQW3U2O1MfG0/muQDpykEKf5iR+jGMj+QHNADl96xtzylVy5UKm ZieW1R+ak7O3VDDGAWWY6YnLyaJQu8doy/B8QHeLOaGatgGcYLyy2zkqAgfNrHvI 8Rz3k1sLxzNKhA/fbx/kpQciZ7dptGb1pBjv72Xgk4jM9Qr0Bh+MXVHVH+EuSVA6 GDjQQeM5wp16GTaMvsuYfNEyKCvLAQabg0/ed8Fw8jX1zT1SwUZ1VhmuB/XdzU26 kOPDIEngNuraEgwJAXdb/YuxzqJw6aOrMv3bxjzvHNFdanTKIiTsvQGmectSdKit T5P+zHBnRI0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:13:56 2026 by rpki-client