
$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
File: AS262493.roa (raw, json)
Hash identifier: o+ERI8I7fM29jpN5AZqR3FGD94OaUUEdIP2G5/oOVyQ=
Subject key identifier: 68:0F:C3:1A:73:9B:43:3D:1E:D7:C0:0E:62:1D:74:64:15:EA:58:B4
Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial: 5EB7F2F056645714EB6650D1594CBFF2D3D0AE44
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
Signing time: Fri 11 Sep 2026 19:17:34 +0000
ROA not before: Fri 11 Sep 2026 19:12:34 +0000
ROA not after: Fri 10 Sep 2027 19:17:34 +0000
asID: 262493
IP address blocks: 138.255.216.0/22 maxlen: 24
168.121.148.0/22 maxlen: 24
170.82.132.0/22 maxlen: 24
177.8.48.0/21 maxlen: 24
177.55.48.0/20 maxlen: 24
2804:fec::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 10:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b7:f2:f0:56:64:57:14:eb:66:50:d1:59:4c:bf:f2:d3:d0:ae:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Validity
Not Before: Sep 11 19:12:34 2026 GMT
Not After : Sep 10 19:17:34 2027 GMT
Subject: CN=680FC31A739B433D1ED7C00E621D746415EA58B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:45:71:28:58:69:1a:80:ba:9b:ed:3a:29:
c2:d0:20:20:89:f0:6f:c5:83:6c:46:d6:3d:1d:02:
ea:8f:e3:cc:61:70:dc:03:b1:42:23:2b:3e:02:b6:
b2:05:5f:7c:0e:3d:c7:a2:85:fd:8b:03:87:4f:1c:
e8:77:36:15:cf:1a:2e:7b:bb:54:03:0a:84:1b:2b:
cd:17:7d:a9:a6:74:b4:19:eb:97:58:f4:b1:f8:39:
8a:4e:5d:4f:25:53:b6:b0:13:3e:5a:c1:75:95:00:
05:39:09:2c:00:4e:25:0a:a3:21:a4:ba:41:24:4b:
a5:8c:77:aa:f4:19:1e:75:02:d2:00:65:15:25:31:
dd:a4:c3:79:66:fc:b2:5f:da:eb:36:72:32:19:4b:
6a:c8:c0:fc:df:c3:42:17:ab:27:56:aa:00:4d:3a:
b3:51:44:59:6f:40:9d:b9:a2:03:4f:c3:35:21:f3:
96:65:c1:de:f3:79:41:cf:0f:8d:41:11:b4:4e:c3:
f8:5d:a1:f1:f2:ad:26:3b:4e:54:08:46:cd:b5:58:
22:34:b4:5b:a3:df:cc:b1:1f:64:16:8a:06:43:cc:
e3:83:2d:07:1c:4a:5d:a8:ea:4d:1b:1d:9b:8f:98:
13:72:20:0c:79:53:8e:4e:f9:c8:80:92:e4:3a:17:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:C3:1A:73:9B:43:3D:1E:D7:C0:0E:62:1D:74:64:15:EA:58:B4
X509v3 Authority Key Identifier:
keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.216.0/22
168.121.148.0/22
170.82.132.0/22
177.8.48.0/21
177.55.48.0/20
IPv6:
2804:fec::/32
Signature Algorithm: sha256WithRSAEncryption
7f:77:2c:f4:0c:89:9d:36:88:a6:0d:98:9d:73:33:b5:c2:f2:
94:e4:13:ec:ea:5c:12:c8:f8:22:c0:3d:ec:15:bd:34:4f:9a:
2e:39:2a:32:b2:7c:52:b2:3e:56:0c:03:b1:fe:9d:ef:08:bd:
aa:c0:78:fe:91:40:28:15:ad:27:94:b6:5e:d6:2a:e5:ce:8e:
7f:e2:73:48:ea:26:62:49:37:4d:6f:95:67:ad:ec:20:3a:2a:
98:35:22:58:60:b9:91:b5:21:68:1f:32:ee:95:20:07:24:6d:
b8:84:be:c2:e9:11:ea:e7:74:f3:7a:e9:e2:32:2e:cc:63:0d:
74:35:69:90:4f:35:4d:45:f9:1f:fd:09:42:70:b1:ad:94:5e:
e1:e1:07:93:df:be:ce:74:27:73:a9:17:84:d5:04:62:ac:22:
fd:c2:29:89:0c:e8:58:0b:24:ab:62:d5:24:57:ae:70:50:78:
4a:18:88:d0:f0:1c:7e:9b:15:37:bb:31:39:74:b1:f3:9a:4d:
c2:56:a5:fe:a3:88:fc:73:31:6d:1e:8f:f1:c7:e9:4e:e7:56:
27:82:ca:ac:d9:6c:ec:d9:61:8a:84:ab:e4:97:12:e9:c5:79:
64:2e:0f:31:c9:9d:f2:3d:e8:cc:46:e0:41:86:6f:3c:c1:16:
3e:bd:83:e3
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUXrfy8FZkVxTrZlDRWUy/8tPQrkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE
M0FDMjYxODAeFw0yNjA5MTExOTEyMzRaFw0yNzA5MTAxOTE3MzRaMDMxMTAvBgNV
BAMTKDY4MEZDMzFBNzM5QjQzM0QxRUQ3QzAwRTYyMUQ3NDY0MTVFQTU4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mUVxKFhpGoC6m+06KcLQICCJ
8G/Fg2xG1j0dAuqP48xhcNwDsUIjKz4CtrIFX3wOPceihf2LA4dPHOh3NhXPGi57
u1QDCoQbK80XfammdLQZ65dY9LH4OYpOXU8lU7awEz5awXWVAAU5CSwATiUKoyGk
ukEkS6WMd6r0GR51AtIAZRUlMd2kw3lm/LJf2us2cjIZS2rIwPzfw0IXqydWqgBN
OrNRRFlvQJ25ogNPwzUh85Zlwd7zeUHPD41BEbROw/hdofHyrSY7TlQIRs21WCI0
tFuj38yxH2QWigZDzOODLQccSl2o6k0bHZuPmBNyIAx5U45O+ciAkuQ6F1VtAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQUaA/DGnObQz0e18AOYh10ZBXqWLQwHwYDVR0j
BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE
MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjYy
NDkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/
BDcwNTAkBAIAATAeAwQCiv/YAwQCqHmUAwQCqlKEAwQDsQgwAwQEsTcwMA0EAgAC
MAcDBQAoBA/sMA0GCSqGSIb3DQEBCwUAA4IBAQB/dyz0DImdNoimDZidczO1wvKU
5BPs6lwSyPgiwD3sFb00T5ouOSoysnxSsj5WDAOx/p3vCL2qwHj+kUAoFa0nlLZe
1irlzo5/4nNI6iZiSTdNb5VnrewgOiqYNSJYYLmRtSFoHzLulSAHJG24hL7C6RHq
53TzeuniMi7MYw10NWmQTzVNRfkf/QlCcLGtlF7h4QeT377OdCdzqReE1QRirCL9
wimJDOhYCySrYtUkV65wUHhKGIjQ8Bx+mxU3uzE5dLHzmk3CVqX+o4j8czFtHo/x
x+lO51Yngsqs2Wzs2WGKhKvklxLpxXlkLg8xyZ3yPejMRuBBhm88wRY+vYPj
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:46:29 2026 by rpki-client