
$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262509.roa
File: AS262509.roa (raw, json)
Hash identifier: MM1K48ASA5HHvARL/iSQbvrR6R+iec5HfDuYdlD0gUU=
Subject key identifier: 28:48:7A:5D:83:97:D9:83:74:18:B5:B4:B1:D3:1E:1C:F0:96:11:5D
Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial: 7DB50176DDBA6041F7B14C4CD523B49C71B762B1
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262509.roa
Signing time: Tue 15 Sep 2026 19:51:48 +0000
ROA not before: Tue 15 Sep 2026 19:46:48 +0000
ROA not after: Tue 14 Sep 2027 19:51:48 +0000
asID: 262509
IP address blocks: 131.196.76.0/22 maxlen: 24
168.121.52.0/22 maxlen: 24
170.247.52.0/22 maxlen: 24
177.67.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 10:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b5:01:76:dd:ba:60:41:f7:b1:4c:4c:d5:23:b4:9c:71:b7:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Validity
Not Before: Sep 15 19:46:48 2026 GMT
Not After : Sep 14 19:51:48 2027 GMT
Subject: CN=28487A5D8397D9837418B5B4B1D31E1CF096115D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:8f:c5:3f:30:f8:4c:4e:36:25:ff:bc:70:
93:54:06:3d:fe:3f:c1:21:12:18:a6:1e:ca:fd:52:
6a:9c:5a:f1:d6:71:ee:5a:d2:9a:34:8b:98:15:46:
ea:8a:12:a6:90:32:63:00:37:63:fd:ba:63:37:07:
4f:75:72:74:33:67:1d:42:f2:8c:92:af:9e:ec:a1:
9e:70:6a:a0:29:7f:4a:d9:8f:01:34:2b:e0:b8:73:
90:2b:74:73:26:5a:85:22:0d:b5:2e:3e:e7:4d:3b:
04:fe:bd:69:e8:ca:74:29:85:db:80:55:78:85:10:
c0:eb:3e:a9:ab:1c:25:7c:bd:98:b7:72:dd:b1:d5:
44:f4:94:18:ce:e7:95:65:b9:13:37:18:9e:53:89:
14:4b:f5:1c:cc:ae:1b:ec:08:4d:59:90:f7:e5:90:
90:fa:88:2a:65:99:2a:8d:5e:c5:7b:51:ac:19:7b:
96:bd:b3:62:9f:eb:e8:6f:17:e2:3b:07:99:bf:77:
cf:1c:ed:4c:b9:92:33:8a:11:6b:e1:b6:64:ef:40:
47:8a:e0:ec:e9:47:65:98:17:8d:98:21:62:c0:0c:
ad:8f:ab:a9:39:3c:16:68:94:e7:e2:bc:27:34:d2:
d9:28:87:b9:65:71:8f:4b:0a:76:1a:b5:25:cc:93:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:7A:5D:83:97:D9:83:74:18:B5:B4:B1:D3:1E:1C:F0:96:11:5D
X509v3 Authority Key Identifier:
keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.76.0/22
168.121.52.0/22
170.247.52.0/22
177.67.0.0/21
Signature Algorithm: sha256WithRSAEncryption
75:ba:b0:67:b7:7b:39:5b:bb:51:dc:7f:6b:cd:0c:65:bb:cf:
17:a7:9a:03:e8:b6:3c:92:02:bb:cc:e5:2f:94:55:76:2e:0e:
cf:98:2a:ac:7a:b0:49:7b:28:1b:55:e5:65:89:66:1f:e9:8c:
32:e7:58:a7:09:6a:89:3f:29:a3:05:3b:f3:b8:70:32:11:b9:
14:6a:14:c0:2c:d0:35:8a:08:7c:f9:2d:1b:d1:f3:dc:92:bb:
88:ef:ad:23:38:52:fd:21:4b:07:ef:7b:2d:41:5e:3c:47:65:
56:2b:79:fe:c5:9a:1f:2e:ea:32:58:56:7b:39:ec:65:d0:90:
6c:08:c4:44:ed:6f:20:8c:43:5d:d5:0b:c2:ef:5c:7e:7e:44:
80:1f:b6:33:2b:db:6a:29:49:00:bc:68:03:92:b7:ed:df:95:
7e:e8:ae:0a:9a:a1:0a:ef:b2:18:4d:50:55:90:ed:0d:c7:f9:
cf:ee:8c:19:f3:d8:e6:cd:22:cf:fe:a4:1f:1d:e6:7d:af:38:
c9:64:93:f6:e1:3d:73:54:6d:52:cc:a4:f9:2a:bb:b9:79:e2:
b0:6f:22:c7:bd:f3:32:ee:d8:31:8f:89:d3:a1:cf:36:24:ed:
db:4d:bf:29:30:55:9b:44:ce:26:46:e0:fc:62:07:24:3b:38:
bb:0f:45:c8
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUfbUBdt26YEH3sUxM1SO0nHG3YrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE
M0FDMjYxODAeFw0yNjA5MTUxOTQ2NDhaFw0yNzA5MTQxOTUxNDhaMDMxMTAvBgNV
BAMTKDI4NDg3QTVEODM5N0Q5ODM3NDE4QjVCNEIxRDMxRTFDRjA5NjExNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDY/FPzD4TE42Jf+8cJNUBj3+
P8EhEhimHsr9UmqcWvHWce5a0po0i5gVRuqKEqaQMmMAN2P9umM3B091cnQzZx1C
8oySr57soZ5waqApf0rZjwE0K+C4c5ArdHMmWoUiDbUuPudNOwT+vWnoynQphduA
VXiFEMDrPqmrHCV8vZi3ct2x1UT0lBjO55VluRM3GJ5TiRRL9RzMrhvsCE1ZkPfl
kJD6iCplmSqNXsV7UawZe5a9s2Kf6+hvF+I7B5m/d88c7Uy5kjOKEWvhtmTvQEeK
4OzpR2WYF42YIWLADK2Pq6k5PBZolOfivCc00tkoh7llcY9LCnYatSXMk18ZAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUKEh6XYOX2YN0GLW0sdMeHPCWEV0wHwYDVR0j
BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE
MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjYy
NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/
BCIwIDAeBAIAATAYAwQCg8RMAwQCqHk0AwQCqvc0AwQDsUMAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1urBnt3s5W7tR3H9rzQxlu88Xp5oD6LY8kgK7zOUvlFV2Lg7PmCqs
erBJeygbVeVliWYf6Ywy51inCWqJPymjBTvzuHAyEbkUahTALNA1igh8+S0b0fPc
kruI760jOFL9IUsH73stQV48R2VWK3n+xZofLuoyWFZ7Oexl0JBsCMRE7W8gjENd
1QvC71x+fkSAH7YzK9tqKUkAvGgDkrft35V+6K4KmqEK77IYTVBVkO0Nx/nP7owZ
89jmzSLP/qQfHeZ9rzjJZJP24T1zVG1SzKT5Kru5eeKwbyLHvfMy7tgxj4nToc82
JO3bTb8pMFWbRM4mRuD8YgckOzi7D0XI
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:45:28 2026 by rpki-client