$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS263665.roa File: AS263665.roa (raw, json) Hash identifier: mj7kCzKj94MAwbhnnmpyoqE4fne9z5BMo+2ScF2Dj4M= Subject key identifier: 83:BE:6F:3D:2A:4C:E1:6B:DF:97:EA:F8:9F:B8:F1:C9:81:A7:CB:72 Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 710F8735DFEED5E4706B7186EABA1A7140C5FED6 Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS263665.roa Signing time: Fri 28 Aug 2026 15:20:56 +0000 ROA not before: Fri 28 Aug 2026 15:15:56 +0000 ROA not after: Fri 27 Aug 2027 15:20:56 +0000 asID: 263665 IP address blocks: 45.165.20.0/22 maxlen: 24 45.227.188.0/22 maxlen: 24 131.161.108.0/22 maxlen: 24 131.255.156.0/22 maxlen: 24 138.255.172.0/22 maxlen: 24 168.196.20.0/22 maxlen: 24 170.150.112.0/22 maxlen: 24 170.150.204.0/22 maxlen: 24 191.241.32.0/21 maxlen: 24 2804:1134::/32 maxlen: 48 2804:343c::/32 maxlen: 48 2804:47c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 10:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0f:87:35:df:ee:d5:e4:70:6b:71:86:ea:ba:1a:71:40:c5:fe:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Aug 28 15:15:56 2026 GMT Not After : Aug 27 15:20:56 2027 GMT Subject: CN=83BE6F3D2A4CE16BDF97EAF89FB8F1C981A7CB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:70:9c:ea:7d:58:eb:73:73:1a:62:71:25: e9:58:b2:4f:77:b2:32:03:e4:4f:ad:7e:91:27:ed: 54:2c:cc:0e:68:53:17:47:c6:57:60:cf:1e:58:7c: dd:80:ad:18:97:fe:8a:ed:86:24:ff:d6:e1:5a:53: 37:cc:d3:ed:3f:8d:30:0d:98:bf:70:26:b7:4e:84: dc:37:1b:94:13:4a:3e:20:c6:28:28:99:eb:49:5e: 79:cc:8d:45:a3:8e:a2:c1:17:f4:8f:8e:30:e4:2f: 24:15:7b:70:4c:30:9e:21:a0:f1:61:0c:b5:cc:36: 66:32:e3:7c:bf:ce:a0:03:7b:72:15:25:ee:c0:fc: 07:b3:6c:a3:46:f1:4f:7e:68:15:47:be:1e:e9:df: 0e:6f:0b:ed:97:60:c8:7a:7f:5c:ef:80:8f:89:3b: 36:64:86:5b:8f:ee:fe:3c:3d:07:1b:1b:6d:8a:06: 1b:44:4b:ed:d7:aa:05:55:14:d2:ea:d3:fa:56:3a: f2:af:90:01:08:ad:02:32:40:f5:b7:a0:32:aa:2e: ea:7f:b8:a1:a5:2d:2a:a0:99:a8:07:68:da:61:47: 85:4d:7b:f4:f7:54:be:0e:83:23:5f:ae:1c:1c:d3: 1c:58:03:df:ba:7e:c5:bd:13:10:72:de:82:9f:cd: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BE:6F:3D:2A:4C:E1:6B:DF:97:EA:F8:9F:B8:F1:C9:81:A7:CB:72 X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS263665.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.20.0/22 45.227.188.0/22 131.161.108.0/22 131.255.156.0/22 138.255.172.0/22 168.196.20.0/22 170.150.112.0/22 170.150.204.0/22 191.241.32.0/21 IPv6: 2804:1134::/32 2804:343c::/32 2804:47c0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:22:f7:bf:ef:09:c5:52:1b:37:ac:e4:fc:52:58:c1:7b:f6: fc:c3:2b:10:e8:a9:79:de:14:60:e3:82:dc:96:c4:31:de:6f: 57:8f:59:79:3e:a5:b2:ef:1e:78:03:52:20:bb:e6:80:d6:e8: 79:9b:fc:6b:bf:96:d0:33:9b:5f:89:8d:d3:e2:2e:84:f3:4b: cb:3e:4b:24:27:51:d4:26:5f:1c:2a:b9:cb:5c:57:69:a8:50: 57:5e:60:92:25:f5:86:c3:e6:db:ec:71:de:77:f2:f2:50:6d: 99:be:90:91:48:2f:c6:68:b2:f3:87:ea:0a:88:2a:d3:48:cf: 2d:5c:0a:01:4c:eb:47:92:d0:2d:89:af:cb:00:26:06:7b:b2: 7d:4e:82:25:5b:fa:9a:06:5b:4b:27:ee:e1:a8:cc:79:98:d4: 45:60:1e:cb:d3:37:0c:77:61:7e:af:ea:97:64:94:74:3f:22: f1:02:64:8f:f3:33:bc:cd:b7:5e:6a:37:46:45:25:eb:64:e4: 15:15:66:db:bd:73:6c:d5:07:1d:93:37:82:e3:c0:a8:4b:28: 2d:3c:ce:c2:cd:b3:53:9e:78:7e:43:97:4c:b3:24:7b:1a:24: 0a:d1:78:67:62:20:f6:a3:c4:3a:f7:10:2d:15:72:9f:5f:49: 36:3c:de:6f -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUcQ+HNd/u1eRwa3GG6roacUDF/tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA4MjgxNTE1NTZaFw0yNzA4MjcxNTIwNTZaMDMxMTAvBgNV BAMTKDgzQkU2RjNEMkE0Q0UxNkJERjk3RUFGODlGQjhGMUM5ODFBN0NCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tXCc6n1Y63NzGmJxJelYsk93 sjID5E+tfpEn7VQszA5oUxdHxldgzx5YfN2ArRiX/orthiT/1uFaUzfM0+0/jTAN mL9wJrdOhNw3G5QTSj4gxigometJXnnMjUWjjqLBF/SPjjDkLyQVe3BMMJ4hoPFh DLXMNmYy43y/zqADe3IVJe7A/AezbKNG8U9+aBVHvh7p3w5vC+2XYMh6f1zvgI+J OzZkhluP7v48PQcbG22KBhtES+3XqgVVFNLq0/pWOvKvkAEIrQIyQPW3oDKqLup/ uKGlLSqgmagHaNphR4VNe/T3VL4OgyNfrhwc0xxYA9+6fsW9ExBy3oKfzamnAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQUg75vPSpM4Wvfl+r4n7jxyYGny3IwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjYz NjY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/ BF0wWzA8BAIAATA2AwQCLaUUAwQCLeO8AwQCg6FsAwQCg/+cAwQCiv+sAwQCqMQU AwQCqpZwAwQCqpbMAwQDv/EgMBsEAgACMBUDBQAoBBE0AwUAKAQ0PAMFACgER8Aw DQYJKoZIhvcNAQELBQADggEBAGsi97/vCcVSGzes5PxSWMF79vzDKxDoqXneFGDj gtyWxDHeb1ePWXk+pbLvHngDUiC75oDW6Hmb/Gu/ltAzm1+JjdPiLoTzS8s+SyQn UdQmXxwquctcV2moUFdeYJIl9YbD5tvscd538vJQbZm+kJFIL8ZosvOH6gqIKtNI zy1cCgFM60eS0C2Jr8sAJgZ7sn1OgiVb+poGW0sn7uGozHmY1EVgHsvTNwx3YX6v 6pdklHQ/IvECZI/zM7zNt15qN0ZFJetk5BUVZtu9c2zVBx2TN4LjwKhLKC08zsLN s1OeeH5Dl0yzJHsaJArReGdiIPajxDr3EC0Vcp9fSTY83m8= -----END CERTIFICATE-----Generated at Sat Oct 10 22:34:52 2026 by rpki-client