$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa File: AS268323.roa (raw, json) Hash identifier: n8yN7uCaEBG1GXmPzgcHBCa4oipqa4gRRHorkqtBOB8= Subject key identifier: 48:AC:CD:87:31:F6:BD:D2:78:7C:73:4A:66:4F:7C:CF:B5:EC:CE:35 Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 3598FEB5F0759473F98E7FFDCD8DACCE36C1BB8A Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa Signing time: Tue 15 Sep 2026 19:36:44 +0000 ROA not before: Tue 15 Sep 2026 19:31:44 +0000 ROA not after: Tue 14 Sep 2027 19:36:44 +0000 asID: 268323 IP address blocks: 45.175.188.0/22 maxlen: 24 45.232.88.0/22 maxlen: 24 45.238.116.0/22 maxlen: 24 170.246.68.0/22 maxlen: 24 177.53.128.0/21 maxlen: 24 177.125.184.0/21 maxlen: 24 187.45.48.0/20 maxlen: 24 187.95.48.0/20 maxlen: 24 187.95.176.0/20 maxlen: 24 191.37.144.0/21 maxlen: 24 192.141.196.0/22 maxlen: 24 200.9.160.0/22 maxlen: 24 201.158.40.0/21 maxlen: 24 2804:4f60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 10:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:98:fe:b5:f0:75:94:73:f9:8e:7f:fd:cd:8d:ac:ce:36:c1:bb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Sep 15 19:31:44 2026 GMT Not After : Sep 14 19:36:44 2027 GMT Subject: CN=48ACCD8731F6BDD2787C734A664F7CCFB5ECCE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:dc:e9:d6:73:5b:1b:48:87:a5:5e:d0:a5: a6:c2:06:ab:20:d4:37:7a:87:c1:8b:22:d7:21:72: f8:90:e3:b6:72:a6:eb:ee:5c:d3:53:dc:73:f6:4a: c0:c2:00:9a:90:23:bd:00:a2:49:f7:94:c6:c9:52: db:44:de:91:ab:b3:7c:51:5c:5b:bb:e8:a9:44:93: 3b:01:be:2a:cc:bc:05:3b:10:49:fd:81:35:8c:96: 90:c2:b9:da:89:7a:93:31:cb:8a:5b:47:22:f1:cf: 89:c2:4b:aa:64:3f:c2:ac:ec:67:cd:9e:c8:dc:d0: d5:e2:c5:5c:c3:03:2d:6e:9d:13:81:d9:10:ff:49: 95:27:cf:e0:a6:83:ac:2f:47:ea:be:fc:10:40:e0: a4:14:70:7a:4b:e3:99:49:02:1f:08:23:43:1e:16: 5f:6d:c0:4f:7d:46:be:b6:2b:07:04:b3:b2:34:3f: 16:88:42:06:f5:ea:d2:e9:4d:bb:f2:b8:5c:71:48: 4d:28:dd:bb:46:a9:a5:f1:32:35:2c:6d:b6:54:37: 94:4e:97:7f:d9:38:86:ec:d0:51:8f:e1:1f:54:12: c7:78:55:fd:8a:db:2e:5d:86:38:69:21:13:b7:b7: fe:4c:74:34:36:e1:9f:fb:25:ab:f2:ea:eb:8d:6d: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AC:CD:87:31:F6:BD:D2:78:7C:73:4A:66:4F:7C:CF:B5:EC:CE:35 X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.188.0/22 45.232.88.0/22 45.238.116.0/22 170.246.68.0/22 177.53.128.0/21 177.125.184.0/21 187.45.48.0/20 187.95.48.0/20 187.95.176.0/20 191.37.144.0/21 192.141.196.0/22 200.9.160.0/22 201.158.40.0/21 IPv6: 2804:4f60::/32 Signature Algorithm: sha256WithRSAEncryption 63:d7:5d:9b:3d:ea:5d:8f:c8:c1:78:fc:43:90:13:a3:72:39: 34:a7:63:ad:ac:f8:c1:f9:34:06:55:4e:eb:00:c3:c9:13:cf: 06:74:b4:54:9c:56:1b:ab:b7:d1:1f:28:19:da:6c:89:fc:f4: 33:c9:12:bd:56:17:89:0f:3c:c4:26:97:a7:da:b2:7d:36:74: 6e:7d:0d:07:d6:c0:ed:7d:cf:b0:f7:0b:ac:df:0b:af:95:39: 63:62:51:cf:93:f2:ce:c7:67:53:82:46:f2:e4:3f:12:d0:16: 59:05:65:71:05:4b:82:5a:74:ef:ff:cf:b8:0e:55:9f:8c:f6: b4:d3:a9:f9:2f:ab:26:13:33:01:fe:79:2d:4f:0a:57:84:90: 7b:1d:77:07:f8:b3:91:aa:84:42:d6:f0:38:c7:64:f2:b0:96: 18:a7:93:5d:8a:7a:94:b1:26:36:23:c1:27:b1:9f:5d:b5:3a: 4c:74:59:8d:b4:58:47:1c:8a:c2:cc:fb:cb:15:e4:be:f6:94: 48:a3:e5:49:06:d9:54:00:6e:c3:f8:41:62:9a:e2:0f:54:20: f6:fb:d7:c5:4a:54:5f:c3:b3:2c:03:8f:4c:0c:28:b2:3e:14: e2:c4:0e:49:bc:39:db:e3:9d:77:d4:6f:65:b7:65:97:95:bf: f6:81:7a:d6 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUNZj+tfB1lHP5jn/9zY2szjbBu4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA5MTUxOTMxNDRaFw0yNzA5MTQxOTM2NDRaMDMxMTAvBgNV BAMTKDQ4QUNDRDg3MzFGNkJERDI3ODdDNzM0QTY2NEY3Q0NGQjVFQ0NFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniNzp1nNbG0iHpV7QpabCBqsg 1Dd6h8GLItchcviQ47ZypuvuXNNT3HP2SsDCAJqQI70Aokn3lMbJUttE3pGrs3xR XFu76KlEkzsBvirMvAU7EEn9gTWMlpDCudqJepMxy4pbRyLxz4nCS6pkP8Ks7GfN nsjc0NXixVzDAy1unROB2RD/SZUnz+Cmg6wvR+q+/BBA4KQUcHpL45lJAh8II0Me Fl9twE99Rr62KwcEs7I0PxaIQgb16tLpTbvyuFxxSE0o3btGqaXxMjUsbbZUN5RO l3/ZOIbs0FGP4R9UEsd4Vf2K2y5dhjhpIRO3t/5MdDQ24Z/7Javy6uuNbRjfAgMB AAGjggJzMIICbzAdBgNVHQ4EFgQUSKzNhzH2vdJ4fHNKZk98z7XszjUwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjY4 MzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/ BGcwZTBUBAIAATBOAwQCLa+8AwQCLehYAwQCLe50AwQCqvZEAwQDsTWAAwQDsX24 AwQEuy0wAwQEu18wAwQEu1+wAwQDvyWQAwQCwI3EAwQCyAmgAwQDyZ4oMA0EAgAC MAcDBQAoBE9gMA0GCSqGSIb3DQEBCwUAA4IBAQBj112bPepdj8jBePxDkBOjcjk0 p2OtrPjB+TQGVU7rAMPJE88GdLRUnFYbq7fRHygZ2myJ/PQzyRK9VheJDzzEJpen 2rJ9NnRufQ0H1sDtfc+w9wus3wuvlTljYlHPk/LOx2dTgkby5D8S0BZZBWVxBUuC WnTv/8+4DlWfjPa006n5L6smEzMB/nktTwpXhJB7HXcH+LORqoRC1vA4x2TysJYY p5NdinqUsSY2I8EnsZ9dtTpMdFmNtFhHHIrCzPvLFeS+9pRIo+VJBtlUAG7D+EFi muIPVCD2+9fFSlRfw7MsA49MDCiyPhTixA5JvDnb45131G9lt2WXlb/2gXrW -----END CERTIFICATE-----Generated at Sat Oct 10 11:45:28 2026 by rpki-client