$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS271724.roa File: AS271724.roa (raw, json) Hash identifier: ZWZJeVlwvUAAJ+jEwcWDDHN1Y4TuYpf0YX3PL5aM8YQ= Subject key identifier: 43:0C:F7:27:DD:49:C4:43:B6:0D:B2:31:B1:7A:75:3D:12:FC:BA:DA Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 59F03844DDF0F65897BD2CDC32DC03491F6F9A48 Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS271724.roa Signing time: Fri 11 Sep 2026 21:14:59 +0000 ROA not before: Fri 11 Sep 2026 21:09:59 +0000 ROA not after: Fri 10 Sep 2027 21:14:59 +0000 asID: 271724 IP address blocks: 131.221.68.0/22 maxlen: 24 138.117.124.0/22 maxlen: 24 143.255.112.0/22 maxlen: 24 170.0.204.0/22 maxlen: 24 170.245.100.0/22 maxlen: 24 177.75.192.0/19 maxlen: 24 179.191.128.0/19 maxlen: 24 187.110.208.0/20 maxlen: 24 189.50.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 10:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f0:38:44:dd:f0:f6:58:97:bd:2c:dc:32:dc:03:49:1f:6f:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Sep 11 21:09:59 2026 GMT Not After : Sep 10 21:14:59 2027 GMT Subject: CN=430CF727DD49C443B60DB231B17A753D12FCBADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:8b:7b:c9:2f:c9:14:58:90:fc:32:7d:f0: 01:cb:b9:06:ae:f2:ac:e3:b6:f5:65:e0:e4:cd:67: 93:98:20:cb:b9:6a:f1:f2:85:05:34:7c:3d:de:a2: 14:f1:0e:e2:70:8b:50:b2:72:dc:63:57:4c:e9:bf: fc:40:2f:fb:61:b8:d5:b2:bc:95:5c:cb:88:00:ec: 7b:75:83:9b:57:f0:32:8c:9f:88:37:12:36:89:d3: be:7c:6b:c0:02:e4:9b:fe:9f:a0:bb:bf:0d:f3:0b: d4:1b:b2:56:fc:b6:2d:12:69:06:c7:4b:4e:06:0a: a3:e4:5b:4f:d1:26:79:19:7a:fd:94:7c:b2:b8:ce: 1e:93:ac:1f:2b:62:d9:c0:37:17:3a:6f:ac:54:f4: c9:57:34:dd:92:c7:5c:dd:2d:3f:de:f2:04:d1:98: a8:c0:16:75:31:ee:13:df:cf:e8:50:08:eb:77:c2: 77:fe:02:28:80:1c:9d:20:70:cb:53:07:59:13:96: 86:95:8d:bd:5e:06:0a:06:66:b3:5b:75:d2:d8:a6: 84:8b:2f:13:f3:33:21:48:f3:2e:32:d5:1e:f6:d9: 52:c0:73:a6:17:b4:1e:6d:2e:90:0d:25:ef:6d:c0: 83:3a:99:be:16:48:d7:b2:cc:1a:67:14:8a:dc:e2: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0C:F7:27:DD:49:C4:43:B6:0D:B2:31:B1:7A:75:3D:12:FC:BA:DA X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS271724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.68.0/22 138.117.124.0/22 143.255.112.0/22 170.0.204.0/22 170.245.100.0/22 177.75.192.0/19 179.191.128.0/19 187.110.208.0/20 189.50.144.0/20 Signature Algorithm: sha256WithRSAEncryption 42:da:7a:d2:f7:49:6d:fe:d8:4d:e9:3d:2b:00:2f:2f:91:3a: 00:2d:68:0e:0d:0b:3e:e6:57:b9:81:68:81:52:c3:fd:54:8c: ec:9b:b0:ce:ec:f6:ce:3c:c7:46:28:a3:7a:43:dd:e9:0e:bd: 39:84:7e:d2:c2:0c:d4:f0:4b:5d:9f:69:28:1c:8d:3b:4c:79: 3c:38:1d:54:33:dd:e9:22:d5:6c:10:86:3a:75:d5:1f:c5:dc: 13:8b:fe:4f:ac:be:24:d4:a1:79:fa:9d:f2:e9:6f:7a:1d:6e: 23:c8:e2:6c:eb:ea:e5:70:d9:e1:f9:07:d3:d2:b1:96:98:7f: c0:f3:f7:e1:df:88:fe:c6:dc:bd:f3:41:5b:87:48:cd:fb:f0: af:92:0b:28:71:49:eb:eb:08:39:15:80:36:a5:5f:5e:33:41: 43:70:46:ca:08:6a:3a:43:86:25:ea:a2:a1:a0:42:f4:2b:0a: 59:4a:f7:c8:b2:3f:d7:0c:00:f8:35:f1:8f:96:6d:dc:b2:67: bb:2a:7f:d6:d8:8c:30:b2:ff:44:6e:4a:66:56:8c:0f:d1:28: 15:1d:53:78:2b:02:41:ee:66:7c:e7:05:17:b4:a5:97:67:b3: b6:f5:91:ba:62:75:4a:77:5a:33:99:83:d7:8b:f3:ce:ef:6e: 16:71:3f:87 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUWfA4RN3w9liXvSzcMtwDSR9vmkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA5MTEyMTA5NTlaFw0yNzA5MTAyMTE0NTlaMDMxMTAvBgNV BAMTKDQzMENGNzI3REQ0OUM0NDNCNjBEQjIzMUIxN0E3NTNEMTJGQ0JBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWIt7yS/JFFiQ/DJ98AHLuQau 8qzjtvVl4OTNZ5OYIMu5avHyhQU0fD3eohTxDuJwi1CyctxjV0zpv/xAL/thuNWy vJVcy4gA7Ht1g5tX8DKMn4g3EjaJ0758a8AC5Jv+n6C7vw3zC9Qbslb8ti0SaQbH S04GCqPkW0/RJnkZev2UfLK4zh6TrB8rYtnANxc6b6xU9MlXNN2Sx1zdLT/e8gTR mKjAFnUx7hPfz+hQCOt3wnf+AiiAHJ0gcMtTB1kTloaVjb1eBgoGZrNbddLYpoSL LxPzMyFI8y4y1R722VLAc6YXtB5tLpANJe9twIM6mb4WSNeyzBpnFIrc4n55AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUQwz3J91JxEO2DbIxsXp1PRL8utowHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjcx NzI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/ BEAwPjA8BAIAATA2AwQCg91EAwQCinV8AwQCj/9wAwQCqgDMAwQCqvVkAwQFsUvA AwQFs7+AAwQEu27QAwQEvTKQMA0GCSqGSIb3DQEBCwUAA4IBAQBC2nrS90lt/thN 6T0rAC8vkToALWgODQs+5le5gWiBUsP9VIzsm7DO7PbOPMdGKKN6Q93pDr05hH7S wgzU8Etdn2koHI07THk8OB1UM93pItVsEIY6ddUfxdwTi/5PrL4k1KF5+p3y6W96 HW4jyOJs6+rlcNnh+QfT0rGWmH/A8/fh34j+xty980Fbh0jN+/CvkgsocUnr6wg5 FYA2pV9eM0FDcEbKCGo6Q4Yl6qKhoEL0KwpZSvfIsj/XDAD4NfGPlm3csme7Kn/W 2Iwwsv9EbkpmVowP0SgVHVN4KwJB7mZ85wUXtKWXZ7O29ZG6YnVKd1ozmYPXi/PO 724WcT+H -----END CERTIFICATE-----Generated at Sat Oct 10 11:45:38 2026 by rpki-client