$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa File: AS28270.roa (raw, json) Hash identifier: BshITvCLKyGRC9IhIHWHIx6Lut+cFZL1YzFfKNe2GIw= Subject key identifier: A3:67:B3:2C:DE:1D:C9:F8:0F:89:80:88:2E:05:91:A7:46:7C:1D:70 Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 5925182743965E35C6CD4EEF1C1A0033E990514A Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa Signing time: Tue 15 Sep 2026 21:13:35 +0000 ROA not before: Tue 15 Sep 2026 21:08:35 +0000 ROA not after: Tue 14 Sep 2027 21:13:35 +0000 asID: 28270 IP address blocks: 131.221.68.0/22 maxlen: 24 138.117.124.0/22 maxlen: 24 138.121.220.0/22 maxlen: 24 143.255.112.0/22 maxlen: 24 160.238.220.0/22 maxlen: 24 168.228.128.0/22 maxlen: 24 168.232.116.0/22 maxlen: 24 170.0.204.0/22 maxlen: 24 170.245.100.0/22 maxlen: 24 177.66.64.0/21 maxlen: 24 177.70.128.0/20 maxlen: 24 177.87.144.0/21 maxlen: 24 179.191.128.0/19 maxlen: 24 187.18.128.0/17 maxlen: 24 187.110.208.0/20 maxlen: 24 189.45.64.0/18 maxlen: 24 189.50.144.0/20 maxlen: 24 200.94.240.0/22 maxlen: 24 201.149.120.0/22 maxlen: 24 2804:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 10:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:25:18:27:43:96:5e:35:c6:cd:4e:ef:1c:1a:00:33:e9:90:51:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Sep 15 21:08:35 2026 GMT Not After : Sep 14 21:13:35 2027 GMT Subject: CN=A367B32CDE1DC9F80F8980882E0591A7467C1D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:cb:24:0f:e6:2d:f9:e1:bf:89:31:8e:fd: 4a:fd:f7:d0:88:9c:db:90:f7:9a:a5:12:26:8f:1d: 5d:05:f0:3d:15:0e:4c:d5:4a:79:90:fd:43:3d:d6: 60:91:36:01:2b:2b:e9:c7:56:84:12:9e:98:d7:07: b0:fe:2e:04:70:cd:c9:0e:db:15:b8:a9:1c:b5:98: b5:c0:70:c5:00:fc:46:1b:e5:44:39:16:96:57:89: ab:60:5d:69:b9:5b:5e:8f:fd:64:ed:91:ae:fc:e7: 7f:1d:a9:db:af:ab:b7:33:a0:ba:1f:ed:3d:83:f1: c3:dd:b7:aa:a2:a0:04:c5:f3:05:10:56:68:16:40: 14:7c:fe:05:11:b4:35:bb:03:1e:04:97:0e:a7:a3: 15:7c:b1:0c:af:23:d1:c9:56:35:a9:83:a5:af:38: 79:84:06:33:7d:11:28:10:37:a9:c6:7e:83:95:5d: f5:54:c3:84:80:32:25:b5:3e:fc:c2:d1:71:a6:8f: fd:5c:ae:38:29:0c:90:dd:21:13:89:de:83:53:69: b0:be:9a:94:a2:6e:0b:af:52:f2:2f:ad:60:94:46: 69:64:d9:0a:12:f7:0e:b9:b6:88:90:f0:c2:96:fe: 30:9d:b2:f0:6c:15:f8:4e:25:7f:cc:80:aa:14:60: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:B3:2C:DE:1D:C9:F8:0F:89:80:88:2E:05:91:A7:46:7C:1D:70 X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.68.0/22 138.117.124.0/22 138.121.220.0/22 143.255.112.0/22 160.238.220.0/22 168.228.128.0/22 168.232.116.0/22 170.0.204.0/22 170.245.100.0/22 177.66.64.0/21 177.70.128.0/20 177.87.144.0/21 179.191.128.0/19 187.18.128.0/17 187.110.208.0/20 189.45.64.0/18 189.50.144.0/20 200.94.240.0/22 201.149.120.0/22 IPv6: 2804:880::/32 Signature Algorithm: sha256WithRSAEncryption 03:d2:2e:57:06:97:b1:7b:25:6f:d7:c1:cb:e2:1c:79:d6:2e: 14:0f:01:de:37:35:5b:3d:1a:7d:4c:31:09:5d:38:4d:04:cc: 6b:3e:c9:36:50:e6:3e:05:04:96:2d:8b:4a:91:a1:93:00:ca: e7:23:1b:d4:fc:2f:f7:bd:33:27:48:59:96:25:a8:ea:6a:57: 74:d0:a7:89:a1:04:a9:3e:4d:cc:7b:ff:15:aa:fb:d8:73:59: eb:38:58:c4:64:ea:d0:d2:ca:21:ae:20:39:69:d4:52:56:21: 28:cb:48:0b:3b:7e:0f:4d:de:24:e7:5f:5c:db:a1:15:de:41: 36:b0:46:13:ef:5d:37:52:40:b9:8b:25:22:a9:99:e3:65:a7: 61:1b:69:ad:a8:b6:09:bd:6b:b5:be:2c:8f:50:23:4c:ee:22: 72:35:69:e5:0e:28:de:3d:d9:79:9b:72:27:09:50:68:1d:d2: ce:d0:9a:02:65:88:e9:31:1d:b4:f8:3b:54:5d:fe:21:d2:42: b1:c2:a2:3b:b8:cd:fa:30:f5:69:04:1d:a2:1d:95:86:55:f4: 82:0e:31:8e:c0:34:5b:34:e2:02:b9:b7:01:1b:a6:d2:9f:45: 69:ba:26:ec:4f:e2:ff:ab:67:67:00:a4:30:35:e9:51:4e:f2: 41:6f:9d:dd -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUWSUYJ0OWXjXGzU7vHBoAM+mQUUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA5MTUyMTA4MzVaFw0yNzA5MTQyMTEzMzVaMDMxMTAvBgNV BAMTKEEzNjdCMzJDREUxREM5RjgwRjg5ODA4ODJFMDU5MUE3NDY3QzFENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVrMskD+Yt+eG/iTGO/Ur999CI nNuQ95qlEiaPHV0F8D0VDkzVSnmQ/UM91mCRNgErK+nHVoQSnpjXB7D+LgRwzckO 2xW4qRy1mLXAcMUA/EYb5UQ5FpZXiatgXWm5W16P/WTtka78538dqduvq7czoLof 7T2D8cPdt6qioATF8wUQVmgWQBR8/gURtDW7Ax4Elw6noxV8sQyvI9HJVjWpg6Wv OHmEBjN9ESgQN6nGfoOVXfVUw4SAMiW1PvzC0XGmj/1crjgpDJDdIROJ3oNTabC+ mpSibguvUvIvrWCURmlk2QoS9w65toiQ8MKW/jCdsvBsFfhOJX/MgKoUYFNPAgMB AAGjggKZMIIClTAdBgNVHQ4EFgQUo2ezLN4dyfgPiYCILgWRp0Z8HXAwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjgy NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZwGCCsGAQUFBwEHAQH/ BIGMMIGJMHgEAgABMHIDBAKD3UQDBAKKdXwDBAKKedwDBAKP/3ADBAKg7twDBAKo 5IADBAKo6HQDBAKqAMwDBAKq9WQDBAOxQkADBASxRoADBAOxV5ADBAWzv4ADBAe7 EoADBAS7btADBAa9LUADBAS9MpADBALIXvADBALJlXgwDQQCAAIwBwMFACgECIAw DQYJKoZIhvcNAQELBQADggEBAAPSLlcGl7F7JW/XwcviHHnWLhQPAd43NVs9Gn1M MQldOE0EzGs+yTZQ5j4FBJYti0qRoZMAyucjG9T8L/e9MydIWZYlqOpqV3TQp4mh BKk+Tcx7/xWq+9hzWes4WMRk6tDSyiGuIDlp1FJWISjLSAs7fg9N3iTnX1zboRXe QTawRhPvXTdSQLmLJSKpmeNlp2Ebaa2otgm9a7W+LI9QI0zuInI1aeUOKN492Xmb cicJUGgd0s7QmgJliOkxHbT4O1Rd/iHSQrHCoju4zfow9WkEHaIdlYZV9IIOMY7A NFs04gK5twEbptKfRWm6JuxP4v+rZ2cApDA16VFO8kFvnd0= -----END CERTIFICATE-----Generated at Sat Oct 10 11:45:20 2026 by rpki-client