$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53059.roa File: AS53059.roa (raw, json) Hash identifier: Z3CdLtTMmHMGPohTyklCY+eBp+fNMFjgbpJKyyzLMhA= Subject key identifier: 55:5A:D9:58:70:AC:16:1A:76:88:EC:FF:08:8D:4E:39:27:8D:EF:D6 Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 3654576DF09131456DB6C53136CE5D87EB09E2B6 Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53059.roa Signing time: Tue 22 Sep 2026 12:13:50 +0000 ROA not before: Tue 22 Sep 2026 12:08:50 +0000 ROA not after: Tue 21 Sep 2027 12:13:50 +0000 asID: 53059 IP address blocks: 168.228.68.0/22 maxlen: 24 177.137.192.0/20 maxlen: 24 179.96.240.0/20 maxlen: 24 186.193.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 10:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:54:57:6d:f0:91:31:45:6d:b6:c5:31:36:ce:5d:87:eb:09:e2:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Sep 22 12:08:50 2026 GMT Not After : Sep 21 12:13:50 2027 GMT Subject: CN=555AD95870AC161A7688ECFF088D4E39278DEFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:28:9e:de:2a:6f:12:ff:62:15:49:5a:a7:1c: 41:0f:5e:18:36:13:ca:8f:c8:47:91:03:2b:55:61: c6:2f:82:e4:9b:20:24:14:62:7e:25:a7:3c:ad:0e: 2c:8d:c4:97:40:0e:80:3c:1c:6b:8b:8b:58:88:2f: 80:68:3c:83:82:da:64:9b:8e:6b:c4:79:09:86:3a: b9:4d:31:0b:c7:52:17:81:4f:ab:fc:4c:04:25:68: 73:96:d3:82:81:0d:67:64:5b:14:13:28:82:3f:8b: 54:61:9d:ea:a6:d0:3d:99:a6:85:3b:34:cc:fd:96: c7:91:74:4f:91:77:9c:fc:a7:5c:9d:34:be:72:2d: b0:56:8d:28:5f:55:36:a7:2d:9e:d9:22:63:c2:5b: 0e:3b:81:56:7f:fe:ac:64:13:67:a1:70:3b:be:03: b2:63:f0:ec:12:02:6c:7b:ba:40:d7:ef:66:e8:19: ca:31:40:d3:2a:46:21:51:41:a8:25:b6:52:9d:da: 3c:63:80:25:57:b1:c9:6f:05:fa:24:83:f1:ab:47: ee:4a:c8:d1:c4:90:5e:75:51:9f:b5:cd:6e:f4:1c: 85:98:34:25:c2:29:63:8d:e0:d8:ad:38:d4:f4:eb: 2e:68:b0:7c:fe:43:11:07:b9:d2:d1:e0:eb:dd:6e: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5A:D9:58:70:AC:16:1A:76:88:EC:FF:08:8D:4E:39:27:8D:EF:D6 X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.68.0/22 177.137.192.0/20 179.96.240.0/20 186.193.96.0/20 Signature Algorithm: sha256WithRSAEncryption 25:ae:dd:cf:91:6f:57:4b:1a:dc:08:d4:71:c2:ef:a3:8d:4a: 67:53:f2:aa:f5:01:4d:31:8a:ec:ad:91:a6:d0:de:fb:6b:4b: d5:2e:55:42:a9:d4:0d:9e:01:3a:c8:dc:7a:97:f4:5c:3a:7a: 9e:12:8c:48:48:ef:c4:4d:5c:9a:aa:88:fd:01:2e:6e:fc:34: eb:d2:0a:cd:62:95:83:5a:1a:d9:b0:04:70:54:62:7d:4c:df: fa:fe:0e:7e:2d:6c:97:1b:58:16:b1:48:43:ef:f5:e9:0d:08: 0b:bd:9a:fd:3c:90:06:39:c8:11:cb:7c:0b:0f:63:8c:f8:60: 7f:5f:62:6c:43:ee:42:0a:69:05:27:71:47:cc:45:95:62:5f: 44:ba:5b:84:ad:f4:fe:de:ec:67:0e:2c:bf:60:d7:c3:4e:d5: 27:90:eb:e3:e1:38:50:b5:ca:c0:b5:8b:d2:3d:26:48:2b:8c: 41:41:0a:a2:67:8a:8d:e0:9c:c0:5f:2e:49:69:66:48:9c:6e: 0d:18:06:9c:74:a9:ce:b3:c2:8a:9b:ea:fe:31:5b:ce:66:10: 46:1f:cc:86:a6:2a:0b:6e:c5:78:da:52:3d:1e:e3:54:7a:94: 47:bf:e0:f3:e4:f4:36:ea:03:aa:c2:04:51:d8:58:9e:bc:51: 58:51:28:ff -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUNlRXbfCRMUVttsUxNs5dh+sJ4rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA5MjIxMjA4NTBaFw0yNzA5MjExMjEzNTBaMDMxMTAvBgNV BAMTKDU1NUFEOTU4NzBBQzE2MUE3Njg4RUNGRjA4OEQ0RTM5Mjc4REVGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKJ7eKm8S/2IVSVqnHEEPXhg2 E8qPyEeRAytVYcYvguSbICQUYn4lpzytDiyNxJdADoA8HGuLi1iIL4BoPIOC2mSb jmvEeQmGOrlNMQvHUheBT6v8TAQlaHOW04KBDWdkWxQTKII/i1Rhneqm0D2ZpoU7 NMz9lseRdE+Rd5z8p1ydNL5yLbBWjShfVTanLZ7ZImPCWw47gVZ//qxkE2ehcDu+ A7Jj8OwSAmx7ukDX72boGcoxQNMqRiFRQagltlKd2jxjgCVXsclvBfokg/GrR+5K yNHEkF51UZ+1zW70HIWYNCXCKWON4NitONT06y5osHz+QxEHudLR4Ovdbt+TAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUVVrZWHCsFhp2iOz/CI1OOSeN79YwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTNTMw NTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAKo5EQDBASxicADBASzYPADBAS6wWAwDQYJKoZIhvcNAQEL BQADggEBACWu3c+Rb1dLGtwI1HHC76ONSmdT8qr1AU0xiuytkabQ3vtrS9UuVUKp 1A2eATrI3HqX9Fw6ep4SjEhI78RNXJqqiP0BLm78NOvSCs1ilYNaGtmwBHBUYn1M 3/r+Dn4tbJcbWBaxSEPv9ekNCAu9mv08kAY5yBHLfAsPY4z4YH9fYmxD7kIKaQUn cUfMRZViX0S6W4St9P7e7GcOLL9g18NO1SeQ6+PhOFC1ysC1i9I9JkgrjEFBCqJn io3gnMBfLklpZkicbg0YBpx0qc6zwoqb6v4xW85mEEYfzIamKgtuxXjaUj0e41R6 lEe/4PPk9DbqA6rCBFHYWJ68UVhRKP8= -----END CERTIFICATE-----Generated at Sat Oct 10 11:46:19 2026 by rpki-client