$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28669.roa File: AS28669.roa (raw, json) Hash identifier: rasUkgBwN5YVNxnNCQ1bYgQwjoPYRQ9IZnSS6FYtBN0= Subject key identifier: C8:04:82:28:DD:0B:AF:4B:9A:47:E4:25:84:F2:04:18:27:5D:27:09 Certificate issuer: /CN=135830443F9F0628207359060862957206FBE517 Certificate serial: 1BEFD1B2049D7AE855801B5FA3701B6264F48856 Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28669.roa Signing time: Wed 29 Apr 2026 19:45:01 +0000 ROA not before: Wed 29 Apr 2026 19:40:01 +0000 ROA not after: Wed 28 Apr 2027 19:45:01 +0000 asID: 28669 IP address blocks: 45.234.40.0/22 maxlen: 24 168.227.12.0/22 maxlen: 24 170.238.116.0/22 maxlen: 24 177.36.160.0/20 maxlen: 24 177.107.80.0/20 maxlen: 24 177.137.64.0/20 maxlen: 24 179.189.224.0/20 maxlen: 24 186.195.144.0/20 maxlen: 24 186.225.96.0/20 maxlen: 24 186.225.112.0/20 maxlen: 24 187.108.32.0/20 maxlen: 24 187.111.160.0/20 maxlen: 24 189.8.80.0/20 maxlen: 24 189.28.144.0/20 maxlen: 24 191.241.224.0/19 maxlen: 24 201.46.16.0/20 maxlen: 24 2804:290::/32 maxlen: 48 2804:7cc::/32 maxlen: 48 2804:4bec::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 05:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ef:d1:b2:04:9d:7a:e8:55:80:1b:5f:a3:70:1b:62:64:f4:88:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135830443F9F0628207359060862957206FBE517 Validity Not Before: Apr 29 19:40:01 2026 GMT Not After : Apr 28 19:45:01 2027 GMT Subject: CN=C8048228DD0BAF4B9A47E42584F20418275D2709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:0e:43:b3:69:a3:dd:16:83:74:4a:58:d3: ed:be:e9:f6:4a:02:26:d6:6a:17:46:a4:63:c2:f1: 03:18:f2:e7:ab:48:5e:74:70:4f:9f:55:52:9f:af: 95:7b:bf:72:60:1c:3f:09:b5:d8:6b:1b:03:74:cd: 65:cb:52:e8:c7:71:c3:b7:24:60:c1:02:a3:3c:cc: 4b:44:9e:44:e3:91:0b:c0:0e:ba:cf:48:1f:4f:a2: d8:34:74:61:20:c8:9e:cb:b1:d1:90:0b:60:eb:0c: e6:71:28:de:65:1a:7d:02:d4:e1:b7:f5:b2:43:c3: 75:b9:b7:13:ac:8a:47:ba:d7:07:24:c9:5b:fe:1b: b1:10:a7:12:d7:ca:fb:9a:5f:f9:e9:f3:bc:79:e9: a0:ae:e4:59:ae:17:03:ed:1f:e9:05:94:cf:b9:87: 4e:82:12:83:64:90:8b:08:74:9f:b1:91:b0:06:a7: 9c:81:94:d9:05:68:c1:7a:32:6d:ec:0a:83:33:47: 58:35:50:d5:e3:01:e2:1b:6e:8d:d5:09:91:71:2d: 8e:ce:5c:15:ae:b0:6e:30:d6:4e:6f:32:16:af:33: 03:0f:15:f4:ab:c6:43:c0:11:4b:2e:19:dd:24:f8: a6:d9:19:66:a2:8b:8e:b6:ed:97:5c:72:c0:42:78: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:82:28:DD:0B:AF:4B:9A:47:E4:25:84:F2:04:18:27:5D:27:09 X509v3 Authority Key Identifier: keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28669.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.40.0/22 168.227.12.0/22 170.238.116.0/22 177.36.160.0/20 177.107.80.0/20 177.137.64.0/20 179.189.224.0/20 186.195.144.0/20 186.225.96.0/19 187.108.32.0/20 187.111.160.0/20 189.8.80.0/20 189.28.144.0/20 191.241.224.0/19 201.46.16.0/20 IPv6: 2804:290::/32 2804:7cc::/32 2804:4bec::/32 Signature Algorithm: sha256WithRSAEncryption 1e:86:23:e5:30:00:3e:d2:4e:5f:5e:4e:94:d5:6a:f5:db:e0: 2b:7e:b4:67:c1:02:6f:73:ad:3e:f4:c6:76:09:0f:61:86:62: 08:dd:1a:9f:63:3f:d7:2d:ee:94:eb:ff:af:29:ad:b7:28:26: d5:9a:56:25:ee:98:5f:39:64:69:30:4a:6f:e3:6b:92:dd:be: 5f:17:e0:fd:23:c0:38:35:55:8b:4f:31:63:b2:05:78:7c:99: 74:fe:85:55:61:f5:a7:d1:3d:e4:82:3c:4e:27:23:1b:57:2f: 39:ae:eb:dc:f4:b1:32:e9:df:40:0a:9a:a7:f2:28:65:77:2f: 5c:de:b4:e0:b8:17:a9:29:e8:67:36:96:9e:25:7c:71:45:79: 80:33:e6:3d:73:55:16:d9:a8:2d:fa:41:67:55:cb:a2:e5:35: f5:81:bb:63:22:f2:25:63:51:30:33:2a:cf:1e:e9:34:32:cd: 68:f8:d6:8b:5a:ad:73:95:b6:bf:c6:e2:c1:ad:4d:bb:13:17: 1d:6d:30:1b:a5:b5:a0:bf:6d:59:b6:bf:b1:f4:83:66:04:88: 71:2c:e5:96:c6:33:b1:c8:de:e7:8c:77:1d:56:7a:2f:8a:55: ab:f4:50:f8:26:52:48:bb:ed:c7:37:8d:61:ae:6a:0c:84:b2: 12:44:21:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUG+/RsgSdeuhVgBtfo3AbYmT0iFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1ODMwNDQzRjlGMDYyODIwNzM1OTA2MDg2Mjk1NzIw NkZCRTUxNzAeFw0yNjA0MjkxOTQwMDFaFw0yNzA0MjgxOTQ1MDFaMDMxMTAvBgNV BAMTKEM4MDQ4MjI4REQwQkFGNEI5QTQ3RTQyNTg0RjIwNDE4Mjc1RDI3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZA5Ds2mj3RaDdEpY0+2+6fZK AibWahdGpGPC8QMY8uerSF50cE+fVVKfr5V7v3JgHD8JtdhrGwN0zWXLUujHccO3 JGDBAqM8zEtEnkTjkQvADrrPSB9Potg0dGEgyJ7LsdGQC2DrDOZxKN5lGn0C1OG3 9bJDw3W5txOsike61wckyVv+G7EQpxLXyvuaX/np87x56aCu5FmuFwPtH+kFlM+5 h06CEoNkkIsIdJ+xkbAGp5yBlNkFaMF6Mm3sCoMzR1g1UNXjAeIbbo3VCZFxLY7O XBWusG4w1k5vMhavMwMPFfSrxkPAEUsuGd0k+KbZGWaii4627ZdccsBCeC7lAgMB AAGjggKOMIICijAdBgNVHQ4EFgQUyASCKN0Lr0uaR+QlhPIEGCddJwkwHwYDVR0j BBgwFoAUE1gwRD+fBiggc1kGCGKVcgb75RcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMC8xMzU4MzA0NDNGOUYwNjI4MjA3MzU5MDYwODYyOTU3MjA2RkJFNTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNTgzMDQ0M0Y5RjA2Mjgy MDczNTkwNjA4NjI5NTcyMDZGQkU1MTcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTMjg2 Njkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZEGCCsGAQUFBwEHAQH/ BIGBMH8wYAQCAAEwWgMEAi3qKAMEAqjjDAMEAqrudAMEBLEkoAMEBLFrUAMEBLGJ QAMEBLO94AMEBLrDkAMEBbrhYAMEBLtsIAMEBLtvoAMEBL0IUAMEBL0ckAMEBb/x 4AMEBMkuEDAbBAIAAjAVAwUAKAQCkAMFACgEB8wDBQAoBEvsMA0GCSqGSIb3DQEB CwUAA4IBAQAehiPlMAA+0k5fXk6U1Wr12+ArfrRnwQJvc60+9MZ2CQ9hhmII3Rqf Yz/XLe6U6/+vKa23KCbVmlYl7phfOWRpMEpv42uS3b5fF+D9I8A4NVWLTzFjsgV4 fJl0/oVVYfWn0T3kgjxOJyMbVy85ruvc9LEy6d9ACpqn8ihldy9c3rTguBepKehn NpaeJXxxRXmAM+Y9c1UW2agt+kFnVcui5TX1gbtjIvIlY1EwMyrPHuk0Ms1o+NaL Wq1zlba/xuLBrU27ExcdbTAbpbWgv21Ztr+x9INmBIhxLOWWxjOxyN7njHcdVnov ilWr9FD4JlJIu+3HN41hrmoMhLISRCGx -----END CERTIFICATE-----Generated at Wed May 13 17:32:30 2026 by rpki-client