$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS52940.roa File: AS52940.roa (raw, json) Hash identifier: U1EPyZvv6CrUCD3tas/0CVU1k3SqRaZhSXEUiw+29tk= Subject key identifier: 23:CE:19:98:A2:D2:39:1D:54:AF:A9:ED:5C:E4:0A:57:B2:18:8C:B8 Certificate issuer: /CN=135830443F9F0628207359060862957206FBE517 Certificate serial: 0653C9D16A0FB3286E8506F745048C95E88BFD16 Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS52940.roa Signing time: Wed 29 Apr 2026 19:45:02 +0000 ROA not before: Wed 29 Apr 2026 19:40:02 +0000 ROA not after: Wed 28 Apr 2027 19:45:02 +0000 asID: 52940 IP address blocks: 168.227.76.0/22 maxlen: 24 170.244.164.0/22 maxlen: 24 177.11.92.0/22 maxlen: 24 191.7.28.0/22 maxlen: 24 2804:1424::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 05:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:53:c9:d1:6a:0f:b3:28:6e:85:06:f7:45:04:8c:95:e8:8b:fd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135830443F9F0628207359060862957206FBE517 Validity Not Before: Apr 29 19:40:02 2026 GMT Not After : Apr 28 19:45:02 2027 GMT Subject: CN=23CE1998A2D2391D54AFA9ED5CE40A57B2188CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:43:b4:26:5d:18:63:f9:7b:f9:9f:7c:cb: 7f:4f:e2:73:22:d2:3a:ed:8d:5b:0a:8c:81:1e:23: 9c:57:96:e5:d3:c9:e1:b3:20:9e:55:b7:4d:40:05: 05:86:b4:df:d5:64:87:e6:a6:2c:c2:b4:a3:c3:19: 42:52:9b:0b:4d:09:7c:35:5f:57:58:d2:1b:17:10: e9:7b:b8:c8:f2:e9:e3:9b:bc:36:f3:5e:fe:39:db: 2b:93:31:c8:aa:7f:70:34:b4:82:08:27:a9:44:46: 74:a7:0f:58:30:5d:8b:da:40:0e:d5:ea:6d:09:ee: 7c:95:d4:2c:c6:11:65:da:6d:72:3b:cc:84:11:99: 17:0e:a0:33:de:5e:4f:24:48:80:28:10:2d:01:34: de:09:ac:f2:9b:a6:41:03:8d:06:4f:f1:06:8c:b0: 3f:72:89:ee:88:c4:ba:2f:d5:c4:7b:29:01:cc:51: 33:78:06:22:96:df:29:77:26:ba:06:c0:25:53:e8: 68:10:b6:6d:da:68:03:6a:ac:71:0b:7e:66:dd:08: 60:3d:c8:33:fd:ce:5b:ec:20:16:40:58:e5:16:ea: f8:75:6b:17:9a:a2:c0:9f:d1:a9:3d:53:e0:44:4c: ad:11:b0:ae:84:39:5b:70:5f:72:1f:61:2f:d4:ef: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:19:98:A2:D2:39:1D:54:AF:A9:ED:5C:E4:0A:57:B2:18:8C:B8 X509v3 Authority Key Identifier: keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS52940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.76.0/22 170.244.164.0/22 177.11.92.0/22 191.7.28.0/22 IPv6: 2804:1424::/32 Signature Algorithm: sha256WithRSAEncryption 58:c8:93:52:a5:a9:5c:0d:8a:9f:89:89:0b:27:ee:ae:40:1f: 5d:7a:84:6d:07:91:bd:62:de:4b:c3:42:c8:2a:f6:22:e0:ec: 69:ac:71:d8:df:4c:33:a0:da:dd:5c:db:42:7a:23:bc:f8:3b: 99:41:16:a9:ae:bd:d0:11:ea:df:92:a7:c9:d7:a6:86:36:ce: 36:5b:f1:40:72:ba:e0:52:14:2f:a7:da:fa:fa:b3:cd:99:b4: 26:00:10:82:bb:af:fa:3f:cd:69:c0:b7:00:8a:9a:d0:81:01: 1c:e6:56:b3:eb:07:a1:b5:25:9e:c2:cd:02:22:6a:9e:f8:dd: c5:59:a5:5f:74:ac:e6:e7:df:e5:fe:7b:8e:c4:20:d0:b1:10: bf:b0:97:ca:83:56:bd:97:73:63:86:95:e1:a3:d5:27:ae:d0: 7c:e0:da:90:d2:34:57:a8:21:7b:fa:3e:59:f5:fb:ed:9f:80: 4c:b1:0b:f5:62:1a:40:1b:30:40:ed:ee:06:38:f2:8f:25:6c: bc:55:9c:3d:bb:ba:f4:44:a6:ca:4e:b8:4a:6a:55:3b:20:3e: 30:4d:30:af:bc:2d:5f:d2:88:a9:b4:2a:85:68:64:20:80:fb: 3a:6c:ef:3a:be:eb:95:1c:d9:92:20:17:6b:1b:2b:89:49:39: 39:98:ce:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlPJ0WoPsyhuhQb3RQSMleiL/RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1ODMwNDQzRjlGMDYyODIwNzM1OTA2MDg2Mjk1NzIw NkZCRTUxNzAeFw0yNjA0MjkxOTQwMDJaFw0yNzA0MjgxOTQ1MDJaMDMxMTAvBgNV BAMTKDIzQ0UxOTk4QTJEMjM5MUQ1NEFGQTlFRDVDRTQwQTU3QjIxODhDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FEO0Jl0YY/l7+Z98y39P4nMi 0jrtjVsKjIEeI5xXluXTyeGzIJ5Vt01ABQWGtN/VZIfmpizCtKPDGUJSmwtNCXw1 X1dY0hsXEOl7uMjy6eObvDbzXv452yuTMciqf3A0tIIIJ6lERnSnD1gwXYvaQA7V 6m0J7nyV1CzGEWXabXI7zIQRmRcOoDPeXk8kSIAoEC0BNN4JrPKbpkEDjQZP8QaM sD9yie6IxLov1cR7KQHMUTN4BiKW3yl3JroGwCVT6GgQtm3aaANqrHELfmbdCGA9 yDP9zlvsIBZAWOUW6vh1axeaosCf0ak9U+BETK0RsK6EOVtwX3IfYS/U79LPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI84ZmKLSOR1Ur6ntXOQKV7IYjLgwHwYDVR0j BBgwFoAUE1gwRD+fBiggc1kGCGKVcgb75RcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMC8xMzU4MzA0NDNGOUYwNjI4MjA3MzU5MDYwODYyOTU3MjA2RkJFNTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNTgzMDQ0M0Y5RjA2Mjgy MDczNTkwNjA4NjI5NTcyMDZGQkU1MTcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTNTI5 NDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAKo40wDBAKq9KQDBAKxC1wDBAK/BxwwDQQCAAIwBwMFACgE FCQwDQYJKoZIhvcNAQELBQADggEBAFjIk1KlqVwNip+JiQsn7q5AH116hG0Hkb1i 3kvDQsgq9iLg7GmscdjfTDOg2t1c20J6I7z4O5lBFqmuvdAR6t+Sp8nXpoY2zjZb 8UByuuBSFC+n2vr6s82ZtCYAEIK7r/o/zWnAtwCKmtCBARzmVrPrB6G1JZ7CzQIi ap743cVZpV90rObn3+X+e47EINCxEL+wl8qDVr2Xc2OGleGj1Seu0Hzg2pDSNFeo IXv6Pln1++2fgEyxC/ViGkAbMEDt7gY48o8lbLxVnD27uvREpspOuEpqVTsgPjBN MK+8LV/SiKm0KoVoZCCA+zps7zq+65Uc2ZIgF2sbK4lJOTmYzl4= -----END CERTIFICATE-----Generated at Wed May 13 17:32:31 2026 by rpki-client