$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53080.roa File: AS53080.roa (raw, json) Hash identifier: j60ct/0SazVPjJ7W+rPGYPRf6w1kuArRO8A7x/rvmeU= Subject key identifier: 0A:BD:27:DB:E5:1E:3E:1E:24:2E:BB:8F:89:14:A8:C7:89:DD:67:2F Certificate issuer: /CN=135830443F9F0628207359060862957206FBE517 Certificate serial: 0BF18FA396D8902D62C03E8CA3A1F5A0AB0F00DE Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53080.roa Signing time: Wed 29 Apr 2026 19:45:02 +0000 ROA not before: Wed 29 Apr 2026 19:40:02 +0000 ROA not after: Wed 28 Apr 2027 19:45:02 +0000 asID: 53080 IP address blocks: 45.175.80.0/22 maxlen: 24 138.186.36.0/22 maxlen: 24 170.82.64.0/22 maxlen: 24 170.150.4.0/22 maxlen: 24 186.194.176.0/20 maxlen: 24 187.95.0.0/20 maxlen: 24 191.253.0.0/20 maxlen: 24 201.216.100.0/22 maxlen: 24 2804:71c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 05:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f1:8f:a3:96:d8:90:2d:62:c0:3e:8c:a3:a1:f5:a0:ab:0f:00:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135830443F9F0628207359060862957206FBE517 Validity Not Before: Apr 29 19:40:02 2026 GMT Not After : Apr 28 19:45:02 2027 GMT Subject: CN=0ABD27DBE51E3E1E242EBB8F8914A8C789DD672F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:5f:8a:0f:de:fa:33:3f:53:40:8b:13:0c: 6f:fa:e2:c9:bb:54:92:13:fc:28:2c:c9:ce:9f:7b: 52:b0:1f:1b:3f:67:b5:31:2e:b4:f5:80:7d:e3:e3: 14:89:d0:e5:b7:01:71:bf:69:76:b2:ae:36:04:52: 52:bc:cc:55:bb:54:c1:4c:d7:e5:66:2a:9d:b4:d2: 33:f6:4b:02:c7:74:ff:fc:1b:52:d4:38:20:d4:c0: f6:b0:94:32:bf:ee:26:38:36:eb:0b:ed:20:63:2e: 93:a2:3a:35:72:16:7e:83:3e:ca:dc:f3:ca:08:c4: 0b:f1:e1:6e:44:46:62:5b:bd:e7:f1:6a:ea:53:81: 0e:da:b1:65:d6:70:1a:04:a1:d8:33:16:5b:f3:83: 7b:be:02:ea:fc:d7:d0:74:3c:60:54:c8:d3:c6:d0: db:bc:2f:1b:f5:2b:34:a1:53:76:6b:00:4b:5c:a3: 12:77:94:ee:19:75:37:f6:11:b3:66:f9:22:94:c1: 0a:1c:99:81:49:c3:86:ca:34:78:88:49:b4:bb:90: 85:11:2b:17:09:62:5b:7a:68:f5:af:46:d8:b7:1d: d5:14:b3:9a:e3:8f:81:02:6c:6b:cb:79:57:08:37: 36:39:7e:9a:f3:12:70:0f:34:ae:a7:57:73:62:8c: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:27:DB:E5:1E:3E:1E:24:2E:BB:8F:89:14:A8:C7:89:DD:67:2F X509v3 Authority Key Identifier: keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53080.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.80.0/22 138.186.36.0/22 170.82.64.0/22 170.150.4.0/22 186.194.176.0/20 187.95.0.0/20 191.253.0.0/20 201.216.100.0/22 IPv6: 2804:71c::/32 Signature Algorithm: sha256WithRSAEncryption 4c:10:d2:20:84:f1:e2:4c:28:bc:c8:ab:10:29:74:17:3f:7c: a0:42:96:b4:b9:89:94:ed:0c:d8:39:70:51:f8:f0:d0:4b:ae: 8a:b8:bd:10:15:97:38:29:13:f6:f0:fb:7f:71:f5:a2:b4:0b: 84:87:ab:6f:08:9b:ec:f2:4c:d2:2e:12:94:ff:b3:72:c6:a3: bb:0e:b5:d7:be:68:7a:7f:87:ff:ec:a5:6f:78:6b:b0:89:b6: 9d:0c:dd:65:35:34:10:21:13:b7:cd:37:9e:f6:d8:77:b3:cf: 22:1a:f7:1c:bb:89:f2:12:19:26:09:58:b0:d8:78:1f:4f:62: 86:92:b9:5a:11:cb:59:bf:12:d3:8d:96:b5:ff:f9:8c:d6:62: 10:12:6f:08:ba:45:55:fb:2a:eb:1c:c0:1c:dc:13:8c:87:d4: c8:15:aa:03:83:c8:b0:04:4b:b5:bd:4a:f7:e5:43:32:bd:18: 30:7f:e6:7a:93:d5:aa:f7:ba:23:6a:c5:e4:89:60:f6:86:c1: ea:04:ba:0e:8b:90:b2:68:b4:d0:6c:79:24:37:1f:ad:a3:5a: 22:99:01:31:e4:50:ae:30:bd:b2:cc:94:07:ff:c8:8d:da:83: 1d:4f:3f:9b:df:06:4a:20:bc:ed:43:60:a9:a8:62:2a:f4:8b: 41:f6:eb:8b -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUC/GPo5bYkC1iwD6Mo6H1oKsPAN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1ODMwNDQzRjlGMDYyODIwNzM1OTA2MDg2Mjk1NzIw NkZCRTUxNzAeFw0yNjA0MjkxOTQwMDJaFw0yNzA0MjgxOTQ1MDJaMDMxMTAvBgNV BAMTKDBBQkQyN0RCRTUxRTNFMUUyNDJFQkI4Rjg5MTRBOEM3ODlERDY3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIl+KD976Mz9TQIsTDG/64sm7 VJIT/Cgsyc6fe1KwHxs/Z7UxLrT1gH3j4xSJ0OW3AXG/aXayrjYEUlK8zFW7VMFM 1+VmKp200jP2SwLHdP/8G1LUOCDUwPawlDK/7iY4NusL7SBjLpOiOjVyFn6DPsrc 88oIxAvx4W5ERmJbvefxaupTgQ7asWXWcBoEodgzFlvzg3u+Aur819B0PGBUyNPG 0Nu8Lxv1KzShU3ZrAEtcoxJ3lO4ZdTf2EbNm+SKUwQocmYFJw4bKNHiISbS7kIUR KxcJYlt6aPWvRti3HdUUs5rjj4ECbGvLeVcINzY5fprzEnAPNK6nV3NijEQVAgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUCr0n2+UePh4kLruPiRSox4ndZy8wHwYDVR0j BBgwFoAUE1gwRD+fBiggc1kGCGKVcgb75RcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMC8xMzU4MzA0NDNGOUYwNjI4MjA3MzU5MDYwODYyOTU3MjA2RkJFNTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNTgzMDQ0M0Y5RjA2Mjgy MDczNTkwNjA4NjI5NTcyMDZGQkU1MTcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTNTMw ODAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBAItr1ADBAKKuiQDBAKqUkADBAKqlgQDBAS6wrADBAS7XwAD BAS//QADBALJ2GQwDQQCAAIwBwMFACgEBxwwDQYJKoZIhvcNAQELBQADggEBAEwQ 0iCE8eJMKLzIqxApdBc/fKBClrS5iZTtDNg5cFH48NBLroq4vRAVlzgpE/bw+39x 9aK0C4SHq28Im+zyTNIuEpT/s3LGo7sOtde+aHp/h//spW94a7CJtp0M3WU1NBAh E7fNN5722HezzyIa9xy7ifISGSYJWLDYeB9PYoaSuVoRy1m/EtONlrX/+YzWYhAS bwi6RVX7KuscwBzcE4yH1MgVqgODyLAES7W9SvflQzK9GDB/5nqT1ar3uiNqxeSJ YPaGweoEug6LkLJotNBseSQ3H62jWiKZATHkUK4wvbLMlAf/yI3agx1PP5vfBkog vO1DYKmoYir0i0H264s= -----END CERTIFICATE-----Generated at Wed May 13 18:42:50 2026 by rpki-client