$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53171.roa File: AS53171.roa (raw, json) Hash identifier: QlfJp+AIJCDEkmT6yXu3iFy0CTLSpLYjC3IvpcvFtgs= Subject key identifier: 87:2D:AD:9C:46:7E:C9:7A:32:65:00:B3:9F:96:BF:71:71:D1:0C:4A Certificate issuer: /CN=135830443F9F0628207359060862957206FBE517 Certificate serial: 1C03629B8218EE2D444365300DE2468CDD56A5CC Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53171.roa Signing time: Wed 29 Apr 2026 19:45:00 +0000 ROA not before: Wed 29 Apr 2026 19:40:00 +0000 ROA not after: Wed 28 Apr 2027 19:45:00 +0000 asID: 53171 IP address blocks: 138.118.92.0/22 maxlen: 24 177.87.16.0/21 maxlen: 24 186.224.224.0/20 maxlen: 24 2804:24e8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 05:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:03:62:9b:82:18:ee:2d:44:43:65:30:0d:e2:46:8c:dd:56:a5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135830443F9F0628207359060862957206FBE517 Validity Not Before: Apr 29 19:40:00 2026 GMT Not After : Apr 28 19:45:00 2027 GMT Subject: CN=872DAD9C467EC97A326500B39F96BF7171D10C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:18:e4:8f:6c:2b:8f:e6:ab:11:09:40:f2: 44:72:a7:1d:a6:16:fd:e5:41:d9:64:bd:40:4e:4f: 40:29:65:8e:a1:19:3b:f1:2b:c9:10:6a:ac:ad:a9: 96:7b:d1:d4:51:9c:36:b7:38:4d:46:9a:95:7a:68: 2f:f9:7b:61:02:17:e9:32:25:54:7f:c9:ea:e9:fc: 3b:22:1b:1d:2d:8b:1e:aa:65:3b:65:68:33:be:62: 1d:c1:d2:f4:71:ef:2c:f7:58:d4:5a:ef:24:1f:2e: a1:a0:d7:63:67:73:6e:fa:59:30:ef:15:d9:99:58: b0:aa:a1:32:9f:cd:8d:df:4a:45:a0:4d:2e:9a:36: fb:8f:2d:a6:b0:19:84:bc:c3:55:37:15:fc:b1:6c: 51:c0:9c:ff:57:85:7d:74:5b:48:b3:26:a5:81:6d: a4:e6:85:d3:4a:40:d5:e3:e3:6f:39:76:8e:2c:60: 74:cd:c4:48:ca:70:90:17:03:1d:59:01:b5:bf:a6: f7:fa:7d:1e:4c:30:ce:0c:32:61:f2:aa:af:1c:a3: e6:20:9a:16:13:9e:b4:c2:c4:18:c8:c6:37:34:ce: b4:5c:3b:05:45:11:de:06:54:1f:02:3b:32:41:d6: de:23:10:09:ba:0f:6e:9c:26:c2:4f:71:17:98:48: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:AD:9C:46:7E:C9:7A:32:65:00:B3:9F:96:BF:71:71:D1:0C:4A X509v3 Authority Key Identifier: keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53171.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.92.0/22 177.87.16.0/21 186.224.224.0/20 IPv6: 2804:24e8::/32 Signature Algorithm: sha256WithRSAEncryption 6d:fa:5d:54:c9:0c:21:df:84:13:ef:ec:4b:8e:f6:d0:fd:31: 8a:94:23:44:ae:7e:d8:a0:da:2f:9d:f4:f6:59:26:36:39:93: be:33:7b:33:8c:dd:03:cc:2c:0d:f3:5c:9c:d7:8e:59:26:e1: f9:fd:14:d0:2a:38:bb:e9:3c:53:53:41:71:ca:a5:25:45:0e: a2:96:17:14:ba:2e:6a:ad:63:1c:df:29:94:f3:38:d7:d3:57: 5c:50:0f:f9:f7:d3:ec:1c:b9:47:48:c3:00:84:a9:cf:a5:40: ee:ba:ee:4d:2e:cc:f6:d0:14:aa:2c:af:d8:9e:cd:c7:b9:ab: 2f:82:e2:ba:5f:87:11:ab:6e:56:05:7a:e5:71:09:e2:2b:de: 54:a4:b2:25:c9:c5:d0:bf:04:5c:5a:44:50:42:c2:15:ff:47: b1:5a:6f:dd:ae:ea:a8:1a:86:4b:05:00:10:a1:89:82:fe:8f: 9b:4a:ae:92:17:73:0f:ab:b3:d6:cf:ff:dc:42:14:0a:13:af: e2:43:9b:e7:ba:a9:fa:2f:89:67:db:24:a0:4c:c8:f1:8e:df: 79:e6:10:76:d8:ce:d9:22:70:b9:47:cf:68:ab:22:54:34:26: 9b:71:0c:72:c9:21:76:21:dd:87:7d:db:ea:75:da:39:bf:d5: a5:5c:f2:69 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHANim4IY7i1EQ2UwDeJGjN1WpcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1ODMwNDQzRjlGMDYyODIwNzM1OTA2MDg2Mjk1NzIw NkZCRTUxNzAeFw0yNjA0MjkxOTQwMDBaFw0yNzA0MjgxOTQ1MDBaMDMxMTAvBgNV BAMTKDg3MkRBRDlDNDY3RUM5N0EzMjY1MDBCMzlGOTZCRjcxNzFEMTBDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLTBjkj2wrj+arEQlA8kRypx2m Fv3lQdlkvUBOT0ApZY6hGTvxK8kQaqytqZZ70dRRnDa3OE1GmpV6aC/5e2ECF+ky JVR/yerp/DsiGx0tix6qZTtlaDO+Yh3B0vRx7yz3WNRa7yQfLqGg12Nnc276WTDv FdmZWLCqoTKfzY3fSkWgTS6aNvuPLaawGYS8w1U3FfyxbFHAnP9XhX10W0izJqWB baTmhdNKQNXj4285do4sYHTNxEjKcJAXAx1ZAbW/pvf6fR5MMM4MMmHyqq8co+Yg mhYTnrTCxBjIxjc0zrRcOwVFEd4GVB8COzJB1t4jEAm6D26cJsJPcReYSMLPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhy2tnEZ+yXoyZQCzn5a/cXHRDEowHwYDVR0j BBgwFoAUE1gwRD+fBiggc1kGCGKVcgb75RcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMC8xMzU4MzA0NDNGOUYwNjI4MjA3MzU5MDYwODYyOTU3MjA2RkJFNTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNTgzMDQ0M0Y5RjA2Mjgy MDczNTkwNjA4NjI5NTcyMDZGQkU1MTcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTNTMx NzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAKKdlwDBAOxVxADBAS64OAwDQQCAAIwBwMFACgEJOgwDQYJ KoZIhvcNAQELBQADggEBAG36XVTJDCHfhBPv7EuO9tD9MYqUI0Suftig2i+d9PZZ JjY5k74zezOM3QPMLA3zXJzXjlkm4fn9FNAqOLvpPFNTQXHKpSVFDqKWFxS6Lmqt YxzfKZTzONfTV1xQD/n30+wcuUdIwwCEqc+lQO667k0uzPbQFKosr9iezce5qy+C 4rpfhxGrblYFeuVxCeIr3lSksiXJxdC/BFxaRFBCwhX/R7Fab92u6qgahksFABCh iYL+j5tKrpIXcw+rs9bP/9xCFAoTr+JDm+e6qfoviWfbJKBMyPGO33nmEHbYztki cLlHz2irIlQ0JptxDHLJIXYh3Yd92+p12jm/1aVc8mk= -----END CERTIFICATE-----Generated at Wed May 13 17:32:30 2026 by rpki-client