$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262272.roa File: AS262272.roa (raw, json) Hash identifier: liEx48k6bsQIYREXNwvvGjLeZJ4ceJVYrxTXUEi0j+E= Subject key identifier: C8:94:32:13:68:39:76:5D:74:03:C3:34:74:DB:4D:22:EA:0B:11:18 Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8 Certificate serial: 27796EB82C544611765C2F14493C50BC9DB0F214 Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262272.roa Signing time: Wed 02 Jul 2025 11:40:31 +0000 ROA not before: Wed 02 Jul 2025 11:35:31 +0000 ROA not after: Wed 01 Jul 2026 11:40:31 +0000 asID: 262272 IP address blocks: 45.70.232.0/22 maxlen: 24 138.36.180.0/22 maxlen: 24 177.21.128.0/20 maxlen: 24 177.154.32.0/20 maxlen: 24 187.1.16.0/20 maxlen: 24 187.120.128.0/19 maxlen: 24 2804:21f8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 06:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:79:6e:b8:2c:54:46:11:76:5c:2f:14:49:3c:50:bc:9d:b0:f2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8 Validity Not Before: Jul 2 11:35:31 2025 GMT Not After : Jul 1 11:40:31 2026 GMT Subject: CN=C89432136839765D7403C33474DB4D22EA0B1118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:05:de:3d:ca:64:70:51:23:c6:2c:e5:94: b3:73:12:b7:57:b2:6d:12:6e:0b:3c:b4:23:d7:17: 68:eb:0b:7b:29:bb:ca:f6:6f:39:4f:86:ec:b2:b6: d6:b1:17:d4:ae:80:a0:63:da:93:ed:05:ea:a8:af: 82:fb:c4:0d:82:70:0e:8a:d9:04:f1:55:27:fc:a6: 2e:2b:ba:0f:3d:fa:4f:b3:bd:66:27:a7:82:b7:2b: 44:1e:05:15:3b:a4:38:c9:96:d9:ce:00:5a:ae:2e: 8b:e9:ee:79:de:64:0d:4e:78:39:50:b1:8d:a3:de: 10:34:c9:f9:9f:05:cf:7c:f5:b0:80:bb:a0:8a:9c: 74:fb:fe:bb:44:d3:03:f4:47:c8:63:e2:0c:be:10: 7e:01:46:93:df:22:cf:50:12:cc:01:5c:69:c8:90: 5e:19:e8:a0:a8:b7:d7:ce:07:9c:e8:72:40:fa:b4: 28:8e:20:09:c6:a6:76:1c:3d:92:c1:e1:3d:a4:86: a4:77:c2:27:63:7d:bc:1b:31:88:39:f4:65:b8:fd: 53:e5:b5:6b:41:6d:f6:5e:27:2d:51:93:2d:2a:d6: cf:f5:bf:82:a3:0b:5b:1e:ee:c2:19:fb:8d:e1:84: 18:76:b5:8a:bc:b7:88:6f:5a:0a:fc:11:9a:6e:3c: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:94:32:13:68:39:76:5D:74:03:C3:34:74:DB:4D:22:EA:0B:11:18 X509v3 Authority Key Identifier: keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262272.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.232.0/22 138.36.180.0/22 177.21.128.0/20 177.154.32.0/20 187.1.16.0/20 187.120.128.0/19 IPv6: 2804:21f8::/32 Signature Algorithm: sha256WithRSAEncryption 80:ba:56:7f:cf:fc:38:70:7a:1c:95:e5:08:f8:7a:4c:1a:08: b9:20:31:00:63:a2:a5:d9:96:ad:45:00:8b:64:2d:e8:bc:20: 95:a5:b0:71:c3:8c:66:00:4b:b1:67:29:89:95:d7:58:54:ab: 7b:65:da:39:f2:91:60:b0:0f:be:f2:09:79:35:3d:ff:ce:bd: 4d:08:4b:2b:f1:5a:2a:62:07:f3:f0:d0:e9:fc:65:bc:ee:58: 91:a7:4f:79:b5:02:2a:8c:ac:93:43:39:e8:9c:eb:0c:f7:ab: 60:c9:88:7e:0e:57:ae:02:17:56:b2:18:9d:dd:1a:84:e9:ec: 2d:7d:cb:0c:a1:4e:14:a2:1d:d5:fe:0d:a7:8d:bb:65:98:6c: 99:2c:28:5b:fe:5a:f8:c3:50:47:23:41:7b:a7:a4:51:f5:0d: ba:25:61:33:37:3d:b1:96:2c:dc:12:53:c2:c8:96:4b:cc:fd: d1:12:06:f4:61:22:21:d7:3a:13:8e:50:f0:57:9b:d4:04:b4: 4c:c1:43:d5:92:73:e1:cc:72:ab:8d:e7:b6:c3:e0:75:94:53: 1c:81:ec:6a:35:6c:41:ec:78:7c:fb:c2:79:d1:7f:76:57:3d: c3:3b:44:ff:8f:03:43:54:d4:4c:84:eb:c0:76:20:0b:5b:55: ee:d9:48:36 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUJ3luuCxURhF2XC8USTxQvJ2w8hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQyMDZDMTBGNTg3MDg0RTMyNjZDOTdFREEwRjY1NjQz Mjk5RTFCODAeFw0yNTA3MDIxMTM1MzFaFw0yNjA3MDExMTQwMzFaMDMxMTAvBgNV BAMTKEM4OTQzMjEzNjgzOTc2NUQ3NDAzQzMzNDc0REI0RDIyRUEwQjExMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyQXePcpkcFEjxizllLNzErdX sm0Sbgs8tCPXF2jrC3spu8r2bzlPhuyyttaxF9SugKBj2pPtBeqor4L7xA2CcA6K 2QTxVSf8pi4rug89+k+zvWYnp4K3K0QeBRU7pDjJltnOAFquLovp7nneZA1OeDlQ sY2j3hA0yfmfBc989bCAu6CKnHT7/rtE0wP0R8hj4gy+EH4BRpPfIs9QEswBXGnI kF4Z6KCot9fOB5zockD6tCiOIAnGpnYcPZLB4T2khqR3widjfbwbMYg59GW4/VPl tWtBbfZeJy1Rky0q1s/1v4KjC1se7sIZ+43hhBh2tYq8t4hvWgr8EZpuPFjFAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUyJQyE2g5dl10A8M0dNtNIuoLERgwHwYDVR0j BBgwFoAU1CBsEPWHCE4yZsl+2g9lZDKZ4bgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMy9ENDIwNkMxMEY1ODcwODRFMzI2NkM5N0VEQTBGNjU2NDMyOTlFMUI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MjA2QzEwRjU4NzA4NEUz MjY2Qzk3RURBMEY2NTY0MzI5OUUxQjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8zL0FTMjYy MjcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQCLUboAwQCiiS0AwQEsRWAAwQEsZogAwQEuwEQAwQFu3iA MA0EAgACMAcDBQAoBCH4MA0GCSqGSIb3DQEBCwUAA4IBAQCAulZ/z/w4cHocleUI +HpMGgi5IDEAY6Kl2ZatRQCLZC3ovCCVpbBxw4xmAEuxZymJlddYVKt7Zdo58pFg sA++8gl5NT3/zr1NCEsr8VoqYgfz8NDp/GW87liRp095tQIqjKyTQznonOsM96tg yYh+DleuAhdWshid3RqE6ewtfcsMoU4Uoh3V/g2njbtlmGyZLChb/lr4w1BHI0F7 p6RR9Q26JWEzNz2xlizcElPCyJZLzP3REgb0YSIh1zoTjlDwV5vUBLRMwUPVknPh zHKrjee2w+B1lFMcgexqNWxB7Hh8+8J50X92Vz3DO0T/jwNDVNRMhOvAdiALW1Xu 2Ug2 -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:14 2025 by rpki-client