$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262481.roa File: AS262481.roa (raw, json) Hash identifier: z+4h8Fp89cdsFxkJUHnw6VUzhaWtez7Z5f1jatvYSIg= Subject key identifier: 59:79:6F:BA:EE:0B:18:59:99:B3:A4:33:8C:E3:60:26:72:2D:35:E7 Certificate issuer: /CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Certificate serial: 2F631F7923CD336C4678A815AB02E37D9B30C096 Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262481.roa Signing time: Mon 29 Sep 2025 11:46:47 +0000 ROA not before: Mon 29 Sep 2025 11:41:47 +0000 ROA not after: Mon 28 Sep 2026 11:46:47 +0000 asID: 262481 IP address blocks: 45.160.88.0/22 maxlen: 24 45.166.204.0/22 maxlen: 24 45.237.108.0/22 maxlen: 24 143.137.72.0/22 maxlen: 24 161.22.56.0/21 maxlen: 24 170.245.12.0/22 maxlen: 24 177.53.240.0/21 maxlen: 24 191.37.240.0/21 maxlen: 24 191.37.248.0/22 maxlen: 24 2804:1530::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:63:1f:79:23:cd:33:6c:46:78:a8:15:ab:02:e3:7d:9b:30:c0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Validity Not Before: Sep 29 11:41:47 2025 GMT Not After : Sep 28 11:46:47 2026 GMT Subject: CN=59796FBAEE0B185999B3A4338CE36026722D35E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:e2:53:60:c2:95:f4:ba:50:cf:e6:95:62: 10:c9:41:ea:7a:b0:3b:25:f3:49:6d:20:7c:1e:be: 01:e5:cc:09:92:ba:cb:88:42:32:7f:26:03:3c:e3: de:8d:99:ef:e6:96:79:9b:ad:11:1b:4f:d7:54:69: ec:62:25:8e:77:fd:fb:69:75:8d:48:76:75:c2:35: 6d:78:60:cf:6f:01:59:dc:27:43:64:15:d8:04:80: a0:57:79:4e:10:a2:be:1a:8e:02:22:3d:da:b3:5c: f0:db:11:80:c2:f2:37:30:ca:3f:97:fe:9d:c2:84: 7d:3d:8c:a2:cb:42:46:4e:a1:42:3e:4a:63:db:e0: fc:4c:7d:8e:ec:8f:91:3a:e9:43:31:5c:a6:aa:b4: 1b:b8:f2:72:e1:dc:09:a5:8d:5c:6a:c5:dc:1b:ca: 9d:0c:eb:09:36:fa:1c:85:7b:21:5f:55:3d:eb:64: ed:98:4e:8f:f4:39:aa:4d:4b:57:27:dd:67:08:02: 09:0e:7c:eb:25:e9:9a:f3:74:2c:bb:e6:43:a3:ac: 49:f3:96:d3:76:24:ed:e2:02:22:d0:1d:40:fd:ca: 58:4a:8b:f8:d4:78:46:bc:1a:3a:d0:29:0d:c9:65: c0:d5:b6:2d:6d:ef:35:1c:29:13:64:ee:41:ab:17: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:79:6F:BA:EE:0B:18:59:99:B3:A4:33:8C:E3:60:26:72:2D:35:E7 X509v3 Authority Key Identifier: keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262481.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.160.88.0/22 45.166.204.0/22 45.237.108.0/22 143.137.72.0/22 161.22.56.0/21 170.245.12.0/22 177.53.240.0/21 191.37.240.0-191.37.251.255 IPv6: 2804:1530::/32 Signature Algorithm: sha256WithRSAEncryption 2c:5d:57:5f:90:c6:65:5d:6a:04:f5:9f:08:52:fe:d6:74:86: 16:10:cc:8a:26:23:93:bc:65:d2:9c:e8:cb:d4:0c:47:cc:36: 93:d4:06:72:dc:89:ad:3c:87:63:4e:7e:f5:ed:d1:89:e2:ce: e6:8c:39:88:76:a3:34:1e:90:e1:8c:f3:13:72:5a:70:c3:44: 99:b4:2e:83:c5:61:56:53:f9:58:da:74:41:5a:fc:88:8b:86: e2:53:93:2c:1a:f4:f6:73:ae:b3:8f:1b:c3:d8:1f:d6:83:90: b2:87:b1:a2:dd:6e:a3:a6:c0:b8:92:67:01:09:66:dc:16:0a: df:c2:fe:5a:b7:c0:be:57:16:49:f1:89:49:52:c3:9e:46:af: f3:50:18:47:80:72:a1:10:d8:68:3e:ce:0d:55:b4:eb:9b:e8: e1:48:e8:98:90:56:96:ea:f2:36:c3:20:50:50:b2:f6:42:fc: 5b:5f:de:80:70:4f:73:00:cc:5f:b4:7d:e8:54:91:6c:5d:7f: 0f:ad:21:26:bf:da:2b:5e:91:1e:e8:8b:62:f4:70:30:3a:35: 1c:ff:9a:1b:b0:c2:e5:a1:fc:58:5e:2d:4f:9f:4b:81:6c:96: 9d:4b:f8:b7:e0:1e:82:81:30:4e:0a:82:dd:3e:7b:a3:28:4e: af:dd:8e:a3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUL2MfeSPNM2xGeKgVqwLjfZswwJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVBMENBQ0I2RjVENkI0NTAwNjEzNjM5MjI1NTY3MEI4 MURCNjZGODAeFw0yNTA5MjkxMTQxNDdaFw0yNjA5MjgxMTQ2NDdaMDMxMTAvBgNV BAMTKDU5Nzk2RkJBRUUwQjE4NTk5OUIzQTQzMzhDRTM2MDI2NzIyRDM1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGX+JTYMKV9LpQz+aVYhDJQep6 sDsl80ltIHwevgHlzAmSusuIQjJ/JgM8496Nme/mlnmbrREbT9dUaexiJY53/ftp dY1IdnXCNW14YM9vAVncJ0NkFdgEgKBXeU4Qor4ajgIiPdqzXPDbEYDC8jcwyj+X /p3ChH09jKLLQkZOoUI+SmPb4PxMfY7sj5E66UMxXKaqtBu48nLh3AmljVxqxdwb yp0M6wk2+hyFeyFfVT3rZO2YTo/0OapNS1cn3WcIAgkOfOsl6ZrzdCy75kOjrEnz ltN2JO3iAiLQHUD9ylhKi/jUeEa8GjrQKQ3JZcDVti1t7zUcKRNk7kGrF3WrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUWXlvuu4LGFmZs6QzjONgJnItNecwHwYDVR0j BBgwFoAUFaDKy29da0UAYTY5IlVnC4HbZvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvNC8xNUEwQ0FDQjZGNUQ2QjQ1MDA2MTM2MzkyMjU1NjcwQjgxREI2NkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1QTBDQUNCNkY1RDZCNDUw MDYxMzYzOTIyNTU2NzBCODFEQjY2RjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS80L0FTMjYy NDgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/ BFEwTzA+BAIAATA4AwQCLaBYAwQCLabMAwQCLe1sAwQCj4lIAwQDoRY4AwQCqvUM AwQDsTXwMAwDBAS/JfADBAK/JfgwDQQCAAIwBwMFACgEFTAwDQYJKoZIhvcNAQEL BQADggEBACxdV1+QxmVdagT1nwhS/tZ0hhYQzIomI5O8ZdKc6MvUDEfMNpPUBnLc ia08h2NOfvXt0YnizuaMOYh2ozQekOGM8xNyWnDDRJm0LoPFYVZT+VjadEFa/IiL huJTkywa9PZzrrOPG8PYH9aDkLKHsaLdbqOmwLiSZwEJZtwWCt/C/lq3wL5XFknx iUlSw55Gr/NQGEeAcqEQ2Gg+zg1VtOub6OFI6JiQVpbq8jbDIFBQsvZC/Ftf3oBw T3MAzF+0fehUkWxdfw+tISa/2itekR7oi2L0cDA6NRz/mhuwwuWh/FheLU+fS4Fs lp1L+LfgHoKBME4Kgt0+e6MoTq/djqM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:35 2025 by rpki-client