$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262659.roa File: AS262659.roa (raw, json) Hash identifier: ZhfWjpyCkjHXdC8uB0jxEl3s03T6857YtgHFcjXWjmM= Subject key identifier: 12:2A:2C:96:BB:2F:71:FA:46:6C:D3:1D:3C:59:46:1A:AB:5E:46:82 Certificate issuer: /CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Certificate serial: 2180C697E9663F80BBBFABC120BAD229C5B9BC2A Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262659.roa Signing time: Mon 29 Sep 2025 11:46:44 +0000 ROA not before: Mon 29 Sep 2025 11:41:44 +0000 ROA not after: Mon 28 Sep 2026 11:46:44 +0000 asID: 262659 IP address blocks: 177.185.224.0/20 maxlen: 24 179.127.48.0/20 maxlen: 24 186.193.64.0/20 maxlen: 24 186.193.80.0/20 maxlen: 24 187.1.64.0/20 maxlen: 24 187.85.0.0/19 maxlen: 24 187.85.0.0/20 maxlen: 20 200.52.16.0/20 maxlen: 24 201.33.240.0/20 maxlen: 20 201.33.240.0/20 maxlen: 24 2804:58::/32 maxlen: 48 2804:e8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:80:c6:97:e9:66:3f:80:bb:bf:ab:c1:20:ba:d2:29:c5:b9:bc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Validity Not Before: Sep 29 11:41:44 2025 GMT Not After : Sep 28 11:46:44 2026 GMT Subject: CN=122A2C96BB2F71FA466CD31D3C59461AAB5E4682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:f9:c2:4b:25:f2:eb:23:07:ec:da:25:e9: eb:6c:a7:12:fd:ea:ab:81:96:4b:26:77:ff:54:ee: 7b:7f:2b:65:5e:39:8d:4c:76:22:be:96:39:92:65: 17:a9:a6:9d:6f:af:34:1c:7f:4f:4b:53:ea:a0:9e: 38:f5:da:f4:f8:64:67:43:cd:73:6f:51:06:fc:e8: 7e:51:5d:16:5d:ec:8b:02:cb:b8:bc:41:03:a1:e1: 03:92:8e:eb:71:eb:bf:d6:f1:ef:1b:76:4b:f9:46: dd:b3:f5:45:f2:34:89:d5:cf:32:45:1d:f2:ff:73: dd:2b:29:d9:d0:93:da:e6:e4:5e:0a:99:7c:52:6c: 39:3e:4b:4f:f6:ed:c4:88:01:a4:42:1c:81:cc:5f: f0:56:2c:81:55:02:75:d7:04:61:20:4c:29:50:db: 1a:cf:98:e6:a3:e1:2e:57:fd:63:1c:77:e1:d0:5e: 79:f5:ac:71:db:3e:27:70:ba:4c:05:fb:ba:e9:74: 7c:9c:87:7c:a4:ae:f2:4a:8a:a1:46:c3:26:e6:58: 8b:c5:25:eb:c4:21:46:79:d7:5c:d8:0a:d0:24:1b: f4:be:ca:d2:be:11:ee:a1:9e:d6:d7:fc:2d:d7:11: 9f:59:99:0d:78:26:49:40:e0:3f:c3:e0:00:cd:a4: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:2C:96:BB:2F:71:FA:46:6C:D3:1D:3C:59:46:1A:AB:5E:46:82 X509v3 Authority Key Identifier: keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.185.224.0/20 179.127.48.0/20 186.193.64.0/19 187.1.64.0/20 187.85.0.0/19 200.52.16.0/20 201.33.240.0/20 IPv6: 2804:58::/32 2804:e8::/32 Signature Algorithm: sha256WithRSAEncryption ab:70:98:79:26:da:80:52:f5:9c:74:9c:2b:8d:33:7d:6d:4f: a9:62:c7:13:c8:1c:15:98:e3:40:3f:b4:33:75:0f:3a:9c:df: 95:30:94:44:72:d7:ac:f9:e8:83:b3:3a:6f:5d:6f:a5:90:c0: 7d:44:09:d5:60:a2:10:7f:eb:b3:9d:ed:d6:b1:d4:2a:80:0b: ea:4e:c0:11:b6:29:ae:8a:31:9b:7c:cc:55:c5:9f:ff:d7:de: e3:a4:e4:e0:c6:20:22:3a:ea:0f:66:d6:9d:7a:d3:34:e7:2c: b2:e5:7d:ce:65:67:57:f9:1c:1a:86:f1:d7:cf:a7:45:f5:6f: 56:8c:15:c4:65:2a:99:36:46:f6:50:19:75:f6:59:89:09:af: c0:0e:be:33:07:f0:0d:48:85:95:d1:71:29:a5:34:5a:90:9e: b6:57:92:f6:20:78:46:67:1e:6b:8d:75:af:9b:ab:ff:36:cb: d5:d6:d9:6d:99:4a:97:54:53:f3:2f:c3:a5:8d:6b:fa:67:fa: ad:94:e0:14:bb:bc:4d:20:67:ad:9f:2f:89:03:38:49:b6:e6: 38:ab:dc:16:c7:b3:b1:17:28:81:1a:49:ee:06:f2:28:23:b3: f6:04:8b:e8:a6:02:f3:36:64:26:f6:3b:c2:4e:66:d3:38:4a: 84:b2:bc:61 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIYDGl+lmP4C7v6vBILrSKcW5vCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVBMENBQ0I2RjVENkI0NTAwNjEzNjM5MjI1NTY3MEI4 MURCNjZGODAeFw0yNTA5MjkxMTQxNDRaFw0yNjA5MjgxMTQ2NDRaMDMxMTAvBgNV BAMTKDEyMkEyQzk2QkIyRjcxRkE0NjZDRDMxRDNDNTk0NjFBQUI1RTQ2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPfnCSyXy6yMH7Nol6etspxL9 6quBlksmd/9U7nt/K2VeOY1MdiK+ljmSZReppp1vrzQcf09LU+qgnjj12vT4ZGdD zXNvUQb86H5RXRZd7IsCy7i8QQOh4QOSjutx67/W8e8bdkv5Rt2z9UXyNInVzzJF HfL/c90rKdnQk9rm5F4KmXxSbDk+S0/27cSIAaRCHIHMX/BWLIFVAnXXBGEgTClQ 2xrPmOaj4S5X/WMcd+HQXnn1rHHbPidwukwF+7rpdHych3ykrvJKiqFGwybmWIvF JevEIUZ511zYCtAkG/S+ytK+Ee6hntbX/C3XEZ9ZmQ14JklA4D/D4ADNpMCTAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUEioslrsvcfpGbNMdPFlGGqteRoIwHwYDVR0j BBgwFoAUFaDKy29da0UAYTY5IlVnC4HbZvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvNC8xNUEwQ0FDQjZGNUQ2QjQ1MDA2MTM2MzkyMjU1NjcwQjgxREI2NkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1QTBDQUNCNkY1RDZCNDUw MDYxMzYzOTIyNTU2NzBCODFEQjY2RjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS80L0FTMjYy NjU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/ BEowSDAwBAIAATAqAwQEsbngAwQEs38wAwQFusFAAwQEuwFAAwQFu1UAAwQEyDQQ AwQEySHwMBQEAgACMA4DBQAoBABYAwUAKAQA6DANBgkqhkiG9w0BAQsFAAOCAQEA q3CYeSbagFL1nHScK40zfW1PqWLHE8gcFZjjQD+0M3UPOpzflTCURHLXrPnog7M6 b11vpZDAfUQJ1WCiEH/rs53t1rHUKoAL6k7AEbYprooxm3zMVcWf/9fe46Tk4MYg IjrqD2bWnXrTNOcssuV9zmVnV/kcGobx18+nRfVvVowVxGUqmTZG9lAZdfZZiQmv wA6+MwfwDUiFldFxKaU0WpCetleS9iB4Rmcea411r5ur/zbL1dbZbZlKl1RT8y/D pY1r+mf6rZTgFLu8TSBnrZ8viQM4SbbmOKvcFsezsRcogRpJ7gbyKCOz9gSL6KYC 8zZkJvY7wk5m0zhKhLK8YQ== -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:24 2025 by rpki-client