$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS263405.roa File: AS263405.roa (raw, json) Hash identifier: l10D72oZfCTtxPUlwZzoRmd4hlZ+Xi60QT4upqz1DK0= Subject key identifier: 73:1F:60:DF:4E:BE:15:41:1F:03:BD:46:7E:88:0E:37:E4:2E:02:17 Certificate issuer: /CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Certificate serial: 37F6C91FCBA06F0CEDE8640290CB781A08F816D1 Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS263405.roa Signing time: Mon 29 Sep 2025 11:46:36 +0000 ROA not before: Mon 29 Sep 2025 11:41:36 +0000 ROA not after: Mon 28 Sep 2026 11:46:36 +0000 asID: 263405 IP address blocks: 128.201.0.0/22 maxlen: 24 143.255.252.0/22 maxlen: 24 170.254.32.0/22 maxlen: 24 177.222.248.0/21 maxlen: 24 2804:15b4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f6:c9:1f:cb:a0:6f:0c:ed:e8:64:02:90:cb:78:1a:08:f8:16:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Validity Not Before: Sep 29 11:41:36 2025 GMT Not After : Sep 28 11:46:36 2026 GMT Subject: CN=731F60DF4EBE15411F03BD467E880E37E42E0217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:63:76:87:66:b2:96:b7:e5:c5:a0:02:d4: 73:25:15:76:7d:f6:ad:f3:1f:e2:2d:2e:78:ef:f4: 63:2b:f1:f4:75:34:c2:ef:7b:fc:ed:bf:ca:45:72: 61:e3:9e:c6:38:ea:1b:ad:7a:5b:6d:5a:42:72:75: f3:8a:b3:c5:2f:5f:e6:52:17:a4:c3:0b:36:ba:15: 82:00:48:e8:1c:7b:d3:4c:bf:48:df:51:f8:39:a0: 4f:c3:47:77:67:f0:bb:41:72:65:62:07:71:f5:cd: 74:d3:3c:98:0b:ba:2d:fd:57:8e:86:ca:26:5a:67: 07:cd:94:6c:71:51:10:9b:05:0f:3c:98:cf:e5:28: 1c:a9:4e:85:23:06:95:51:f7:06:3b:ba:93:3f:9f: 6a:64:65:db:0e:4b:bf:62:2e:7c:0a:c8:68:c2:86: ab:c6:d2:6b:be:1c:ba:e9:58:8b:41:fa:f0:b2:d3: 57:9b:c3:21:a3:a3:a5:27:3d:71:44:c1:26:b6:27: 7c:3d:07:e1:05:de:64:4f:8f:9b:5d:82:99:64:15: a1:d8:09:c8:77:70:7f:fd:31:0d:2b:2b:41:f0:bf: aa:14:12:f1:ea:d4:96:ec:34:52:2e:e1:60:92:21: 95:06:7b:23:22:28:35:1e:d4:d8:e8:3b:b5:1f:4f: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1F:60:DF:4E:BE:15:41:1F:03:BD:46:7E:88:0E:37:E4:2E:02:17 X509v3 Authority Key Identifier: keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS263405.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.0.0/22 143.255.252.0/22 170.254.32.0/22 177.222.248.0/21 IPv6: 2804:15b4::/32 Signature Algorithm: sha256WithRSAEncryption 3a:6c:f3:08:23:ec:df:3d:e3:66:13:6e:98:02:29:c4:52:ce: 2f:fe:ec:1f:75:95:d9:f7:2e:67:89:e6:ef:72:04:c4:d4:0b: 1b:70:f7:26:37:8d:bb:77:2b:51:c5:6a:08:a2:8e:f8:99:f5: 8d:85:41:83:8a:c1:03:c9:c0:26:f2:cd:df:97:6b:81:55:60: b9:a8:5c:c1:15:2f:d2:7f:1a:4a:bb:4b:7d:85:f4:09:37:e4: 48:db:5c:82:0f:03:10:c4:e9:c7:a4:f4:61:13:18:03:c0:f5: d9:a6:f6:a9:6f:93:02:75:24:60:ca:fa:ca:35:0b:f9:cd:4d: 6a:b3:7a:fb:ad:2d:d3:6e:58:86:00:75:51:cd:fb:06:6a:2c: 14:89:78:53:53:02:72:56:63:49:7d:d9:a4:6a:5d:d0:c3:65: d5:05:6f:c3:07:d1:4b:9d:3b:a5:eb:2c:51:65:d0:ce:9c:00: 83:14:71:1d:22:f1:1a:fa:20:3a:06:2a:8d:ce:ad:11:43:f7: 0f:cb:11:03:56:3f:4c:86:99:fb:25:a5:e9:82:d6:d1:30:e4: 73:05:97:a4:90:47:26:d3:9e:8c:46:24:d0:d5:32:e4:d0:c1: 7a:fe:8e:15:90:2c:4d:85:c3:a0:c1:e4:1a:f0:c6:4a:3a:e9: 15:9c:c9:e2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUN/bJH8ugbwzt6GQCkMt4Ggj4FtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVBMENBQ0I2RjVENkI0NTAwNjEzNjM5MjI1NTY3MEI4 MURCNjZGODAeFw0yNTA5MjkxMTQxMzZaFw0yNjA5MjgxMTQ2MzZaMDMxMTAvBgNV BAMTKDczMUY2MERGNEVCRTE1NDExRjAzQkQ0NjdFODgwRTM3RTQyRTAyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZ2N2h2aylrflxaAC1HMlFXZ9 9q3zH+ItLnjv9GMr8fR1NMLve/ztv8pFcmHjnsY46hutelttWkJydfOKs8UvX+ZS F6TDCza6FYIASOgce9NMv0jfUfg5oE/DR3dn8LtBcmViB3H1zXTTPJgLui39V46G yiZaZwfNlGxxURCbBQ88mM/lKBypToUjBpVR9wY7upM/n2pkZdsOS79iLnwKyGjC hqvG0mu+HLrpWItB+vCy01ebwyGjo6UnPXFEwSa2J3w9B+EF3mRPj5tdgplkFaHY Cch3cH/9MQ0rK0Hwv6oUEvHq1JbsNFIu4WCSIZUGeyMiKDUe1NjoO7UfT4xfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcx9g306+FUEfA71GfogON+QuAhcwHwYDVR0j BBgwFoAUFaDKy29da0UAYTY5IlVnC4HbZvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvNC8xNUEwQ0FDQjZGNUQ2QjQ1MDA2MTM2MzkyMjU1NjcwQjgxREI2NkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1QTBDQUNCNkY1RDZCNDUw MDYxMzYzOTIyNTU2NzBCODFEQjY2RjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS80L0FTMjYz NDA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQCgMkAAwQCj//8AwQCqv4gAwQDsd74MA0EAgACMAcDBQAo BBW0MA0GCSqGSIb3DQEBCwUAA4IBAQA6bPMII+zfPeNmE26YAinEUs4v/uwfdZXZ 9y5niebvcgTE1AsbcPcmN427dytRxWoIoo74mfWNhUGDisEDycAm8s3fl2uBVWC5 qFzBFS/SfxpKu0t9hfQJN+RI21yCDwMQxOnHpPRhExgDwPXZpvapb5MCdSRgyvrK NQv5zU1qs3r7rS3TbliGAHVRzfsGaiwUiXhTUwJyVmNJfdmkal3Qw2XVBW/DB9FL nTul6yxRZdDOnACDFHEdIvEa+iA6BiqNzq0RQ/cPyxEDVj9Mhpn7JaXpgtbRMORz BZekkEcm056MRiTQ1TLk0MF6/o4VkCxNhcOgweQa8MZKOukVnMni -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:30 2025 by rpki-client