$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS263864.roa File: AS263864.roa (raw, json) Hash identifier: mLOfMXRmFKGvn63LPVMNfKolXcHuDj3BdNjqWSfrFMc= Subject key identifier: 22:6F:A2:0D:D5:5F:6B:90:62:F1:96:63:47:A7:3F:2C:ED:D7:AF:07 Certificate issuer: /CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Certificate serial: 343D991DB2B15C9A7D13E24E42AEDBD8300F4F71 Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS263864.roa Signing time: Mon 29 Sep 2025 11:46:37 +0000 ROA not before: Mon 29 Sep 2025 11:41:37 +0000 ROA not after: Mon 28 Sep 2026 11:46:37 +0000 asID: 263864 IP address blocks: 138.186.164.0/22 maxlen: 24 170.79.220.0/22 maxlen: 24 2804:26ec::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3d:99:1d:b2:b1:5c:9a:7d:13:e2:4e:42:ae:db:d8:30:0f:4f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8 Validity Not Before: Sep 29 11:41:37 2025 GMT Not After : Sep 28 11:46:37 2026 GMT Subject: CN=226FA20DD55F6B9062F1966347A73F2CEDD7AF07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:f4:be:34:d0:c1:39:66:b8:d4:90:a0:64: 63:7a:31:28:fd:c5:54:1a:64:43:05:bf:bb:e3:24: fe:9b:4d:93:ef:d5:11:fd:1c:76:17:54:a4:32:4e: 5e:c4:6c:37:8c:21:d5:45:92:48:f0:72:55:0b:c3: 64:73:1e:70:6e:06:dc:7c:d1:12:47:7c:eb:01:12: 55:25:a6:21:b0:46:af:a0:a1:cd:ae:de:68:bf:4d: fb:4a:ed:d1:ae:b6:a0:9f:b8:bf:d4:1d:6c:6f:62: f5:02:5f:16:39:ad:b9:67:8a:84:9d:c3:6f:5f:5c: 92:f0:d4:40:00:26:eb:ec:8a:a2:a9:cc:ed:1e:12: e0:a8:e8:b6:eb:55:05:24:2c:bb:df:3d:5d:cf:a5: 5c:70:49:6b:5f:a9:49:cf:c7:42:23:02:b8:3c:ac: 3e:cb:96:0a:6f:18:da:ec:16:65:f9:8f:e2:36:45: 4c:fb:0d:6e:c2:e8:9d:7b:0c:a0:b6:bc:cb:f7:63: 50:28:b0:dd:12:10:cd:f9:76:fd:25:d7:26:85:1f: 4f:16:da:5c:85:d1:e5:38:d6:0f:db:29:9d:5a:96: 65:fc:01:90:d3:08:93:0b:7f:d3:0c:ea:61:67:56: b9:6e:f4:f6:f4:70:24:70:f3:1a:79:05:4e:94:15: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6F:A2:0D:D5:5F:6B:90:62:F1:96:63:47:A7:3F:2C:ED:D7:AF:07 X509v3 Authority Key Identifier: keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS263864.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.164.0/22 170.79.220.0/22 IPv6: 2804:26ec::/32 Signature Algorithm: sha256WithRSAEncryption 97:3f:cf:f5:b6:7f:cf:76:5c:46:11:f6:27:86:69:4e:a3:35: 8b:c1:6b:b5:c8:9e:aa:bd:44:7f:32:a5:72:95:8b:e8:c7:72: 69:8a:40:cb:3c:c7:4f:99:d3:c8:00:4e:b7:b4:c3:33:14:5e: 79:52:f2:c8:02:c0:52:13:54:76:a5:5d:9a:6f:5e:f3:85:a2: f7:f4:9c:cb:41:2f:2d:03:5b:36:8f:d3:75:88:8c:ff:4a:f6: 1e:d5:73:48:52:1e:4b:ad:a0:fc:95:11:5a:2a:74:27:a6:53: c2:d5:7a:3c:ad:b3:7d:99:5c:e6:fa:03:0a:b4:3c:bb:e1:38: 78:0d:7f:e5:ba:73:a7:aa:13:41:1a:1f:3a:91:eb:b8:b7:6f: 12:f9:0c:08:d6:05:d9:b1:8c:2d:80:ef:6c:00:16:25:8a:25: 25:f1:49:b1:68:ad:14:50:df:6b:18:a5:24:d8:bf:88:5a:dc: a0:2b:ad:1c:24:d7:e2:5e:0b:bb:6a:8c:f3:f5:10:1d:98:b0: 77:bf:f2:c7:ea:c2:49:eb:c3:5f:af:86:74:79:85:5c:dd:e8: e4:c2:2f:c8:4b:8a:8c:6a:0b:cc:11:1c:ae:e3:6d:c3:cf:94: e6:2c:82:91:68:0f:b0:5b:fd:53:18:be:49:13:07:08:2a:2b: 3e:6d:a9:0c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUND2ZHbKxXJp9E+JOQq7b2DAPT3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVBMENBQ0I2RjVENkI0NTAwNjEzNjM5MjI1NTY3MEI4 MURCNjZGODAeFw0yNTA5MjkxMTQxMzdaFw0yNjA5MjgxMTQ2MzdaMDMxMTAvBgNV BAMTKDIyNkZBMjBERDU1RjZCOTA2MkYxOTY2MzQ3QTczRjJDRUREN0FGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8PS+NNDBOWa41JCgZGN6MSj9 xVQaZEMFv7vjJP6bTZPv1RH9HHYXVKQyTl7EbDeMIdVFkkjwclULw2RzHnBuBtx8 0RJHfOsBElUlpiGwRq+goc2u3mi/TftK7dGutqCfuL/UHWxvYvUCXxY5rblnioSd w29fXJLw1EAAJuvsiqKpzO0eEuCo6LbrVQUkLLvfPV3PpVxwSWtfqUnPx0IjArg8 rD7LlgpvGNrsFmX5j+I2RUz7DW7C6J17DKC2vMv3Y1AosN0SEM35dv0l1yaFH08W 2lyF0eU41g/bKZ1almX8AZDTCJMLf9MM6mFnVrlu9Pb0cCRw8xp5BU6UFXfBAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUIm+iDdVfa5Bi8ZZjR6c/LO3XrwcwHwYDVR0j BBgwFoAUFaDKy29da0UAYTY5IlVnC4HbZvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvNC8xNUEwQ0FDQjZGNUQ2QjQ1MDA2MTM2MzkyMjU1NjcwQjgxREI2NkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1QTBDQUNCNkY1RDZCNDUw MDYxMzYzOTIyNTU2NzBCODFEQjY2RjguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS80L0FTMjYz ODY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQCirqkAwQCqk/cMA0EAgACMAcDBQAoBCbsMA0GCSqGSIb3 DQEBCwUAA4IBAQCXP8/1tn/PdlxGEfYnhmlOozWLwWu1yJ6qvUR/MqVylYvox3Jp ikDLPMdPmdPIAE63tMMzFF55UvLIAsBSE1R2pV2ab17zhaL39JzLQS8tA1s2j9N1 iIz/SvYe1XNIUh5LraD8lRFaKnQnplPC1Xo8rbN9mVzm+gMKtDy74Th4DX/lunOn qhNBGh86keu4t28S+QwI1gXZsYwtgO9sABYliiUl8UmxaK0UUN9rGKUk2L+IWtyg K60cJNfiXgu7aozz9RAdmLB3v/LH6sJJ68Nfr4Z0eYVc3ejkwi/IS4qMagvMERyu 423Dz5TmLIKRaA+wW/1TGL5JEwcIKis+bakM -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:40 2025 by rpki-client