$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262354.roa File: AS262354.roa (raw, json) Hash identifier: 1pzHbllcptS7Fdlbtu0zOSMrFqlBglue0lUvRTokS1Y= Subject key identifier: A8:C6:73:7D:23:4F:A2:E1:D2:E7:7C:50:90:69:4D:F9:4C:BD:7B:B7 Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Certificate serial: 21BCF6A10EBF97B73DAA16C488115044587F48EC Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262354.roa Signing time: Thu 11 Sep 2025 19:55:28 +0000 ROA not before: Thu 11 Sep 2025 19:50:28 +0000 ROA not after: Thu 10 Sep 2026 19:55:28 +0000 asID: 262354 IP address blocks: 131.100.60.0/22 maxlen: 24 138.186.108.0/22 maxlen: 24 168.232.68.0/22 maxlen: 24 177.125.208.0/22 maxlen: 24 177.125.212.0/22 maxlen: 24 2804:828::/32 maxlen: 32 2804:828:90::/48 maxlen: 48 2804:828:c130::/47 maxlen: 47 2804:828:c230::/47 maxlen: 47 2804:828:f130::/47 maxlen: 47 2804:828:f132::/47 maxlen: 47 2804:828:f230::/47 maxlen: 47 2804:828:f232::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bc:f6:a1:0e:bf:97:b7:3d:aa:16:c4:88:11:50:44:58:7f:48:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Validity Not Before: Sep 11 19:50:28 2025 GMT Not After : Sep 10 19:55:28 2026 GMT Subject: CN=A8C6737D234FA2E1D2E77C5090694DF94CBD7BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:5d:05:71:49:c0:38:41:b8:1a:a5:c0:3c: 42:52:ca:18:84:aa:64:26:17:54:fe:bc:07:ad:85: 8e:d8:f7:ea:9b:e8:a7:54:df:eb:85:3c:03:84:a1: d6:e0:3f:75:f1:8f:af:ad:4f:22:4d:80:eb:9b:4e: ac:54:4a:dd:1f:71:78:32:ea:69:87:55:63:8b:89: 63:4b:ea:b0:79:a3:d1:6f:d1:90:4c:96:46:96:2f: 05:2e:c5:aa:d6:3a:04:1e:f2:43:67:30:93:8c:88: 52:1c:23:4d:16:12:4c:21:7b:00:40:2b:a1:8f:ec: 68:99:87:d6:cd:9a:48:37:b7:42:be:28:d7:0a:1e: ce:95:35:ec:e3:76:f2:c9:a1:44:9d:fa:76:f9:c5: d0:0c:57:10:65:77:6f:d4:7c:f3:fd:6a:79:c2:e0: 92:2d:78:2f:8c:bd:dd:23:0e:db:fc:36:5a:0a:5d: 33:ff:be:73:0f:04:61:ec:67:a4:39:13:c3:fd:b6: 7b:8a:93:8f:a3:9c:03:e1:26:ec:3b:ce:53:b2:b6: 06:34:27:7e:a8:f2:40:dc:66:0b:42:ea:ee:1a:c0: 79:85:31:92:cd:8d:64:10:e0:92:90:10:03:00:f0: eb:a7:a8:f3:62:09:2c:75:8b:aa:a0:72:78:00:52: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C6:73:7D:23:4F:A2:E1:D2:E7:7C:50:90:69:4D:F9:4C:BD:7B:B7 X509v3 Authority Key Identifier: keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262354.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.60.0/22 138.186.108.0/22 168.232.68.0/22 177.125.208.0/21 IPv6: 2804:828::/32 Signature Algorithm: sha256WithRSAEncryption 4c:2e:d5:5f:ab:cb:4e:af:61:4d:01:9a:28:db:a4:e8:4a:10: 57:54:fc:34:5b:05:56:18:ef:f9:8b:d7:56:ab:0e:dc:5d:47: 4d:b1:ef:b9:6b:1a:13:e0:51:4f:fe:dc:e4:cf:b6:a7:04:b0: d7:02:ae:a0:bd:29:c2:36:7d:ca:f6:6b:36:43:72:31:34:e2: 29:b8:99:70:8b:4d:7a:b2:98:21:12:59:db:a3:a6:d8:0b:d2: 08:4a:04:5a:43:b0:ec:73:7a:7b:2d:6c:34:fc:0d:cd:9d:80: 4a:13:ec:67:7a:25:4f:7a:97:85:9c:36:b5:fc:7a:4a:f1:a7: bb:a4:e3:74:68:a5:90:51:ef:62:34:4d:37:89:92:68:25:84: 54:a4:78:74:a7:f3:50:4d:63:14:2c:e1:14:34:ca:41:3b:ed: ad:2c:89:fc:db:de:78:7e:31:82:aa:a2:b7:fb:f8:26:cb:b5: 45:e9:c1:d9:98:4e:e3:0d:e2:a0:ef:6c:31:7b:8f:65:78:be: 48:17:25:78:46:f9:eb:45:fc:f6:17:2c:59:ef:d6:fe:1a:73: 18:2f:46:4a:8f:54:7e:d9:ce:2f:a4:8e:aa:6a:c3:a8:d9:79: 95:3e:c0:6c:a7:d3:c0:98:4e:57:51:d0:e0:28:f1:b2:3f:50: 4a:54:9c:6d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIbz2oQ6/l7c9qhbEiBFQRFh/SOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3 MUQxQzRBQTAeFw0yNTA5MTExOTUwMjhaFw0yNjA5MTAxOTU1MjhaMDMxMTAvBgNV BAMTKEE4QzY3MzdEMjM0RkEyRTFEMkU3N0M1MDkwNjk0REY5NENCRDdCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc510FcUnAOEG4GqXAPEJSyhiE qmQmF1T+vAethY7Y9+qb6KdU3+uFPAOEodbgP3Xxj6+tTyJNgOubTqxUSt0fcXgy 6mmHVWOLiWNL6rB5o9Fv0ZBMlkaWLwUuxarWOgQe8kNnMJOMiFIcI00WEkwhewBA K6GP7GiZh9bNmkg3t0K+KNcKHs6VNezjdvLJoUSd+nb5xdAMVxBld2/UfPP9annC 4JIteC+Mvd0jDtv8NloKXTP/vnMPBGHsZ6Q5E8P9tnuKk4+jnAPhJuw7zlOytgY0 J36o8kDcZgtC6u4awHmFMZLNjWQQ4JKQEAMA8OunqPNiCSx1i6qgcngAUjwNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqMZzfSNPouHS53xQkGlN+Uy9e7cwHwYDVR0j BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UWZ4 UnJ0aEVXd20xdzdZU2ZZRTlXZDY0MVYxbmFYZGt1S2tBdEM4cWdhVi8xL0FTMjYy MzU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQCg2Q8AwQCirpsAwQCqOhEAwQDsX3QMA0EAgACMAcDBQAo BAgoMA0GCSqGSIb3DQEBCwUAA4IBAQBMLtVfq8tOr2FNAZoo26ToShBXVPw0WwVW GO/5i9dWqw7cXUdNse+5axoT4FFP/tzkz7anBLDXAq6gvSnCNn3K9ms2Q3IxNOIp uJlwi016spghElnbo6bYC9IISgRaQ7Dsc3p7LWw0/A3NnYBKE+xneiVPepeFnDa1 /HpK8ae7pON0aKWQUe9iNE03iZJoJYRUpHh0p/NQTWMULOEUNMpBO+2tLIn82954 fjGCqqK3+/gmy7VF6cHZmE7jDeKg72wxe49leL5IFyV4RvnrRfz2FyxZ79b+GnMY L0ZKj1R+2c4vpI6qasOo2XmVPsBsp9PAmE5XUdDgKPGyP1BKVJxt -----END CERTIFICATE-----Generated at Mon Oct 20 12:50:41 2025 by rpki-client