$ rpki-client -vvvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS22381.roa File: AS22381.roa (raw, json) Hash identifier: my7TcyzB0kNki+3/MPXF96JI8WOJ1n9XvatRcaZCmP4= Subject key identifier: E2:51:47:01:43:47:3B:99:D6:21:76:C0:9E:09:87:E2:8C:E4:39:F8 Certificate issuer: /CN=617ABB72EF15B21D2E59DAB9087F83A02F381271 Certificate serial: 6892E44EBB6BE0953930994D3CC5567CCEED3FB5 Authority key identifier: 61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer Subject info access: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS22381.roa Signing time: Tue 29 Sep 2026 17:42:26 +0000 ROA not before: Tue 29 Sep 2026 17:37:26 +0000 ROA not after: Tue 28 Sep 2027 17:42:26 +0000 asID: 22381 IP address blocks: 131.108.184.0/22 maxlen: 32 170.78.232.0/22 maxlen: 32 170.81.128.0/22 maxlen: 32 177.84.160.0/21 maxlen: 32 177.126.0.0/24 maxlen: 32 177.126.2.0/23 maxlen: 32 177.126.4.0/23 maxlen: 32 177.126.7.0/24 maxlen: 32 177.126.9.0/24 maxlen: 32 177.126.12.0/24 maxlen: 32 177.126.14.0/24 maxlen: 32 177.130.112.0/20 maxlen: 32 177.136.80.0/22 maxlen: 32 186.219.0.0/19 maxlen: 32 186.219.32.0/20 maxlen: 32 186.237.128.0/20 maxlen: 32 187.108.128.0/19 maxlen: 32 187.108.160.0/19 maxlen: 32 187.120.0.0/21 maxlen: 32 187.120.8.0/22 maxlen: 32 187.120.13.0/24 maxlen: 32 187.120.14.0/23 maxlen: 32 189.36.160.0/20 maxlen: 32 189.36.176.0/20 maxlen: 32 189.39.208.0/21 maxlen: 32 189.39.220.0/22 maxlen: 32 189.50.128.0/20 maxlen: 32 189.51.224.0/20 maxlen: 32 189.51.240.0/20 maxlen: 32 189.91.96.0/19 maxlen: 32 189.127.64.0/18 maxlen: 32 200.150.160.0/22 maxlen: 32 200.150.166.0/24 maxlen: 32 200.150.168.0/24 maxlen: 32 200.150.171.0/24 maxlen: 32 200.150.173.0/24 maxlen: 32 200.220.192.0/20 maxlen: 32 200.220.208.0/20 maxlen: 32 201.23.192.0/20 maxlen: 32 201.23.208.0/20 maxlen: 32 201.33.176.0/20 maxlen: 32 201.87.129.0/24 maxlen: 32 201.87.130.0/24 maxlen: 32 201.87.132.0/24 maxlen: 32 201.87.138.0/24 maxlen: 32 201.87.143.0/24 maxlen: 32 201.87.145.0/24 maxlen: 32 201.87.151.0/24 maxlen: 32 201.87.154.0/23 maxlen: 32 201.87.156.0/24 maxlen: 32 201.87.158.0/23 maxlen: 32 201.87.208.0/20 maxlen: 32 2804:e0::/32 maxlen: 128 2804:368::/32 maxlen: 128 2804:3f8::/32 maxlen: 128 2804:680::/32 maxlen: 128 2804:cc4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 11:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:92:e4:4e:bb:6b:e0:95:39:30:99:4d:3c:c5:56:7c:ce:ed:3f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271 Validity Not Before: Sep 29 17:37:26 2026 GMT Not After : Sep 28 17:42:26 2027 GMT Subject: CN=E251470143473B99D62176C09E0987E28CE439F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:68:98:04:65:3c:ef:dc:f8:ff:99:d2:6a: e6:dd:77:b0:c5:58:c9:7e:8f:16:6d:cc:c8:a9:77: 18:16:47:6c:4c:c3:6f:20:a3:63:b4:83:1f:62:e2: bf:d9:52:1b:9b:04:20:d7:e5:30:0a:89:e1:33:15: 3b:39:41:0d:da:74:0a:96:2b:ab:75:24:2c:a1:4b: dd:0a:99:3a:7b:85:df:33:a3:84:a1:bd:e4:3a:95: 3f:08:76:ff:19:02:d7:b0:3c:5f:e1:df:08:41:d2: 85:ba:75:ed:b8:45:19:a9:e6:0f:4a:02:26:75:9b: 41:89:69:6f:09:f7:b2:c0:8d:10:f6:08:8d:01:14: cd:5c:41:88:5f:c1:bf:a5:da:49:24:54:9b:3d:cf: e6:2c:fe:62:6a:49:e4:df:b3:de:65:92:33:a6:78: 09:0b:e7:f2:97:de:b0:42:8f:8f:bf:51:0e:bc:67: 86:d1:1e:ba:6d:f4:a8:05:56:76:1b:6a:21:0e:d7: ce:ed:90:57:36:5b:73:64:a1:35:7f:5d:01:58:19: 53:3b:f8:f9:c9:f7:20:a1:34:1b:70:9d:ad:52:71: 8e:da:5c:95:01:19:ef:20:e5:dc:24:f9:95:84:13: 41:c4:f0:d1:c5:21:52:96:13:96:0e:45:a3:9f:fb: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:51:47:01:43:47:3B:99:D6:21:76:C0:9E:09:87:E2:8C:E4:39:F8 X509v3 Authority Key Identifier: keyid:61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS22381.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.184.0/22 170.78.232.0/22 170.81.128.0/22 177.84.160.0/21 177.126.0.0/24 177.126.2.0-177.126.5.255 177.126.7.0/24 177.126.9.0/24 177.126.12.0/24 177.126.14.0/24 177.130.112.0/20 177.136.80.0/22 186.219.0.0-186.219.47.255 186.237.128.0/20 187.108.128.0/18 187.120.0.0-187.120.11.255 187.120.13.0-187.120.15.255 189.36.160.0/19 189.39.208.0/21 189.39.220.0/22 189.50.128.0/20 189.51.224.0/19 189.91.96.0/19 189.127.64.0/18 200.150.160.0/22 200.150.166.0/24 200.150.168.0/24 200.150.171.0/24 200.150.173.0/24 200.220.192.0/19 201.23.192.0/19 201.33.176.0/20 201.87.129.0-201.87.130.255 201.87.132.0/24 201.87.138.0/24 201.87.143.0/24 201.87.145.0/24 201.87.151.0/24 201.87.154.0-201.87.156.255 201.87.158.0/23 201.87.208.0/20 IPv6: 2804:e0::/32 2804:368::/32 2804:3f8::/32 2804:680::/32 2804:cc4::/32 Signature Algorithm: sha256WithRSAEncryption 9f:c3:f1:09:be:2f:4c:e7:6c:f5:42:b7:76:e6:fd:f3:b3:74: b6:3e:b8:32:94:87:95:3e:f0:75:d0:2b:1a:94:5e:11:1d:02: 12:28:6a:b4:7b:e2:f4:70:55:f3:13:30:99:a5:b1:df:cd:a1: 1e:1d:fa:15:9f:31:ab:4e:b6:79:d9:36:ab:7b:eb:05:93:3d: 0a:a1:b8:5a:c8:31:0d:9d:e1:97:90:a6:84:62:f2:fd:05:86: 48:f9:8a:86:b4:38:d0:e4:7c:8f:1d:e5:94:c8:32:3b:b9:d1: c3:2d:c8:3d:77:2b:fd:36:f0:89:1f:48:cc:9e:db:70:33:72: 7b:81:3a:c0:38:c1:02:f8:5f:02:b8:21:b4:52:4c:08:7f:fa: 7f:26:55:f3:86:1b:af:29:ce:ae:da:48:d6:28:1a:6a:81:9d: 57:2b:b0:71:4c:10:40:09:74:b2:c8:87:e2:bd:c0:c1:14:ca: 6e:3d:64:c2:c5:6e:e4:51:6d:22:ce:5d:9b:43:1d:dd:25:c7: 12:c5:2e:c7:47:78:e1:45:9c:b1:6f:ec:e6:ec:35:1b:2d:8c: a0:96:91:0f:ba:1f:db:b0:cc:a9:15:66:a1:15:dc:fc:2d:bd: 46:b6:89:8e:3c:09:71:ad:71:75:24:40:f1:16:c6:0f:32:8a: 9d:68:bb:cc -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUaJLkTrtr4JU5MJlNPMVWfM7tP7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3QUJCNzJFRjE1QjIxRDJFNTlEQUI5MDg3RjgzQTAy RjM4MTI3MTAeFw0yNjA5MjkxNzM3MjZaFw0yNzA5MjgxNzQyMjZaMDMxMTAvBgNV BAMTKEUyNTE0NzAxNDM0NzNCOTlENjIxNzZDMDlFMDk4N0UyOENFNDM5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpWiYBGU879z4/5nSaubdd7DF WMl+jxZtzMipdxgWR2xMw28go2O0gx9i4r/ZUhubBCDX5TAKieEzFTs5QQ3adAqW K6t1JCyhS90KmTp7hd8zo4ShveQ6lT8Idv8ZAtewPF/h3whB0oW6de24RRmp5g9K AiZ1m0GJaW8J97LAjRD2CI0BFM1cQYhfwb+l2kkkVJs9z+Ys/mJqSeTfs95lkjOm eAkL5/KX3rBCj4+/UQ68Z4bRHrpt9KgFVnYbaiEO187tkFc2W3NkoTV/XQFYGVM7 +PnJ9yChNBtwna1ScY7aXJUBGe8g5dwk+ZWEE0HE8NHFIVKWE5YORaOf+xqjAgMB AAGjggNuMIIDajAdBgNVHQ4EFgQU4lFHAUNHO5nWIXbAngmH4ozkOfgwHwYDVR0j BBgwFoAUYXq7cu8Vsh0uWdq5CH+DoC84EnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV bXcvMC82MTdBQkI3MkVGMTVCMjFEMkU1OURBQjkwODdGODNBMDJGMzgxMjcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxN0FCQjcyRUYxNUIyMUQy RTU5REFCOTA4N0Y4M0EwMkYzODEyNzEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FMk51 c1IyaWp3NkczWU5pTUVGMzMzTVJrb0RURGJXZ2d4N1lLZlZyZlVtdy8wL0FTMjIz ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggFwBggrBgEFBQcBBwEB /wSCAV8wggFbMIIBLAQCAAEwggEkAwQCg2y4AwQCqk7oAwQCqlGAAwQDsVSgAwQA sX4AMAwDBAGxfgIDBAGxfgQDBACxfgcDBACxfgkDBACxfgwDBACxfg4DBASxgnAD BAKxiFAwCwMDALrbAwQEutsgAwQEuu2AAwQGu2yAMAsDAwO7eAMEArt4CDAMAwQA u3gNAwQEu3gAAwQFvSSgAwQDvSfQAwQCvSfcAwQEvTKAAwQFvTPgAwQFvVtgAwQG vX9AAwQCyJagAwQAyJamAwQAyJaoAwQAyJarAwQAyJatAwQFyNzAAwQFyRfAAwQE ySGwMAwDBADJV4EDBADJV4IDBADJV4QDBADJV4oDBADJV48DBADJV5EDBADJV5cw DAMEAclXmgMEAMlXnAMEAclXngMEBMlX0DApBAIAAjAjAwUAKAQA4AMFACgEA2gD BQAoBAP4AwUAKAQGgAMFACgEDMQwDQYJKoZIhvcNAQELBQADggEBAJ/D8Qm+L0zn bPVCt3bm/fOzdLY+uDKUh5U+8HXQKxqUXhEdAhIoarR74vRwVfMTMJmlsd/NoR4d +hWfMatOtnnZNqt76wWTPQqhuFrIMQ2d4ZeQpoRi8v0Fhkj5ioa0ONDkfI8d5ZTI Mju50cMtyD13K/028IkfSMye23AzcnuBOsA4wQL4XwK4IbRSTAh/+n8mVfOGG68p zq7aSNYoGmqBnVcrsHFMEEAJdLLIh+K9wMEUym49ZMLFbuRRbSLOXZtDHd0lxxLF LsdHeOFFnLFv7ObsNRstjKCWkQ+6H9uwzKkVZqEV3PwtvUa2iY48CXGtcXUkQPEW xg8yip1ou8w= -----END CERTIFICATE-----Generated at Mon Oct 12 12:35:31 2026 by rpki-client