$ rpki-client -vvvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS28330.roa File: AS28330.roa (raw, json) Hash identifier: tr1jgd1MHvgfFzSmVLIwoZ86xH6Qc4FWf13BAKShF58= Subject key identifier: E8:56:B9:5A:FB:B8:86:31:FB:BB:A6:41:99:3E:D3:39:C0:9E:D7:1C Certificate issuer: /CN=617ABB72EF15B21D2E59DAB9087F83A02F381271 Certificate serial: 507F1B51139491442DAF3AB012581773E60A49C9 Authority key identifier: 61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer Subject info access: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS28330.roa Signing time: Tue 29 Sep 2026 17:23:43 +0000 ROA not before: Tue 29 Sep 2026 17:18:43 +0000 ROA not after: Tue 28 Sep 2027 17:23:43 +0000 asID: 28330 IP address blocks: 131.108.184.0/22 maxlen: 32 170.78.232.0/22 maxlen: 32 170.81.128.0/22 maxlen: 32 177.126.0.0/24 maxlen: 32 177.126.2.0/23 maxlen: 32 177.126.4.0/23 maxlen: 32 177.126.7.0/24 maxlen: 32 177.126.9.0/24 maxlen: 32 177.126.12.0/24 maxlen: 32 177.126.14.0/24 maxlen: 32 186.237.128.0/20 maxlen: 32 187.120.0.0/21 maxlen: 32 187.120.8.0/22 maxlen: 32 187.120.13.0/24 maxlen: 32 187.120.14.0/23 maxlen: 32 189.39.208.0/21 maxlen: 32 189.39.220.0/22 maxlen: 32 189.50.128.0/20 maxlen: 32 200.150.160.0/22 maxlen: 32 200.150.166.0/24 maxlen: 32 200.150.168.0/24 maxlen: 32 200.150.171.0/24 maxlen: 32 200.150.173.0/24 maxlen: 32 201.87.129.0/24 maxlen: 32 201.87.130.0/24 maxlen: 32 201.87.132.0/24 maxlen: 32 201.87.138.0/24 maxlen: 32 201.87.143.0/24 maxlen: 32 201.87.145.0/24 maxlen: 32 201.87.151.0/24 maxlen: 32 201.87.154.0/23 maxlen: 32 201.87.156.0/24 maxlen: 32 201.87.158.0/23 maxlen: 32 2804:e0::/32 maxlen: 128 2804:368::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 11:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7f:1b:51:13:94:91:44:2d:af:3a:b0:12:58:17:73:e6:0a:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271 Validity Not Before: Sep 29 17:18:43 2026 GMT Not After : Sep 28 17:23:43 2027 GMT Subject: CN=E856B95AFBB88631FBBBA641993ED339C09ED71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:3f:62:b4:45:fe:18:86:17:9f:2d:8b:4a: dd:e0:d5:b4:e3:4d:cd:0d:5c:ab:04:5c:99:fa:fd: 32:74:99:8f:2d:37:a1:29:7a:3a:61:54:8f:3e:61: 24:c3:f8:79:f7:65:46:57:61:cb:f1:b2:66:37:c0: dc:0c:65:85:86:92:cb:6c:e5:16:1b:a5:99:e4:c4: 71:ed:24:6f:d8:85:5f:ad:dc:03:10:0e:c2:cd:2c: d3:27:62:68:64:b1:4c:16:76:9f:2c:92:d5:7c:37: 11:5d:af:6b:4d:16:a3:ff:31:ab:13:51:0c:e1:4a: 4d:89:ec:75:16:86:d1:21:bf:c9:09:d9:30:9b:15: 3a:a9:b9:e7:42:6a:1b:bd:4e:a8:94:85:e3:24:17: ca:2f:7e:71:6a:8b:69:7c:82:d3:9b:38:87:5f:5d: 05:03:47:f7:7a:bb:71:d6:95:7a:b4:72:da:79:9e: 73:41:b9:34:66:97:3a:b4:2e:72:dd:2e:ff:5d:8e: dd:6c:4a:65:bb:d0:00:e6:20:d6:ff:27:40:eb:a8: d9:21:63:f4:16:34:be:24:bb:ae:6a:76:56:c9:2b: 6c:0f:b3:be:4e:0e:ec:0d:d2:eb:37:b6:66:1d:ad: e6:36:eb:c0:4d:9f:13:89:cf:f1:c7:3c:56:81:68: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:B9:5A:FB:B8:86:31:FB:BB:A6:41:99:3E:D3:39:C0:9E:D7:1C X509v3 Authority Key Identifier: keyid:61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS28330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.184.0/22 170.78.232.0/22 170.81.128.0/22 177.126.0.0/24 177.126.2.0-177.126.5.255 177.126.7.0/24 177.126.9.0/24 177.126.12.0/24 177.126.14.0/24 186.237.128.0/20 187.120.0.0-187.120.11.255 187.120.13.0-187.120.15.255 189.39.208.0/21 189.39.220.0/22 189.50.128.0/20 200.150.160.0/22 200.150.166.0/24 200.150.168.0/24 200.150.171.0/24 200.150.173.0/24 201.87.129.0-201.87.130.255 201.87.132.0/24 201.87.138.0/24 201.87.143.0/24 201.87.145.0/24 201.87.151.0/24 201.87.154.0-201.87.156.255 201.87.158.0/23 IPv6: 2804:e0::/32 2804:368::/32 Signature Algorithm: sha256WithRSAEncryption 2e:0c:51:80:ae:3e:a4:f3:a6:16:9d:78:ed:18:d8:91:db:a3: b2:99:7c:74:69:cc:b3:b6:11:11:88:d5:7f:fa:3b:ea:06:d5: 95:23:a7:13:c7:6f:6e:98:e6:31:21:ed:11:22:a4:56:38:3b: 88:0b:af:25:86:f1:30:c3:36:87:b8:61:0e:16:51:e6:bb:b1: d0:2f:3b:84:10:a9:ae:92:a6:be:c6:7d:ec:4e:91:fd:89:90: 43:67:0b:8a:e5:aa:88:66:f2:29:2f:c5:8b:c1:d1:38:ec:d8: 9b:33:38:1e:e2:89:a2:59:f4:0e:04:f7:e0:67:e0:c5:39:bc: 86:e1:5b:c3:0f:35:97:a7:2f:63:c5:35:33:d9:1c:40:23:eb: da:16:10:e9:e3:58:bd:af:85:a2:ca:d6:fb:be:93:9d:f4:f3: 58:ba:31:aa:42:22:4d:86:1a:9f:f3:4b:58:e5:dc:f0:38:df: 31:01:12:af:0a:57:03:db:12:64:61:4f:45:d3:e5:6f:9d:b9: 4a:02:a7:d9:78:aa:6f:de:7c:3a:ca:e3:49:00:70:6d:90:46: 46:7b:6b:7f:cc:47:61:63:20:63:b1:70:ba:8f:56:8c:6e:f4: 3a:e2:3d:3b:a4:00:94:3d:a0:68:01:10:b9:fb:3f:a4:0c:96: 04:b9:2f:e5 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgIUUH8bUROUkUQtrzqwElgXc+YKSckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3QUJCNzJFRjE1QjIxRDJFNTlEQUI5MDg3RjgzQTAy RjM4MTI3MTAeFw0yNjA5MjkxNzE4NDNaFw0yNzA5MjgxNzIzNDNaMDMxMTAvBgNV BAMTKEU4NTZCOTVBRkJCODg2MzFGQkJCQTY0MTk5M0VEMzM5QzA5RUQ3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgj9itEX+GIYXny2LSt3g1bTj Tc0NXKsEXJn6/TJ0mY8tN6EpejphVI8+YSTD+Hn3ZUZXYcvxsmY3wNwMZYWGksts 5RYbpZnkxHHtJG/YhV+t3AMQDsLNLNMnYmhksUwWdp8sktV8NxFdr2tNFqP/MasT UQzhSk2J7HUWhtEhv8kJ2TCbFTqpuedCahu9TqiUheMkF8ovfnFqi2l8gtObOIdf XQUDR/d6u3HWlXq0ctp5nnNBuTRmlzq0LnLdLv9djt1sSmW70ADmINb/J0DrqNkh Y/QWNL4ku65qdlbJK2wPs75ODuwN0us3tmYdreY268BNnxOJz/HHPFaBaLA3AgMB AAGjggMAMIIC/DAdBgNVHQ4EFgQU6Fa5Wvu4hjH7u6ZBmT7TOcCe1xwwHwYDVR0j BBgwFoAUYXq7cu8Vsh0uWdq5CH+DoC84EnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV bXcvMC82MTdBQkI3MkVGMTVCMjFEMkU1OURBQjkwODdGODNBMDJGMzgxMjcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxN0FCQjcyRUYxNUIyMUQy RTU5REFCOTA4N0Y4M0EwMkYzODEyNzEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FMk51 c1IyaWp3NkczWU5pTUVGMzMzTVJrb0RURGJXZ2d4N1lLZlZyZlVtdy8wL0FTMjgz MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggECBggrBgEFBQcBBwEB /wSB8jCB7zCB1gQCAAEwgc8DBAKDbLgDBAKqTugDBAKqUYADBACxfgAwDAMEAbF+ AgMEAbF+BAMEALF+BwMEALF+CQMEALF+DAMEALF+DgMEBLrtgDALAwMDu3gDBAK7 eAgwDAMEALt4DQMEBLt4AAMEA70n0AMEAr0n3AMEBL0ygAMEAsiWoAMEAMiWpgME AMiWqAMEAMiWqwMEAMiWrTAMAwQAyVeBAwQAyVeCAwQAyVeEAwQAyVeKAwQAyVeP AwQAyVeRAwQAyVeXMAwDBAHJV5oDBADJV5wDBAHJV54wFAQCAAIwDgMFACgEAOAD BQAoBANoMA0GCSqGSIb3DQEBCwUAA4IBAQAuDFGArj6k86YWnXjtGNiR26OymXx0 acyzthERiNV/+jvqBtWVI6cTx29umOYxIe0RIqRWODuIC68lhvEwwzaHuGEOFlHm u7HQLzuEEKmukqa+xn3sTpH9iZBDZwuK5aqIZvIpL8WLwdE47NibMzge4omiWfQO BPfgZ+DFObyG4VvDDzWXpy9jxTUz2RxAI+vaFhDp41i9r4Wiytb7vpOd9PNYujGq QiJNhhqf80tY5dzwON8xARKvClcD2xJkYU9F0+VvnblKAqfZeKpv3nw6yuNJAHBt kEZGe2t/zEdhYyBjsXC6j1aMbvQ64j07pACUPaBoARC5+z+kDJYEuS/l -----END CERTIFICATE-----Generated at Mon Oct 12 12:35:38 2026 by rpki-client