$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AS28220.roa File: AS28220.roa (raw, json) Hash identifier: W9YJxAHBavK8QhEv0HZAQy8rnkkrssFEG4Vn3hKZ6U4= Subject key identifier: 2E:4D:29:05:BA:12:CA:88:7B:D5:79:D0:99:5F:87:22:D2:14:54:DF Certificate issuer: /CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF Certificate serial: 5D94F4699B91816C428F87CA0B26DF464599ADFC Authority key identifier: 2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer Subject info access: rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AS28220.roa Signing time: Fri 09 May 2025 13:41:18 +0000 ROA not before: Fri 09 May 2025 13:36:18 +0000 ROA not after: Fri 08 May 2026 13:41:18 +0000 asID: 28220 IP address blocks: 138.255.216.0/22 maxlen: 24 168.121.148.0/22 maxlen: 24 170.82.132.0/22 maxlen: 24 177.8.48.0/21 maxlen: 24 177.55.48.0/20 maxlen: 24 2804:fec::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 19:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:94:f4:69:9b:91:81:6c:42:8f:87:ca:0b:26:df:46:45:99:ad:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF Validity Not Before: May 9 13:36:18 2025 GMT Not After : May 8 13:41:18 2026 GMT Subject: CN=2E4D2905BA12CA887BD579D0995F8722D21454DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:e5:83:30:93:0f:1a:96:98:56:db:04:b9: 78:35:01:fd:8b:06:10:35:77:5e:9e:b1:c2:67:22: c5:20:4e:78:36:dc:cb:0b:4d:22:85:08:05:44:a7: 47:85:d9:be:c3:5c:00:d0:ba:d0:a5:25:1b:57:76: 0a:1a:8c:cd:ae:b0:21:b9:dc:3a:18:e3:8d:27:83: 68:76:38:95:22:a7:c9:4b:af:9b:2a:3b:75:b8:fe: 3f:92:0c:96:68:91:20:3f:be:97:73:04:4c:7c:47: a2:6d:e3:c6:30:c2:37:77:83:77:eb:29:c7:c9:da: 1c:02:a7:4b:8e:b4:73:07:09:0f:1b:4e:b7:75:b3: ba:da:3e:8c:66:55:12:03:67:db:a9:18:ef:b0:e8: 9d:dd:25:83:88:e2:2f:8b:3c:ee:05:f7:0b:34:5a: 0e:aa:4d:ab:ed:94:97:d7:52:f6:6a:2a:df:be:75: 6c:12:57:79:ca:4a:fd:fd:62:01:eb:7a:46:93:48: 2c:84:be:b0:e1:2d:89:b4:d6:11:53:f4:7d:df:d9: 93:54:65:5f:27:2b:35:18:e6:b1:44:87:36:9f:f9: 35:a4:89:81:3b:a6:ef:a7:88:14:42:8d:0f:dd:52: 51:bc:45:a3:e2:a1:47:f7:e8:c7:f3:af:2e:fe:d8: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4D:29:05:BA:12:CA:88:7B:D5:79:D0:99:5F:87:22:D2:14:54:DF X509v3 Authority Key Identifier: keyid:2E:43:63:E2:1F:19:FB:35:7C:3F:F6:B9:5D:BE:8A:91:6A:23:EB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E4363E21F19FB357C3FF6B95DBE8A916A23EBCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AS28220.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.216.0/22 168.121.148.0/22 170.82.132.0/22 177.8.48.0/21 177.55.48.0/20 IPv6: 2804:fec::/32 Signature Algorithm: sha256WithRSAEncryption 91:94:15:1a:1d:d5:5f:7a:e4:b3:75:61:b8:d5:81:3c:9a:b1: 7a:3d:c2:f4:2f:17:2c:15:cb:2c:fb:15:df:90:2c:9c:9d:c8: 62:ae:c2:4a:32:0a:a2:3a:d3:ed:37:98:1b:32:c7:e8:02:f5: 63:50:cf:fc:af:e1:68:5c:7c:7f:73:a6:9d:8f:f0:77:23:02: 23:9f:cf:ed:c3:ce:0c:fd:9c:bc:a9:dd:32:e4:a7:5c:61:44: 75:4b:2a:54:99:21:29:7d:ce:01:97:49:aa:fb:4c:64:9d:9a: 34:07:d5:a8:c0:6d:37:ed:d8:42:b0:2b:09:91:e2:c2:a8:36: 5d:5a:70:1c:72:e8:9a:c0:19:cf:ec:dc:b0:1e:4d:9e:cf:f0: 58:30:24:5b:71:86:d9:44:a1:5a:89:11:12:c0:74:07:56:c1: 88:f5:2f:64:4b:28:14:9d:5f:05:64:d0:35:6f:dd:43:d5:9a: d9:89:0c:8b:87:3a:7d:57:26:83:16:d9:3e:04:73:4a:6d:cc: b7:16:62:bd:66:f9:4f:06:60:fc:49:39:41:69:7f:db:3d:7a: 88:59:77:da:05:6b:6b:83:08:24:22:38:7f:a6:f8:54:cb:00: ff:ae:a8:64:8e:a1:e6:b4:86:2b:ed:79:12:22:19:2e:71:13: 99:f4:bc:c5 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUXZT0aZuRgWxCj4fKCybfRkWZrfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU0MzYzRTIxRjE5RkIzNTdDM0ZGNkI5NURCRThBOTE2 QTIzRUJDRjAeFw0yNTA1MDkxMzM2MThaFw0yNjA1MDgxMzQxMThaMDMxMTAvBgNV BAMTKDJFNEQyOTA1QkExMkNBODg3QkQ1NzlEMDk5NUY4NzIyRDIxNDU0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ5uWDMJMPGpaYVtsEuXg1Af2L BhA1d16escJnIsUgTng23MsLTSKFCAVEp0eF2b7DXADQutClJRtXdgoajM2usCG5 3DoY440ng2h2OJUip8lLr5sqO3W4/j+SDJZokSA/vpdzBEx8R6Jt48Ywwjd3g3fr KcfJ2hwCp0uOtHMHCQ8bTrd1s7raPoxmVRIDZ9upGO+w6J3dJYOI4i+LPO4F9ws0 Wg6qTavtlJfXUvZqKt++dWwSV3nKSv39YgHrekaTSCyEvrDhLYm01hFT9H3f2ZNU ZV8nKzUY5rFEhzaf+TWkiYE7pu+niBRCjQ/dUlG8RaPioUf36Mfzry7+2IhtAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQULk0pBboSyoh71XnQmV+HItIUVN8wHwYDVR0j BBgwFoAULkNj4h8Z+zV8P/a5Xb6KkWoj688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR ZDQvMC8yRTQzNjNFMjFGMTlGQjM1N0MzRkY2Qjk1REJFOEE5MTZBMjNFQkNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNDM2M0UyMUYxOUZCMzU3 QzNGRjZCOTVEQkU4QTkxNkEyM0VCQ0YuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FTVAz eG1iNU1TVmdhbXJKaXpzQjNiUFI5d2NNRGk5Um5kcnZwWWhoc1FkNC8wL0FTMjgy MjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAKK/9gDBAKoeZQDBAKqUoQDBAOxCDADBASxNzAwDQQCAAIw BwMFACgED+wwDQYJKoZIhvcNAQELBQADggEBAJGUFRod1V965LN1YbjVgTyasXo9 wvQvFywVyyz7Fd+QLJydyGKuwkoyCqI60+03mBsyx+gC9WNQz/yv4WhcfH9zpp2P 8HcjAiOfz+3Dzgz9nLyp3TLkp1xhRHVLKlSZISl9zgGXSar7TGSdmjQH1ajAbTft 2EKwKwmR4sKoNl1acBxy6JrAGc/s3LAeTZ7P8FgwJFtxhtlEoVqJERLAdAdWwYj1 L2RLKBSdXwVk0DVv3UPVmtmJDIuHOn1XJoMW2T4Ec0ptzLcWYr1m+U8GYPxJOUFp f9s9eohZd9oFa2uDCCQiOH+m+FTLAP+uqGSOoea0hivteRIiGS5xE5n0vMU= -----END CERTIFICATE-----Generated at Tue May 13 21:42:35 2025 by rpki-client