$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa File: AS28270.roa (raw, json) Hash identifier: VmLY0oHaXZNQP0RguVL3v4FSnmxGXbH/1s3wnQ93Qok= Subject key identifier: 10:FB:01:F0:1A:CD:2F:35:D0:D5:FA:4E:8A:4A:73:8D:22:25:DD:92 Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 25B44D92C9B3C68EBF5E6C57BD463A1A1BA56779 Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa Signing time: Fri 06 Feb 2026 20:01:11 +0000 ROA not before: Fri 06 Feb 2026 19:56:11 +0000 ROA not after: Fri 05 Feb 2027 20:01:11 +0000 asID: 28270 IP address blocks: 131.221.68.0/22 maxlen: 22 138.117.124.0/22 maxlen: 22 138.121.220.0/22 maxlen: 22 138.121.220.0/24 maxlen: 24 138.122.236.0/22 maxlen: 22 138.122.236.0/24 maxlen: 24 138.122.237.0/24 maxlen: 24 143.255.112.0/22 maxlen: 22 160.238.220.0/22 maxlen: 22 168.228.128.0/22 maxlen: 22 168.232.116.0/22 maxlen: 22 170.0.204.0/22 maxlen: 22 170.245.100.0/22 maxlen: 22 177.66.64.0/21 maxlen: 21 177.70.128.0/20 maxlen: 20 177.75.192.0/20 maxlen: 20 177.75.208.0/20 maxlen: 20 177.87.144.0/21 maxlen: 21 177.130.192.0/19 maxlen: 19 179.191.128.0/20 maxlen: 20 179.191.144.0/20 maxlen: 20 187.18.128.0/17 maxlen: 17 187.18.212.0/22 maxlen: 22 187.108.96.0/20 maxlen: 20 187.110.208.0/20 maxlen: 20 189.45.64.0/18 maxlen: 18 189.50.144.0/20 maxlen: 20 200.94.240.0/22 maxlen: 22 201.149.120.0/22 maxlen: 22 2804:880::/32 maxlen: 32 2804:880:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Feb 2026 21:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b4:4d:92:c9:b3:c6:8e:bf:5e:6c:57:bd:46:3a:1a:1b:a5:67:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Feb 6 19:56:11 2026 GMT Not After : Feb 5 20:01:11 2027 GMT Subject: CN=10FB01F01ACD2F35D0D5FA4E8A4A738D2225DD92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:ee:b0:49:f3:0e:d4:36:01:47:44:af:0b: ff:39:e3:41:53:5f:fa:84:23:50:e7:23:46:f9:ee: 0a:8b:b0:30:1b:2a:86:5b:05:86:a3:d6:39:4f:0e: 13:22:47:62:ef:19:d6:db:43:3a:de:6c:34:76:50: c1:58:cd:97:1f:14:5f:6b:37:df:28:9f:a4:84:7c: b7:27:13:86:e9:fa:77:0f:76:43:0e:42:95:c6:56: bf:8f:e5:26:b0:50:87:55:4d:db:4f:9f:09:51:5e: 98:65:51:3d:c2:ac:60:9c:8c:f4:b0:bc:56:8a:ad: 34:aa:e5:d1:ce:88:af:ae:dc:0a:81:5b:79:fc:09: ec:8c:bb:82:3e:c1:c7:85:0f:c8:ae:b9:85:63:07: b3:9c:06:62:12:2b:f9:74:6b:75:a9:21:26:11:fe: 04:28:6d:f5:bc:d4:75:f7:4e:e2:ca:12:2a:bb:47: e3:2d:5c:e3:dd:47:cd:67:40:80:be:78:f3:c3:51: 85:e8:5f:32:c1:52:c7:de:d1:e1:7c:d0:97:69:68: c4:a2:2d:52:ae:af:fc:50:0c:dc:b9:28:fc:78:50: 1c:42:e2:15:06:35:1e:1b:6e:49:73:e3:83:93:32: f2:65:50:c5:2c:c7:c8:37:5d:7b:c6:fd:6d:2f:82: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FB:01:F0:1A:CD:2F:35:D0:D5:FA:4E:8A:4A:73:8D:22:25:DD:92 X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.68.0/22 138.117.124.0/22 138.121.220.0/22 138.122.236.0/22 143.255.112.0/22 160.238.220.0/22 168.228.128.0/22 168.232.116.0/22 170.0.204.0/22 170.245.100.0/22 177.66.64.0/21 177.70.128.0/20 177.75.192.0/19 177.87.144.0/21 177.130.192.0/19 179.191.128.0/19 187.18.128.0/17 187.108.96.0/20 187.110.208.0/20 189.45.64.0/18 189.50.144.0/20 200.94.240.0/22 201.149.120.0/22 IPv6: 2804:880::/32 Signature Algorithm: sha256WithRSAEncryption 21:88:b5:a0:e4:39:ee:a7:18:86:6f:65:c3:7c:1e:1f:b0:10: 8c:31:82:18:2b:1b:0b:e0:8c:36:b4:a0:16:57:41:95:0c:73: f1:80:5b:5e:d7:8f:ca:6b:a8:bf:00:84:a6:29:bd:c4:b3:94: 58:72:86:10:82:03:67:68:46:9d:32:50:cf:51:d1:cb:3e:b8: 78:0e:74:dc:0c:54:31:0a:3c:db:5c:29:93:0b:f6:21:b7:80: c1:e3:11:44:9e:af:75:a2:fc:31:0d:71:80:b3:d9:ac:64:1f: db:97:02:db:29:ba:a9:22:a4:78:aa:67:3b:33:f2:cf:94:65: b8:77:da:08:26:21:ab:8e:56:a4:f4:2f:32:44:e3:3f:ff:55: ce:6f:bf:d0:84:f5:bb:43:fb:c4:d3:66:12:44:cf:58:07:51: 78:77:93:b4:92:4b:3a:11:e7:26:20:e2:28:85:97:98:72:4d: 57:78:09:20:9d:b3:21:12:76:9c:7e:f2:7c:1d:bd:0e:44:d2: 22:a9:52:dd:f8:cd:fd:2b:a2:4d:d6:64:95:9f:cc:45:25:26: e0:83:8e:39:9d:48:6a:98:0f:30:57:52:1a:d3:6a:22:9c:44: 82:d8:2e:75:70:0e:10:68:16:b0:07:43:4c:a5:97:ca:57:a4: 95:11:9f:48 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUJbRNksmzxo6/XmxXvUY6GhulZ3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjAyMDYxOTU2MTFaFw0yNzAyMDUyMDAxMTFaMDMxMTAvBgNV BAMTKDEwRkIwMUYwMUFDRDJGMzVEMEQ1RkE0RThBNEE3MzhEMjIyNUREOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bu6wSfMO1DYBR0SvC/8540FT X/qEI1DnI0b57gqLsDAbKoZbBYaj1jlPDhMiR2LvGdbbQzrebDR2UMFYzZcfFF9r N98on6SEfLcnE4bp+ncPdkMOQpXGVr+P5SawUIdVTdtPnwlRXphlUT3CrGCcjPSw vFaKrTSq5dHOiK+u3AqBW3n8CeyMu4I+wceFD8iuuYVjB7OcBmISK/l0a3WpISYR /gQobfW81HX3TuLKEiq7R+MtXOPdR81nQIC+ePPDUYXoXzLBUsfe0eF80JdpaMSi LVKur/xQDNy5KPx4UBxC4hUGNR4bbklz44OTMvJlUMUsx8g3XXvG/W0vgv2jAgMB AAGjggKzMIICrzAdBgNVHQ4EFgQUEPsB8BrNLzXQ1fpOikpzjSIl3ZIwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjgy NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgbYGCCsGAQUFBwEHAQH/ BIGmMIGjMIGRBAIAATCBigMEAoPdRAMEAop1fAMEAop53AMEAop67AMEAo//cAME AqDu3AMEAqjkgAMEAqjodAMEAqoAzAMEAqr1ZAMEA7FCQAMEBLFGgAMEBbFLwAME A7FXkAMEBbGCwAMEBbO/gAMEB7sSgAMEBLtsYAMEBLtu0AMEBr0tQAMEBL0ykAME Ashe8AMEAsmVeDANBAIAAjAHAwUAKAQIgDANBgkqhkiG9w0BAQsFAAOCAQEAIYi1 oOQ57qcYhm9lw3weH7AQjDGCGCsbC+CMNrSgFldBlQxz8YBbXtePymuovwCEpim9 xLOUWHKGEIIDZ2hGnTJQz1HRyz64eA503AxUMQo821wpkwv2IbeAweMRRJ6vdaL8 MQ1xgLPZrGQf25cC2ym6qSKkeKpnOzPyz5RluHfaCCYhq45WpPQvMkTjP/9Vzm+/ 0IT1u0P7xNNmEkTPWAdReHeTtJJLOhHnJiDiKIWXmHJNV3gJIJ2zIRJ2nH7yfB29 DkTSIqlS3fjN/SuiTdZklZ/MRSUm4IOOOZ1IapgPMFdSGtNqIpxEgtgudXAOEGgW sAdDTKWXyleklRGfSA== -----END CERTIFICATE-----Generated at Thu Feb 19 02:59:08 2026 by rpki-client