$ rpki-client -vvvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS28210.roa File: AS28210.roa (raw, json) Hash identifier: yW7DqojACxihUON57NBoRkckCenOVUGuRWlkRpjCsYc= Subject key identifier: BB:69:AB:55:77:DA:F3:CA:F2:28:4F:FF:28:33:B4:76:5D:7A:DA:28 Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Certificate serial: 40A810E0F5A9D187144E40A9B0B815B30EC76EBC Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS28210.roa Signing time: Wed 19 Aug 2026 15:22:16 +0000 ROA not before: Wed 19 Aug 2026 15:17:16 +0000 ROA not after: Wed 18 Aug 2027 15:22:16 +0000 asID: 28210 IP address blocks: 45.226.116.0/22 maxlen: 22 45.226.116.0/22 maxlen: 24 45.232.132.0/22 maxlen: 22 45.232.132.0/22 maxlen: 24 45.232.135.0/24 maxlen: 24 131.0.28.0/22 maxlen: 22 131.0.28.0/22 maxlen: 24 131.255.20.0/22 maxlen: 22 131.255.20.0/22 maxlen: 24 138.59.120.0/22 maxlen: 22 138.59.120.0/22 maxlen: 24 138.117.220.0/22 maxlen: 22 138.117.220.0/22 maxlen: 24 138.185.96.0/22 maxlen: 22 138.185.96.0/22 maxlen: 24 138.204.136.0/22 maxlen: 22 138.204.136.0/22 maxlen: 24 138.255.144.0/22 maxlen: 22 138.255.144.0/22 maxlen: 24 168.228.200.0/22 maxlen: 24 170.233.48.0/22 maxlen: 22 170.233.48.0/22 maxlen: 24 170.233.49.0/24 maxlen: 24 170.233.50.0/24 maxlen: 24 170.238.196.0/22 maxlen: 22 170.238.196.0/24 maxlen: 24 170.238.197.0/24 maxlen: 24 170.238.198.0/24 maxlen: 24 170.238.199.0/24 maxlen: 24 177.55.192.0/20 maxlen: 24 177.85.48.0/21 maxlen: 21 177.85.48.0/21 maxlen: 24 177.131.160.0/19 maxlen: 24 177.137.32.0/20 maxlen: 20 177.137.32.0/20 maxlen: 24 177.137.36.0/24 maxlen: 24 177.137.40.0/24 maxlen: 24 177.137.47.0/24 maxlen: 24 177.222.160.0/21 maxlen: 24 179.191.192.0/19 maxlen: 24 186.194.96.0/20 maxlen: 20 186.194.96.0/20 maxlen: 24 186.219.112.0/21 maxlen: 21 186.219.112.0/21 maxlen: 24 189.113.64.0/20 maxlen: 20 189.113.64.0/20 maxlen: 24 189.127.208.0/20 maxlen: 20 189.127.208.0/20 maxlen: 24 189.127.210.0/24 maxlen: 24 189.127.216.0/24 maxlen: 24 189.127.221.0/24 maxlen: 24 191.243.88.0/24 maxlen: 24 191.243.89.0/24 maxlen: 24 191.243.90.0/24 maxlen: 24 191.243.91.0/24 maxlen: 24 2804:56c::/32 maxlen: 43 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Sep 2026 16:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a8:10:e0:f5:a9:d1:87:14:4e:40:a9:b0:b8:15:b3:0e:c7:6e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Validity Not Before: Aug 19 15:17:16 2026 GMT Not After : Aug 18 15:22:16 2027 GMT Subject: CN=BB69AB5577DAF3CAF2284FFF2833B4765D7ADA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:f0:24:ad:31:e1:f1:1b:56:da:74:ab:64: ff:f3:bb:0c:09:56:14:18:ba:de:b0:e1:8b:c5:81: 11:60:f6:f8:79:d4:da:1e:63:a2:7a:61:fc:af:a8: b5:3d:d0:b1:ce:d7:d7:a2:d6:bc:8f:34:1b:73:50: 77:c4:fd:0d:99:ad:ba:75:4b:b1:2c:e6:b1:74:28: 58:21:18:28:34:0f:27:b3:3c:21:b5:99:9b:39:9b: fd:14:e4:2d:5f:5f:1e:80:44:39:da:2e:79:79:aa: 41:70:75:67:9c:d6:40:ae:e6:ea:cc:36:f1:b6:d1: 92:7f:0d:70:ab:15:16:8a:f6:e2:af:af:93:20:45: ca:a9:eb:f4:03:a8:dc:8d:be:7a:3a:d1:c6:b3:46: 99:04:cc:2d:27:da:96:e8:99:77:87:77:0d:b2:5b: fa:1c:0f:2b:3c:1c:07:c8:fa:3e:fc:be:ae:c2:dc: 15:f6:89:1b:d8:90:b1:35:19:1a:44:e2:f5:d3:1c: ff:94:2e:84:48:63:a5:66:26:43:d6:a0:12:a5:8d: 77:ab:38:49:cd:36:7a:24:18:b1:ab:70:8c:14:7b: a3:42:51:fc:bb:1c:6d:7b:02:72:1f:09:bc:19:da: 61:37:53:d7:48:38:6a:2b:39:00:a8:60:5e:40:4e: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:69:AB:55:77:DA:F3:CA:F2:28:4F:FF:28:33:B4:76:5D:7A:DA:28 X509v3 Authority Key Identifier: keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS28210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.116.0/22 45.232.132.0/22 131.0.28.0/22 131.255.20.0/22 138.59.120.0/22 138.117.220.0/22 138.185.96.0/22 138.204.136.0/22 138.255.144.0/22 168.228.200.0/22 170.233.48.0/22 170.238.196.0/22 177.55.192.0/20 177.85.48.0/21 177.131.160.0/19 177.137.32.0/20 177.222.160.0/21 179.191.192.0/19 186.194.96.0/20 186.219.112.0/21 189.113.64.0/20 189.127.208.0/20 191.243.88.0/22 IPv6: 2804:56c::/32 Signature Algorithm: sha256WithRSAEncryption 16:d3:8e:a0:e2:42:3d:e4:87:cc:be:96:a6:cb:0f:43:cb:2a: ad:a8:28:8d:2d:87:5f:e4:4f:10:66:a7:8e:11:6e:33:2c:1b: 18:56:15:37:46:fc:44:88:e5:e2:52:99:3f:62:6c:d5:76:f0: 0d:bd:de:c3:41:ff:05:38:8d:2c:ab:18:98:50:5a:06:d8:37: 33:01:73:c0:3d:8c:e4:da:bc:c0:94:d0:7c:e6:73:64:ed:76: 33:2e:42:3e:9b:6a:73:0e:c3:97:b2:aa:b7:1b:e4:44:c0:00: 2c:06:3e:90:37:50:37:f6:ad:88:50:f5:f0:4e:3c:20:95:8d: bb:37:67:61:84:09:5a:64:a5:50:89:cc:ea:f7:64:25:04:58: 9c:e7:ef:66:21:85:52:f4:d6:98:d2:7b:ce:33:8f:43:01:8a: 03:e5:c0:59:a0:2a:15:17:cf:de:48:65:75:ea:44:df:16:4a: 31:85:42:43:62:60:3f:4a:04:7d:4e:43:b6:40:15:5f:66:15: eb:03:92:12:b2:80:87:31:35:bf:b6:e2:7c:dc:7d:1f:e3:91: 77:57:86:23:6a:36:96:cf:e1:75:49:78:54:29:15:d4:f5:5a: 45:3d:fc:7d:9b:93:f1:35:a2:83:6c:0a:95:6c:57:61:31:73: ab:9d:16:9d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUQKgQ4PWp0YcUTkCpsLgVsw7HbrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3 MUQxQzRBQTAeFw0yNjA4MTkxNTE3MTZaFw0yNzA4MTgxNTIyMTZaMDMxMTAvBgNV BAMTKEJCNjlBQjU1NzdEQUYzQ0FGMjI4NEZGRjI4MzNCNDc2NUQ3QURBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00fAkrTHh8RtW2nSrZP/zuwwJ VhQYut6w4YvFgRFg9vh51NoeY6J6YfyvqLU90LHO19ei1ryPNBtzUHfE/Q2Zrbp1 S7Es5rF0KFghGCg0DyezPCG1mZs5m/0U5C1fXx6ARDnaLnl5qkFwdWec1kCu5urM NvG20ZJ/DXCrFRaK9uKvr5MgRcqp6/QDqNyNvno60cazRpkEzC0n2pbomXeHdw2y W/ocDys8HAfI+j78vq7C3BX2iRvYkLE1GRpE4vXTHP+ULoRIY6VmJkPWoBKljXer OEnNNnokGLGrcIwUe6NCUfy7HG17AnIfCbwZ2mE3U9dIOGorOQCoYF5ATh/bAgMB AAGjggKzMIICrzAdBgNVHQ4EFgQUu2mrVXfa88ryKE//KDO0dl162igwHwYDVR0j BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UWZ4 UnJ0aEVXd20xdzdZU2ZZRTlXZDY0MVYxbmFYZGt1S2tBdEM4cWdhVi8xL0FTMjgy MTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgbYGCCsGAQUFBwEHAQH/ BIGmMIGjMIGRBAIAATCBigMEAi3idAMEAi3ohAMEAoMAHAMEAoP/FAMEAoo7eAME Aop13AMEAoq5YAMEAorMiAMEAor/kAMEAqjkyAMEAqrpMAMEAqruxAMEBLE3wAME A7FVMAMEBbGDoAMEBLGJIAMEA7HeoAMEBbO/wAMEBLrCYAMEA7rbcAMEBL1xQAME BL1/0AMEAr/zWDANBAIAAjAHAwUAKAQFbDANBgkqhkiG9w0BAQsFAAOCAQEAFtOO oOJCPeSHzL6WpssPQ8sqragojS2HX+RPEGanjhFuMywbGFYVN0b8RIjl4lKZP2Js 1XbwDb3ew0H/BTiNLKsYmFBaBtg3MwFzwD2M5Nq8wJTQfOZzZO12My5CPptqcw7D l7KqtxvkRMAALAY+kDdQN/atiFD18E48IJWNuzdnYYQJWmSlUInM6vdkJQRYnOfv ZiGFUvTWmNJ7zjOPQwGKA+XAWaAqFRfP3khldepE3xZKMYVCQ2JgP0oEfU5DtkAV X2YV6wOSErKAhzE1v7bifNx9H+ORd1eGI2o2ls/hdUl4VCkV1PVaRT38fZuT8TWi g2wKlWxXYTFzq50WnQ== -----END CERTIFICATE-----Generated at Fri Sep 4 00:19:02 2026 by rpki-client