$ rpki-client -vvvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS28294.roa File: AS28294.roa (raw, json) Hash identifier: LevNrYPThuEdaME3HzZD9wPxyJiP6773n3Vyo8OP0eU= Subject key identifier: C5:A7:62:5C:AE:B0:F4:BB:80:2D:95:49:50:59:C0:4F:0A:F2:E0:73 Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Certificate serial: 4A88C31B6CE797B9A4DA2BE861B698894B1CE891 Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS28294.roa Signing time: Fri 14 Aug 2026 13:20:59 +0000 ROA not before: Fri 14 Aug 2026 13:15:59 +0000 ROA not after: Fri 13 Aug 2027 13:20:59 +0000 asID: 28294 IP address blocks: 131.72.84.0/22 maxlen: 24 138.36.88.0/22 maxlen: 24 138.204.208.0/22 maxlen: 24 168.181.0.0/22 maxlen: 24 168.194.92.0/22 maxlen: 24 170.246.140.0/22 maxlen: 24 177.221.0.0/19 maxlen: 24 179.107.192.0/19 maxlen: 24 186.226.128.0/23 maxlen: 24 186.226.128.0/24 maxlen: 24 186.226.136.0/23 maxlen: 23 186.226.138.0/23 maxlen: 24 186.226.140.0/24 maxlen: 24 186.226.141.0/24 maxlen: 24 186.226.142.0/23 maxlen: 23 189.36.144.0/20 maxlen: 24 2804:b4::/32 maxlen: 48 2804:b4:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Sep 2026 16:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:c3:1b:6c:e7:97:b9:a4:da:2b:e8:61:b6:98:89:4b:1c:e8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Validity Not Before: Aug 14 13:15:59 2026 GMT Not After : Aug 13 13:20:59 2027 GMT Subject: CN=C5A7625CAEB0F4BB802D95495059C04F0AF2E073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:31:a4:78:28:b5:bf:a5:92:7e:ec:6d:a7: ab:fd:ea:be:c7:a6:d1:d6:c3:c7:9d:5f:a4:d2:a1: 20:b8:d8:75:db:4c:d6:f1:95:33:3e:cb:99:57:45: 9c:e7:ed:50:31:76:1b:76:c5:c1:0a:92:70:c4:d1: f5:4a:3b:fe:b9:61:bf:71:4f:b0:81:0d:e1:c9:52: da:ea:cc:6d:8f:ef:96:68:5e:42:95:d7:d3:1a:be: 5c:ee:b8:32:58:1c:2b:12:bf:6b:e6:c2:08:db:a7: 42:77:55:35:a1:3c:64:b8:96:da:78:b9:2c:33:4e: 4d:ba:5d:be:56:6a:2a:30:8b:a0:af:8e:e1:a1:33: d7:29:6b:7b:c2:94:ea:eb:74:b7:01:d8:2c:31:87: 71:09:3b:b5:d4:e8:c7:d1:f4:9c:6c:a5:b4:93:b3: 1c:58:fc:66:15:10:f9:71:ed:cf:ca:cc:4a:38:75: 58:6d:df:7a:ad:d9:07:95:84:25:5e:50:fb:50:8d: 43:28:39:67:9a:c8:b1:71:a4:09:55:30:2d:df:04: d5:14:c6:37:44:b4:d4:fa:ff:2b:2e:1d:94:c6:12: 42:b0:c5:9f:0d:2a:fd:3f:31:93:47:2e:3b:08:f9: 6d:1c:c9:1e:cf:98:96:30:ef:67:98:fc:fb:a7:65: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:62:5C:AE:B0:F4:BB:80:2D:95:49:50:59:C0:4F:0A:F2:E0:73 X509v3 Authority Key Identifier: keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS28294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.84.0/22 138.36.88.0/22 138.204.208.0/22 168.181.0.0/22 168.194.92.0/22 170.246.140.0/22 177.221.0.0/19 179.107.192.0/19 186.226.128.0/23 186.226.136.0/21 189.36.144.0/20 IPv6: 2804:b4::/32 Signature Algorithm: sha256WithRSAEncryption 73:9a:6a:83:2e:bc:0c:dc:9b:2b:71:25:71:5a:03:63:f1:0e: f8:5f:89:6b:e4:70:4a:52:97:b0:66:1d:1d:be:34:fd:73:d6: eb:03:a4:e7:79:b7:74:9a:35:a9:42:7c:28:af:1e:e4:5b:00: b3:30:7d:8f:9b:1f:b5:60:37:86:39:3c:00:0e:1a:10:7e:03: 9c:86:bf:de:b6:34:8a:a1:e2:81:6f:65:30:93:3d:dd:09:ad: 87:18:b9:1e:b6:45:51:3c:a6:6d:c4:5a:75:23:ae:2a:12:68: c5:31:6d:0b:8d:cf:15:a5:ec:18:bc:61:24:10:73:94:98:d5: 47:ff:f1:2b:95:f7:7a:1a:eb:d1:a3:a6:7b:1f:d9:ba:f1:17: 8b:a9:6b:0c:7c:4f:12:d0:b4:64:d9:5e:77:75:99:38:f0:ca: cb:1a:32:d5:ea:3a:76:2f:15:54:63:ca:0d:ac:52:6a:62:9e: bd:52:a1:03:86:9a:0a:d4:3a:c0:46:1b:0d:97:cd:3e:02:0a: 7f:30:e9:c9:eb:24:76:31:eb:b1:9f:92:e0:a4:97:b6:e9:45: e3:3d:6c:3a:98:fc:55:21:a6:eb:65:33:e4:ce:39:55:cc:98: 0d:47:03:13:71:32:7d:32:f1:f0:61:8f:47:ce:ae:82:b7:86: 9b:dd:54:0d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUSojDG2znl7mk2ivoYbaYiUsc6JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3 MUQxQzRBQTAeFw0yNjA4MTQxMzE1NTlaFw0yNzA4MTMxMzIwNTlaMDMxMTAvBgNV BAMTKEM1QTc2MjVDQUVCMEY0QkI4MDJEOTU0OTUwNTlDMDRGMEFGMkUwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qjGkeCi1v6WSfuxtp6v96r7H ptHWw8edX6TSoSC42HXbTNbxlTM+y5lXRZzn7VAxdht2xcEKknDE0fVKO/65Yb9x T7CBDeHJUtrqzG2P75ZoXkKV19MavlzuuDJYHCsSv2vmwgjbp0J3VTWhPGS4ltp4 uSwzTk26Xb5Waiowi6CvjuGhM9cpa3vClOrrdLcB2Cwxh3EJO7XU6MfR9JxspbST sxxY/GYVEPlx7c/KzEo4dVht33qt2QeVhCVeUPtQjUMoOWeayLFxpAlVMC3fBNUU xjdEtNT6/ysuHZTGEkKwxZ8NKv0/MZNHLjsI+W0cyR7PmJYw72eY/PunZfjDAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUxadiXK6w9LuALZVJUFnATwry4HMwHwYDVR0j BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UWZ4 UnJ0aEVXd20xdzdZU2ZZRTlXZDY0MVYxbmFYZGt1S2tBdEM4cWdhVi8xL0FTMjgy OTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwagYIKwYBBQUHAQcBAf8E WzBZMEgEAgABMEIDBAKDSFQDBAKKJFgDBAKKzNADBAKotQADBAKowlwDBAKq9owD BAWx3QADBAWza8ADBAG64oADBAO64ogDBAS9JJAwDQQCAAIwBwMFACgEALQwDQYJ KoZIhvcNAQELBQADggEBAHOaaoMuvAzcmytxJXFaA2PxDvhfiWvkcEpSl7BmHR2+ NP1z1usDpOd5t3SaNalCfCivHuRbALMwfY+bH7VgN4Y5PAAOGhB+A5yGv962NIqh 4oFvZTCTPd0JrYcYuR62RVE8pm3EWnUjrioSaMUxbQuNzxWl7Bi8YSQQc5SY1Uf/ 8SuV93oa69Gjpnsf2brxF4upawx8TxLQtGTZXnd1mTjwyssaMtXqOnYvFVRjyg2s Umpinr1SoQOGmgrUOsBGGw2XzT4CCn8w6cnrJHYx67GfkuCkl7bpReM9bDqY/FUh putlM+TOOVXMmA1HAxNxMn0y8fBhj0fOroK3hpvdVA0= -----END CERTIFICATE-----Generated at Thu Sep 3 22:34:08 2026 by rpki-client