$ rpki-client -vvvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS53125.roa File: AS53125.roa (raw, json) Hash identifier: olIpFh3bE4ewTF0RRbDGdmmoxxEUqxdbxnHJW0DEuwA= Subject key identifier: C8:A0:FA:51:1E:28:69:C9:EE:B2:6B:99:37:7F:87:9E:59:0E:7D:3D Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Certificate serial: 5AFEEDBFBB61874603C8DA93D13E391CA3D18EE2 Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS53125.roa Signing time: Thu 13 Aug 2026 20:20:57 +0000 ROA not before: Thu 13 Aug 2026 20:15:57 +0000 ROA not after: Thu 12 Aug 2027 20:20:57 +0000 asID: 53125 IP address blocks: 187.108.112.0/21 maxlen: 24 187.108.120.0/21 maxlen: 22 2804:27cc::/33 maxlen: 48 2804:27cc:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Sep 2026 21:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fe:ed:bf:bb:61:87:46:03:c8:da:93:d1:3e:39:1c:a3:d1:8e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Validity Not Before: Aug 13 20:15:57 2026 GMT Not After : Aug 12 20:20:57 2027 GMT Subject: CN=C8A0FA511E2869C9EEB26B99377F879E590E7D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:eb:4a:ad:a5:af:f8:69:c8:cd:a1:5b:53: e7:0b:34:7f:b4:0d:3a:97:c2:c4:e6:db:5e:d1:04: 2d:e6:57:b3:70:5a:09:86:c8:2b:85:54:da:31:2f: 4f:f8:8f:16:88:a1:43:58:5d:fb:48:48:ad:ae:53: ef:8e:c5:4d:88:95:58:21:c4:fe:fd:bd:2b:a4:cd: 7b:31:da:6d:71:ce:f5:3b:b5:02:c6:cd:0d:76:f3: f7:c8:ea:47:28:16:38:60:ab:fb:5e:f5:a4:6e:f9: 9d:87:19:66:12:48:3c:a2:b5:bf:b1:1d:b1:41:16: 9a:10:4b:a3:1e:a4:32:bb:b2:66:19:b6:4f:1e:51: bb:ed:37:07:c4:df:ca:4b:b1:3b:44:e7:a7:e3:32: 65:fd:31:bd:0e:81:e9:25:b2:7b:47:19:98:b1:c3: 51:82:cb:24:f4:70:85:41:f8:04:b1:52:9b:57:0a: dd:ef:f8:27:a9:df:40:b2:53:04:25:5f:c2:f7:47: 9c:95:66:43:3d:20:97:b9:6c:4c:e6:85:c4:4f:bb: fe:ac:82:ce:40:5d:5e:97:94:2f:2c:ff:eb:0a:ab: 81:67:4f:19:fc:d0:b6:45:d7:58:a8:cb:49:71:db: dd:46:7c:0b:60:85:0c:fc:5c:50:98:9e:30:19:4c: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:FA:51:1E:28:69:C9:EE:B2:6B:99:37:7F:87:9E:59:0E:7D:3D X509v3 Authority Key Identifier: keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS53125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.108.112.0/20 IPv6: 2804:27cc::/32 Signature Algorithm: sha256WithRSAEncryption 33:1d:c6:0d:3e:b8:8c:16:4e:08:e4:f0:c8:a1:04:dc:54:91: 65:89:05:de:87:39:d6:a8:25:9e:37:3b:c9:c2:06:72:e3:a7: 23:33:09:81:f5:8e:0c:0d:b0:b9:f9:8b:50:f9:de:dd:7f:3d: 45:93:95:ab:2f:f8:80:ef:3e:f3:d7:9d:d1:ff:38:0b:25:76: dd:3c:90:50:a1:d6:75:1b:70:6e:31:a7:6b:47:2a:8f:26:50: 3e:97:6e:97:83:eb:0a:17:f0:30:47:df:94:a8:d3:e4:45:13: bc:66:9d:42:95:d7:72:38:48:81:84:6a:01:52:de:94:09:2e: 4c:54:ef:a0:d8:04:88:83:eb:a5:bc:f6:d9:89:9a:94:a9:41: d3:6e:73:69:76:bb:7d:3a:4b:7e:b3:eb:f4:9c:b0:83:52:aa: 20:78:58:fa:12:bb:23:cb:22:e3:e9:4f:97:4f:d3:0e:b7:c1: 3d:95:a1:ac:a5:e7:b7:ed:38:4b:e4:85:92:39:ff:d0:02:58: 02:c0:30:d7:03:8b:4e:f4:23:c6:45:0e:f9:77:fb:15:b4:37: 61:c0:3f:7f:1b:71:cb:3a:4e:2c:8d:37:f5:0a:39:07:ce:c5: 8a:b8:b2:05:1a:8a:f0:72:e8:f4:49:ef:86:ff:e7:6d:83:76: 91:f2:79:c5 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUWv7tv7thh0YDyNqT0T45HKPRjuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3 MUQxQzRBQTAeFw0yNjA4MTMyMDE1NTdaFw0yNzA4MTIyMDIwNTdaMDMxMTAvBgNV BAMTKEM4QTBGQTUxMUUyODY5QzlFRUIyNkI5OTM3N0Y4NzlFNTkwRTdEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+utKraWv+GnIzaFbU+cLNH+0 DTqXwsTm217RBC3mV7NwWgmGyCuFVNoxL0/4jxaIoUNYXftISK2uU++OxU2IlVgh xP79vSukzXsx2m1xzvU7tQLGzQ128/fI6kcoFjhgq/te9aRu+Z2HGWYSSDyitb+x HbFBFpoQS6MepDK7smYZtk8eUbvtNwfE38pLsTtE56fjMmX9Mb0OgeklsntHGZix w1GCyyT0cIVB+ASxUptXCt3v+Cep30CyUwQlX8L3R5yVZkM9IJe5bEzmhcRPu/6s gs5AXV6XlC8s/+sKq4FnTxn80LZF11ioy0lx291GfAtghQz8XFCYnjAZTArdAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUyKD6UR4oacnusmuZN3+HnlkOfT0wHwYDVR0j BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UWZ4 UnJ0aEVXd20xdzdZU2ZZRTlXZDY0MVYxbmFYZGt1S2tBdEM4cWdhVi8xL0FTNTMx MjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAS7bHAwDQQCAAIwBwMFACgEJ8wwDQYJKoZIhvcNAQELBQAD ggEBADMdxg0+uIwWTgjk8MihBNxUkWWJBd6HOdaoJZ43O8nCBnLjpyMzCYH1jgwN sLn5i1D53t1/PUWTlasv+IDvPvPXndH/OAsldt08kFCh1nUbcG4xp2tHKo8mUD6X bpeD6woX8DBH35So0+RFE7xmnUKV13I4SIGEagFS3pQJLkxU76DYBIiD66W89tmJ mpSpQdNuc2l2u306S36z6/ScsINSqiB4WPoSuyPLIuPpT5dP0w63wT2Voayl57ft OEvkhZI5/9ACWALAMNcDi070I8ZFDvl3+xW0N2HAP38bccs6TiyNN/UKOQfOxYq4 sgUaivBy6PRJ74b/522DdpHyecU= -----END CERTIFICATE-----Generated at Thu Sep 3 11:06:22 2026 by rpki-client