$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS28165.roa File: AS28165.roa (raw, json) Hash identifier: a2bPIjsvU3Xi7lapzRiyBgfICYGUAidz43EnsEJ5fy4= Subject key identifier: 56:CE:51:37:86:00:AD:48:7F:B1:36:A5:DA:71:5F:3A:23:3C:A8:0B Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 4E2DDA63CE29F5D41B8DA08DE24E1A9C6797C1F5 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS28165.roa Signing time: Wed 18 Feb 2026 22:45:07 +0000 ROA not before: Wed 18 Feb 2026 22:40:07 +0000 ROA not after: Wed 17 Feb 2027 22:45:07 +0000 asID: 28165 IP address blocks: 131.255.100.0/22 maxlen: 22 131.255.100.0/23 maxlen: 23 131.255.100.0/24 maxlen: 24 131.255.101.0/24 maxlen: 24 131.255.102.0/23 maxlen: 23 131.255.102.0/24 maxlen: 24 131.255.103.0/24 maxlen: 24 138.59.148.0/23 maxlen: 23 138.59.148.0/24 maxlen: 24 138.59.149.0/24 maxlen: 24 138.204.92.0/22 maxlen: 22 138.204.92.0/23 maxlen: 23 138.204.92.0/24 maxlen: 24 138.204.93.0/24 maxlen: 24 138.204.94.0/23 maxlen: 23 138.204.94.0/24 maxlen: 24 138.204.95.0/24 maxlen: 24 170.81.170.0/23 maxlen: 23 170.81.170.0/24 maxlen: 24 170.81.171.0/24 maxlen: 24 177.222.16.0/21 maxlen: 21 177.222.16.0/24 maxlen: 24 177.222.17.0/24 maxlen: 24 177.222.18.0/24 maxlen: 24 177.222.19.0/24 maxlen: 24 177.222.20.0/24 maxlen: 24 177.222.21.0/24 maxlen: 24 177.222.22.0/24 maxlen: 24 177.222.23.0/24 maxlen: 24 177.222.28.0/22 maxlen: 22 177.222.28.0/24 maxlen: 24 177.222.29.0/24 maxlen: 24 177.222.30.0/24 maxlen: 24 177.222.31.0/24 maxlen: 24 187.62.208.0/20 maxlen: 20 187.62.208.0/21 maxlen: 21 187.62.208.0/24 maxlen: 24 187.62.209.0/24 maxlen: 24 187.62.210.0/24 maxlen: 24 187.62.211.0/24 maxlen: 24 187.62.212.0/24 maxlen: 24 187.62.213.0/24 maxlen: 24 187.62.214.0/24 maxlen: 24 187.62.215.0/24 maxlen: 24 187.62.216.0/21 maxlen: 21 187.62.216.0/24 maxlen: 24 187.62.217.0/24 maxlen: 24 187.62.218.0/24 maxlen: 24 187.62.219.0/24 maxlen: 24 187.62.220.0/24 maxlen: 24 187.62.221.0/24 maxlen: 24 187.62.222.0/24 maxlen: 24 187.62.223.0/24 maxlen: 24 191.240.144.0/21 maxlen: 21 191.240.144.0/24 maxlen: 24 191.240.145.0/24 maxlen: 24 191.240.146.0/24 maxlen: 24 191.240.147.0/24 maxlen: 24 191.240.148.0/24 maxlen: 24 191.240.149.0/24 maxlen: 24 191.240.150.0/24 maxlen: 24 191.240.151.0/24 maxlen: 24 191.240.152.0/22 maxlen: 22 191.240.152.0/24 maxlen: 24 191.240.153.0/24 maxlen: 24 191.240.154.0/24 maxlen: 24 191.240.155.0/24 maxlen: 24 191.240.156.0/23 maxlen: 23 191.240.156.0/24 maxlen: 24 191.240.157.0/24 maxlen: 24 200.229.228.0/22 maxlen: 22 200.229.228.0/24 maxlen: 24 200.229.229.0/24 maxlen: 24 200.229.230.0/24 maxlen: 24 200.229.231.0/24 maxlen: 24 200.229.232.0/21 maxlen: 21 200.229.232.0/24 maxlen: 24 200.229.233.0/24 maxlen: 24 200.229.234.0/24 maxlen: 24 200.229.235.0/24 maxlen: 24 200.229.236.0/24 maxlen: 24 200.229.237.0/24 maxlen: 24 200.229.238.0/24 maxlen: 24 200.229.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 13:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2d:da:63:ce:29:f5:d4:1b:8d:a0:8d:e2:4e:1a:9c:67:97:c1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 18 22:40:07 2026 GMT Not After : Feb 17 22:45:07 2027 GMT Subject: CN=56CE51378600AD487FB136A5DA715F3A233CA80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:b7:17:ce:79:0d:71:c1:3b:09:ef:0b:f8: 41:b1:65:88:56:ea:cc:7c:37:13:21:2b:3b:ba:f9: 9a:6d:20:65:85:58:3f:35:68:dc:94:f0:43:9e:e4: 96:45:b3:f6:fc:9f:b1:c0:c0:5d:b9:29:9a:38:78: fd:55:1a:d3:5a:d2:94:44:9b:12:90:4a:bb:c4:84: d5:51:63:8f:62:d7:92:2d:72:8b:e9:92:2a:da:88: 4c:14:82:8a:4f:56:35:02:c0:42:19:38:47:18:b6: 0b:ec:74:3d:39:98:46:ec:a7:9d:ee:80:a4:69:f2: 1a:1b:47:64:d6:e8:3c:da:d3:8a:c0:73:0b:17:02: 7d:9a:c2:3e:32:75:9e:63:67:3b:d1:a3:0d:83:f7: 63:82:ef:2b:0e:ee:b5:b9:14:0a:34:aa:4e:07:8e: 72:48:67:34:77:9a:81:2a:9b:4c:c0:19:44:17:26: a8:26:14:31:92:ee:ed:ff:c3:7e:b4:63:6a:41:d9: 2e:e6:f8:6e:78:88:eb:cc:fe:94:7b:30:2d:f8:7c: 17:83:92:00:ad:38:1e:0a:ba:42:2d:b4:44:f4:c2: 42:6b:81:f2:ff:95:e9:c2:ec:17:29:01:18:6f:85: 8b:46:5d:cd:10:02:c1:72:62:8e:0f:01:bf:de:60: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CE:51:37:86:00:AD:48:7F:B1:36:A5:DA:71:5F:3A:23:3C:A8:0B X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS28165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.100.0/22 138.59.148.0/23 138.204.92.0/22 170.81.170.0/23 177.222.16.0/21 177.222.28.0/22 187.62.208.0/20 191.240.144.0-191.240.157.255 200.229.228.0-200.229.239.255 Signature Algorithm: sha256WithRSAEncryption 30:14:54:71:73:9d:f0:91:bd:fc:01:29:b3:0d:e4:c9:2a:eb: ee:f9:73:82:49:9e:17:7e:62:a6:7f:3d:04:95:12:bf:e1:b0: 49:a2:c8:3b:20:3f:fa:53:11:63:58:f8:65:39:09:f2:69:cb: 7e:ee:01:c7:cd:39:7b:7f:75:00:5c:b0:02:94:dd:27:bc:9f: b0:a6:26:d2:06:a9:68:33:eb:89:3d:b6:fb:7b:d7:d3:71:6d: 8e:19:50:b3:2a:3a:88:b3:27:fa:40:23:65:18:fe:d5:40:83: 09:4c:29:2a:fa:6e:8f:44:e3:6a:cd:44:68:02:6c:99:2e:af: 4f:26:f9:56:69:d0:5d:35:26:94:9f:cd:27:fb:a4:46:98:e3: 7e:fc:85:ce:df:d9:ec:cf:8f:40:ec:00:5e:da:fb:fb:b9:4f: c5:db:66:de:4b:95:fb:d5:e2:ff:91:ab:8c:aa:e9:e6:7a:68: 26:a6:08:17:63:4d:12:2e:33:d5:f2:a9:95:f8:0f:fc:ac:68: bd:f9:43:fb:64:ac:1c:6c:03:ab:79:2a:11:73:b6:6b:ee:01: 7a:04:a1:f2:83:14:63:54:3e:d7:8b:3e:82:79:e1:c4:cd:2b: 62:b9:81:82:d2:e9:db:e1:28:a5:a2:12:13:68:df:60:bb:e9: fa:90:33:ef -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUTi3aY84p9dQbjaCN4k4anGeXwfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMTgyMjQwMDdaFw0yNzAyMTcyMjQ1MDdaMDMxMTAvBgNV BAMTKDU2Q0U1MTM3ODYwMEFENDg3RkIxMzZBNURBNzE1RjNBMjMzQ0E4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLybcXznkNccE7Ce8L+EGxZYhW 6sx8NxMhKzu6+ZptIGWFWD81aNyU8EOe5JZFs/b8n7HAwF25KZo4eP1VGtNa0pRE mxKQSrvEhNVRY49i15ItcovpkiraiEwUgopPVjUCwEIZOEcYtgvsdD05mEbsp53u gKRp8hobR2TW6Dza04rAcwsXAn2awj4ydZ5jZzvRow2D92OC7ysO7rW5FAo0qk4H jnJIZzR3moEqm0zAGUQXJqgmFDGS7u3/w360Y2pB2S7m+G54iOvM/pR7MC34fBeD kgCtOB4KukIttET0wkJrgfL/lenC7BcpARhvhYtGXc0QAsFyYo4PAb/eYGIXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUVs5RN4YArUh/sTal2nFfOiM8qAswHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcFBw WFJSY3VHOVExbVhxeHpReEhLbzN1cDhXVXQzdDRWNEVteXh0RG5Kai8wL0FTMjgx NjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXwYIKwYBBQUHAQcBAf8E UDBOMEwEAgABMEYDBAKD/2QDBAGKO5QDBAKKzFwDBAGqUaoDBAOx3hADBAKx3hwD BAS7PtAwDAMEBL/wkAMEAb/wnDAMAwQCyOXkAwQEyOXgMA0GCSqGSIb3DQEBCwUA A4IBAQAwFFRxc53wkb38ASmzDeTJKuvu+XOCSZ4XfmKmfz0ElRK/4bBJosg7ID/6 UxFjWPhlOQnyact+7gHHzTl7f3UAXLAClN0nvJ+wpibSBqloM+uJPbb7e9fTcW2O GVCzKjqIsyf6QCNlGP7VQIMJTCkq+m6PRONqzURoAmyZLq9PJvlWadBdNSaUn80n +6RGmON+/IXO39nsz49A7ABe2vv7uU/F22beS5X71eL/kauMqunmemgmpggXY00S LjPV8qmV+A/8rGi9+UP7ZKwcbAOreSoRc7Zr7gF6BKHygxRjVD7Xiz6CeeHEzSti uYGC0unb4SilohITaN9gu+n6kDPv -----END CERTIFICATE-----Generated at Thu Feb 19 15:40:25 2026 by rpki-client