$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS268018.roa File: AS268018.roa (raw, json) Hash identifier: LuJlSmVWcGdHNkArr+YbSxu2Z7uVcPDO1G2uuqzAgwM= Subject key identifier: 11:81:FA:64:ED:57:65:8B:46:F9:1C:06:5E:83:90:A4:73:EA:CE:4F Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Certificate serial: 74D9001BC3C0AFC10FB8A46C638FD2E0B2BF2E89 Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS268018.roa Signing time: Sun 12 Jul 2026 19:13:59 +0000 ROA not before: Sun 12 Jul 2026 19:08:59 +0000 ROA not after: Sun 11 Jul 2027 19:13:59 +0000 asID: 268018 IP address blocks: 45.165.230.0/23 maxlen: 23 45.165.230.0/24 maxlen: 24 45.165.231.0/24 maxlen: 24 138.122.84.0/22 maxlen: 22 138.122.84.0/23 maxlen: 23 138.122.85.0/24 maxlen: 24 138.122.86.0/23 maxlen: 23 138.122.86.0/24 maxlen: 24 177.39.56.0/21 maxlen: 21 177.39.56.0/22 maxlen: 22 177.39.58.0/23 maxlen: 23 177.53.216.0/21 maxlen: 21 177.53.216.0/22 maxlen: 22 177.53.216.0/23 maxlen: 23 177.53.218.0/23 maxlen: 23 177.53.220.0/22 maxlen: 22 177.53.220.0/23 maxlen: 23 177.53.222.0/23 maxlen: 23 177.53.223.0/24 maxlen: 24 179.96.216.0/21 maxlen: 21 179.96.216.0/22 maxlen: 22 179.96.216.0/23 maxlen: 23 179.96.218.0/23 maxlen: 23 179.96.218.0/24 maxlen: 24 179.96.220.0/22 maxlen: 22 179.96.220.0/23 maxlen: 23 179.96.222.0/23 maxlen: 23 2804:56b0::/32 maxlen: 32 2804:56b0::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 20:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d9:00:1b:c3:c0:af:c1:0f:b8:a4:6c:63:8f:d2:e0:b2:bf:2e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Validity Not Before: Jul 12 19:08:59 2026 GMT Not After : Jul 11 19:13:59 2027 GMT Subject: CN=1181FA64ED57658B46F91C065E8390A473EACE4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:a2:f9:23:f9:c2:af:26:b2:5f:d5:a4:4c: 64:75:5c:d6:99:f5:8c:20:7b:d7:00:74:ce:bb:60: 90:3e:83:ea:04:d9:68:68:1c:04:cc:1c:9a:88:fe: eb:7c:2b:41:e1:2d:d2:62:02:3f:81:74:25:9c:c8: 0c:6f:9e:74:86:e9:d0:bc:27:12:de:82:58:75:16: 21:fb:d7:50:47:64:36:a3:29:1a:72:d9:4a:aa:a0: c4:28:8e:85:66:a6:20:6a:7f:bf:ed:87:a0:b7:8d: 94:5d:ea:23:12:28:01:90:1a:b9:bd:cb:fd:ea:53: 62:0d:b6:52:06:45:70:e3:1e:05:b8:38:07:31:96: 7b:d7:19:65:dd:56:81:18:f7:03:f5:a9:d0:10:4a: 4b:af:01:47:ab:b1:62:4c:73:10:66:50:1c:fa:34: 19:94:57:a1:b4:8f:5d:31:79:ae:3f:7c:60:6b:1f: f5:51:46:5a:a4:60:ef:a9:62:e0:6e:bf:86:26:1d: 2d:a4:bd:55:73:9b:f5:09:5a:d5:b7:45:bd:32:a8: ac:4d:35:91:37:8a:35:3f:e2:36:18:ba:12:9f:2b: 61:ea:38:5c:d9:b6:32:5a:3b:a5:d4:97:56:45:d6: 3c:ad:9f:c9:25:ee:cd:49:a2:cf:83:6f:d5:7a:1a: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:FA:64:ED:57:65:8B:46:F9:1C:06:5E:83:90:A4:73:EA:CE:4F X509v3 Authority Key Identifier: keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS268018.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.230.0/23 138.122.84.0/22 177.39.56.0/21 177.53.216.0/21 179.96.216.0/21 IPv6: 2804:56b0::/32 Signature Algorithm: sha256WithRSAEncryption 22:dd:c3:52:b0:b8:7c:6d:0f:2f:0a:bf:22:c2:20:8a:1e:f4: 65:21:25:35:c0:2e:66:b9:98:ea:ca:76:7d:1a:c5:98:c8:6e: db:91:99:0d:bb:a0:4a:98:ef:ea:ad:99:2a:88:8f:93:5f:d0: cb:39:a2:49:26:7a:55:ca:7d:23:7b:3e:7f:9b:63:da:a5:95: 50:f5:87:24:4d:ca:62:60:2d:70:36:e5:d1:da:b7:07:f3:d6: 07:4e:16:80:4f:54:dc:ad:c7:ee:a9:70:58:be:0b:a6:9f:59: e2:0e:94:df:95:6e:a4:6b:1f:70:d6:0e:51:48:bb:4d:ed:e2: cd:49:f2:73:17:57:40:55:e4:4e:af:2f:fd:77:40:03:24:f7: 71:06:e4:cd:62:b2:90:38:e6:67:37:fb:3a:47:62:29:c1:07: 15:e2:cc:3f:35:7b:84:96:ce:db:4c:d7:4e:8b:9f:ca:87:05: 5f:43:3b:c3:53:d5:12:87:29:8a:35:8b:8c:cc:f2:fa:ec:a7: be:2f:76:3b:e3:cb:06:7a:11:55:a3:83:d3:48:23:aa:31:58: 3d:05:53:39:36:17:65:94:40:ae:ec:27:ab:3d:e8:2a:a9:53: 81:b1:d6:6e:05:5c:47:ca:1d:cd:4b:00:ec:43:56:cb:02:8b: ce:52:d5:2f -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUdNkAG8PAr8EPuKRsY4/S4LK/LokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTkyMkUyRUJGRkJBODA0NjhDMTcwRjBCMDUzQzkw RkQxNjBFNDAeFw0yNjA3MTIxOTA4NTlaFw0yNzA3MTExOTEzNTlaMDMxMTAvBgNV BAMTKDExODFGQTY0RUQ1NzY1OEI0NkY5MUMwNjVFODM5MEE0NzNFQUNFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvaL5I/nCryayX9WkTGR1XNaZ 9Ywge9cAdM67YJA+g+oE2WhoHATMHJqI/ut8K0HhLdJiAj+BdCWcyAxvnnSG6dC8 JxLeglh1FiH711BHZDajKRpy2UqqoMQojoVmpiBqf7/th6C3jZRd6iMSKAGQGrm9 y/3qU2INtlIGRXDjHgW4OAcxlnvXGWXdVoEY9wP1qdAQSkuvAUersWJMcxBmUBz6 NBmUV6G0j10xea4/fGBrH/VRRlqkYO+pYuBuv4YmHS2kvVVzm/UJWtW3Rb0yqKxN NZE3ijU/4jYYuhKfK2HqOFzZtjJaO6XUl1ZF1jytn8kl7s1Jos+Db9V6Gi39AgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUEYH6ZO1XZYtG+RwGXoOQpHPqzk8wHwYDVR0j BBgwFoAUmI6SLi6/+6gEaMFw8LBTyQ/RYOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm dXEvMS85ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OEU5MjJFMkVCRkZCQTgw NDY4QzE3MEYwQjA1M0M5MEZEMTYwRTQuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DUld4 d3FqOUtrQ1VqVXJRYTYxYzhabzFESG1IbXBUa1Q5blVmamFmUWZ1cS8xL0FTMjY4 MDE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/ BDcwNTAkBAIAATAeAwQBLaXmAwQCinpUAwQDsSc4AwQDsTXYAwQDs2DYMA0EAgAC MAcDBQAoBFawMA0GCSqGSIb3DQEBCwUAA4IBAQAi3cNSsLh8bQ8vCr8iwiCKHvRl ISU1wC5muZjqynZ9GsWYyG7bkZkNu6BKmO/qrZkqiI+TX9DLOaJJJnpVyn0jez5/ m2PapZVQ9YckTcpiYC1wNuXR2rcH89YHThaAT1TcrcfuqXBYvgumn1niDpTflW6k ax9w1g5RSLtN7eLNSfJzF1dAVeROry/9d0ADJPdxBuTNYrKQOOZnN/s6R2IpwQcV 4sw/NXuEls7bTNdOi5/KhwVfQzvDU9UShymKNYuMzPL67Ke+L3Y748sGehFVo4PT SCOqMVg9BVM5NhdllECu7CerPegqqVOBsdZuBVxHyh3NSwDsQ1bLAovOUtUv -----END CERTIFICATE-----Generated at Sat Sep 5 04:07:19 2026 by rpki-client