$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa File: AS262493.roa (raw, json) Hash identifier: 8Lh4gdnUtR4EGieq6rmzPsL/MlxX8++Ji/EmDScbBVU= Subject key identifier: 23:C2:BD:02:DE:56:6F:A6:6D:D5:09:2F:F6:39:1C:DB:41:38:9E:8C Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 3EDA329E0260FE11FF9EF3D93F57E6B50C2E79CA Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa Signing time: Tue 30 Jun 2026 21:21:33 +0000 ROA not before: Tue 30 Jun 2026 21:16:33 +0000 ROA not after: Tue 29 Jun 2027 21:21:33 +0000 asID: 262493 IP address blocks: 138.255.216.0/22 maxlen: 22 138.255.216.0/23 maxlen: 23 138.255.218.0/23 maxlen: 23 168.121.148.0/22 maxlen: 22 168.121.148.0/23 maxlen: 23 168.121.150.0/23 maxlen: 23 170.82.132.0/22 maxlen: 22 170.82.132.0/23 maxlen: 23 170.82.132.0/24 maxlen: 24 170.82.134.0/23 maxlen: 23 177.8.48.0/21 maxlen: 21 177.8.48.0/23 maxlen: 23 177.8.50.0/23 maxlen: 23 177.8.52.0/22 maxlen: 22 177.8.52.0/23 maxlen: 23 177.8.54.0/23 maxlen: 23 177.55.48.0/20 maxlen: 20 177.55.48.0/23 maxlen: 23 177.55.50.0/23 maxlen: 23 177.55.52.0/23 maxlen: 23 177.55.54.0/23 maxlen: 23 177.55.56.0/23 maxlen: 23 177.55.58.0/23 maxlen: 23 177.55.60.0/23 maxlen: 23 177.55.60.0/24 maxlen: 24 177.55.62.0/23 maxlen: 23 2804:fec::/32 maxlen: 32 2804:fec::/36 maxlen: 36 2804:fec:1000::/36 maxlen: 36 2804:fec:3000::/36 maxlen: 36 2804:fec:4000::/36 maxlen: 36 2804:fec:5000::/36 maxlen: 36 2804:fec:6000::/36 maxlen: 36 2804:fec:7000::/36 maxlen: 36 2804:fec:8000::/36 maxlen: 36 2804:fec:a000::/36 maxlen: 36 2804:fec:b000::/36 maxlen: 36 2804:fec:c000::/36 maxlen: 36 2804:fec:d000::/36 maxlen: 36 2804:fec:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 18:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:da:32:9e:02:60:fe:11:ff:9e:f3:d9:3f:57:e6:b5:0c:2e:79:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: Jun 30 21:16:33 2026 GMT Not After : Jun 29 21:21:33 2027 GMT Subject: CN=23C2BD02DE566FA66DD5092FF6391CDB41389E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:d6:2f:c7:ee:e9:3f:ed:76:80:11:f0:a5: 4b:6d:cc:be:7a:6d:43:5f:e3:92:0d:56:52:b9:2c: 02:ea:17:70:e4:b2:12:ea:6b:57:4a:dc:fb:a6:13: 09:06:35:ef:fa:b7:db:e2:81:39:c3:2c:5c:9a:ea: 1a:39:14:b3:52:2e:32:83:b5:91:db:1f:e3:72:54: 10:d7:25:cd:a5:7d:00:7d:40:1c:7c:a5:50:31:23: 1c:ed:fb:e2:b9:48:74:78:44:bb:3f:e4:77:d3:a6: 8c:82:96:68:fa:a3:3c:1e:9f:19:83:3c:8a:dd:21: 5f:6b:b4:8c:57:74:ff:5e:1c:36:a8:de:ca:37:d8: 8d:b9:b9:76:6a:c8:3a:54:06:b6:db:9c:c1:c1:1e: 64:25:e4:10:30:05:a6:f5:53:91:a4:3c:97:d1:bb: 17:ce:a9:99:d1:ab:44:81:82:7b:b4:04:a4:1a:3a: a8:2b:fa:c3:8f:00:24:8a:82:f6:58:e4:e1:65:74: e8:24:69:91:e7:4e:41:43:4b:5e:81:01:35:88:21: 14:31:c2:ae:fc:da:e1:09:78:5c:4b:13:5d:6a:30: 5f:d2:df:eb:bc:f3:cd:80:d8:33:1d:9a:34:5f:11: 97:f9:3d:07:0e:90:99:5c:8e:2f:8b:b2:25:2e:b4: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:BD:02:DE:56:6F:A6:6D:D5:09:2F:F6:39:1C:DB:41:38:9E:8C X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.216.0/22 168.121.148.0/22 170.82.132.0/22 177.8.48.0/21 177.55.48.0/20 IPv6: 2804:fec::/32 Signature Algorithm: sha256WithRSAEncryption 08:05:e2:49:57:db:09:93:82:52:5e:eb:c1:da:b0:7d:ac:ae: 16:dd:ed:63:c7:15:db:15:00:c3:2b:1a:08:a9:cc:72:d3:79: b6:b0:cb:f8:81:03:dc:7d:48:b6:fd:90:62:6d:2c:62:d5:c2: 05:9e:d3:ee:82:ed:70:d3:a0:74:2f:71:42:1f:67:57:83:8d: d5:cb:1b:f3:69:3f:47:d7:a5:86:fe:d5:8a:e7:db:a7:7f:9d: 7c:27:ff:1f:cb:cc:8e:7c:93:d8:c0:61:6f:f5:a1:58:5a:56: 0a:0a:36:24:cb:b6:e8:0e:f5:cc:05:22:31:41:cf:59:70:d9: 77:05:b7:89:9e:04:30:9e:d5:bc:a8:04:fa:84:38:4c:d1:b8: 0b:10:12:ce:a5:e4:c1:21:af:c1:fe:1a:fe:26:38:6b:12:d1: bc:78:aa:08:6a:78:9d:87:78:95:92:c5:bf:90:ea:b0:4a:9e: 50:0e:ed:2b:0a:2d:17:43:42:de:bf:7f:ce:f9:43:31:cd:42: 2b:41:3d:a6:c5:ce:d0:6c:76:82:5e:f4:31:aa:90:ed:63:84: 7a:0a:06:b7:1c:59:0e:38:d7:8b:2c:8e:82:0f:b9:1e:1e:c3: 25:31:48:63:a7:6e:bb:bd:8f:bc:4f:a6:0d:22:56:31:e5:c0: df:3c:b9:94 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUPtoyngJg/hH/nvPZP1fmtQwuecowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA2MzAyMTE2MzNaFw0yNzA2MjkyMTIxMzNaMDMxMTAvBgNV BAMTKDIzQzJCRDAyREU1NjZGQTY2REQ1MDkyRkY2MzkxQ0RCNDEzODlFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqNYvx+7pP+12gBHwpUttzL56 bUNf45INVlK5LALqF3DkshLqa1dK3PumEwkGNe/6t9vigTnDLFya6ho5FLNSLjKD tZHbH+NyVBDXJc2lfQB9QBx8pVAxIxzt++K5SHR4RLs/5HfTpoyClmj6ozwenxmD PIrdIV9rtIxXdP9eHDao3so32I25uXZqyDpUBrbbnMHBHmQl5BAwBab1U5GkPJfR uxfOqZnRq0SBgnu0BKQaOqgr+sOPACSKgvZY5OFldOgkaZHnTkFDS16BATWIIRQx wq782uEJeFxLE11qMF/S3+u8882A2DMdmjRfEZf5PQcOkJlcji+LsiUutDBRAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUI8K9At5Wb6Zt1Qkv9jkc20E4nowwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjYy NDkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/ BDcwNTAkBAIAATAeAwQCiv/YAwQCqHmUAwQCqlKEAwQDsQgwAwQEsTcwMA0EAgAC MAcDBQAoBA/sMA0GCSqGSIb3DQEBCwUAA4IBAQAIBeJJV9sJk4JSXuvB2rB9rK4W 3e1jxxXbFQDDKxoIqcxy03m2sMv4gQPcfUi2/ZBibSxi1cIFntPugu1w06B0L3FC H2dXg43VyxvzaT9H16WG/tWK59unf518J/8fy8yOfJPYwGFv9aFYWlYKCjYky7bo DvXMBSIxQc9ZcNl3BbeJngQwntW8qAT6hDhM0bgLEBLOpeTBIa/B/hr+JjhrEtG8 eKoIanidh3iVksW/kOqwSp5QDu0rCi0XQ0Lev3/O+UMxzUIrQT2mxc7QbHaCXvQx qpDtY4R6Cga3HFkOONeLLI6CD7keHsMlMUhjp267vY+8T6YNIlYx5cDfPLmU -----END CERTIFICATE-----Generated at Wed Jul 8 20:06:34 2026 by rpki-client