$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa File: AS268323.roa (raw, json) Hash identifier: XpPWDn/fhCQciSuv0L6jniG968RB6CL7hCuVdkp8wVk= Subject key identifier: 37:3A:D3:FF:00:0F:40:09:3C:E0:EC:20:94:87:ED:FD:88:C4:2C:81 Certificate issuer: /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Certificate serial: 6A141783D98B16ADDD52BEFC28FBB625CB6252C5 Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa Signing time: Wed 13 May 2026 17:05:09 +0000 ROA not before: Wed 13 May 2026 17:00:09 +0000 ROA not after: Wed 12 May 2027 17:05:09 +0000 asID: 268323 IP address blocks: 45.175.188.0/22 maxlen: 22 45.175.188.0/23 maxlen: 23 45.175.190.0/23 maxlen: 23 45.232.88.0/22 maxlen: 22 45.232.88.0/23 maxlen: 23 45.232.89.0/24 maxlen: 24 45.232.90.0/23 maxlen: 23 45.232.91.0/24 maxlen: 24 45.238.116.0/22 maxlen: 22 45.238.116.0/23 maxlen: 23 45.238.118.0/23 maxlen: 23 170.246.68.0/22 maxlen: 22 170.246.68.0/23 maxlen: 23 170.246.70.0/23 maxlen: 23 177.53.128.0/21 maxlen: 21 177.53.128.0/22 maxlen: 22 177.53.128.0/23 maxlen: 23 177.53.130.0/23 maxlen: 23 177.53.130.0/24 maxlen: 24 177.53.132.0/22 maxlen: 22 177.53.132.0/23 maxlen: 23 177.53.133.0/24 maxlen: 24 177.53.134.0/23 maxlen: 23 177.125.184.0/22 maxlen: 22 177.125.184.0/23 maxlen: 23 177.125.186.0/23 maxlen: 23 177.125.187.0/24 maxlen: 24 177.125.188.0/22 maxlen: 22 177.125.188.0/23 maxlen: 23 177.125.189.0/24 maxlen: 24 177.125.190.0/23 maxlen: 23 177.125.190.0/24 maxlen: 24 187.45.48.0/20 maxlen: 20 187.45.48.0/21 maxlen: 21 187.45.48.0/22 maxlen: 22 187.45.48.0/23 maxlen: 23 187.45.50.0/23 maxlen: 23 187.45.52.0/22 maxlen: 22 187.45.52.0/23 maxlen: 23 187.45.54.0/23 maxlen: 23 187.45.56.0/21 maxlen: 21 187.45.56.0/22 maxlen: 22 187.45.56.0/23 maxlen: 23 187.45.58.0/23 maxlen: 23 187.45.60.0/22 maxlen: 22 187.45.60.0/23 maxlen: 23 187.45.62.0/23 maxlen: 23 187.95.48.0/20 maxlen: 20 187.95.48.0/21 maxlen: 21 187.95.48.0/22 maxlen: 22 187.95.48.0/23 maxlen: 23 187.95.50.0/23 maxlen: 23 187.95.52.0/22 maxlen: 22 187.95.52.0/23 maxlen: 23 187.95.54.0/23 maxlen: 23 187.95.56.0/21 maxlen: 21 187.95.56.0/22 maxlen: 22 187.95.56.0/23 maxlen: 23 187.95.56.0/24 maxlen: 24 187.95.58.0/23 maxlen: 23 187.95.60.0/22 maxlen: 22 187.95.60.0/23 maxlen: 23 187.95.62.0/23 maxlen: 23 187.95.176.0/20 maxlen: 20 187.95.176.0/21 maxlen: 21 187.95.176.0/22 maxlen: 22 187.95.176.0/23 maxlen: 23 187.95.178.0/23 maxlen: 23 187.95.180.0/22 maxlen: 22 187.95.180.0/23 maxlen: 23 187.95.182.0/23 maxlen: 23 187.95.184.0/21 maxlen: 21 187.95.184.0/22 maxlen: 22 187.95.184.0/23 maxlen: 23 187.95.186.0/23 maxlen: 23 187.95.188.0/22 maxlen: 22 187.95.188.0/23 maxlen: 23 187.95.190.0/23 maxlen: 23 191.37.144.0/21 maxlen: 21 191.37.144.0/22 maxlen: 22 191.37.144.0/23 maxlen: 23 191.37.146.0/23 maxlen: 23 191.37.148.0/22 maxlen: 22 191.37.148.0/23 maxlen: 23 191.37.150.0/23 maxlen: 23 192.141.196.0/22 maxlen: 22 192.141.196.0/23 maxlen: 23 192.141.198.0/23 maxlen: 23 200.9.160.0/22 maxlen: 22 200.9.160.0/23 maxlen: 23 200.9.162.0/23 maxlen: 23 201.158.40.0/21 maxlen: 21 201.158.40.0/22 maxlen: 22 201.158.40.0/23 maxlen: 23 201.158.42.0/23 maxlen: 23 201.158.44.0/22 maxlen: 22 201.158.44.0/23 maxlen: 23 201.158.46.0/23 maxlen: 23 2804:4f60::/32 maxlen: 32 2804:4f60::/33 maxlen: 33 2804:4f60:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 13:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:14:17:83:d9:8b:16:ad:dd:52:be:fc:28:fb:b6:25:cb:62:52:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618 Validity Not Before: May 13 17:00:09 2026 GMT Not After : May 12 17:05:09 2027 GMT Subject: CN=373AD3FF000F40093CE0EC209487EDFD88C42C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:20:dd:6a:2a:1e:d7:85:41:c1:32:d4:77: 4a:e2:8e:6e:45:40:f1:bb:ef:b5:e9:66:06:fa:ca: aa:a2:cf:0a:37:e0:36:0e:eb:12:aa:0e:6d:66:05: 44:cb:74:f9:b0:03:c7:ec:1f:bd:86:e4:45:c6:50: 1f:07:e9:bb:dc:df:d2:83:5d:03:6d:5b:6a:1d:7b: 83:a1:01:73:b5:5f:2f:90:82:cd:8e:89:ed:04:ba: 58:c8:4e:65:f2:f7:68:81:61:b2:bb:f8:2f:d2:b1: 71:cb:f9:3d:1c:da:b0:ba:df:cd:f9:e3:86:fc:3c: 34:08:be:1f:07:cb:6d:8c:67:28:ce:c6:ba:ae:33: 15:0f:fb:36:75:20:a5:a2:47:f9:f3:e0:11:7e:34: 33:69:72:38:c5:91:8a:f7:42:4c:85:d6:8f:41:70: b8:79:52:a0:7f:e8:62:92:45:2e:e4:a4:fc:45:b4: a3:4c:dc:27:8c:b7:b3:e9:d9:03:11:d1:70:c6:9c: 60:f6:b3:6f:05:c1:b7:b8:91:e2:ab:bd:ce:8e:ec: 27:5d:78:ba:5c:39:b5:4b:f6:d2:81:4e:13:37:26: 4e:f9:86:9c:fb:93:64:95:93:e4:a0:f4:9e:b2:60: 8c:41:84:38:0c:40:1f:8c:9e:46:a3:ec:00:0e:a5: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3A:D3:FF:00:0F:40:09:3C:E0:EC:20:94:87:ED:FD:88:C4:2C:81 X509v3 Authority Key Identifier: keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS268323.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.188.0/22 45.232.88.0/22 45.238.116.0/22 170.246.68.0/22 177.53.128.0/21 177.125.184.0/21 187.45.48.0/20 187.95.48.0/20 187.95.176.0/20 191.37.144.0/21 192.141.196.0/22 200.9.160.0/22 201.158.40.0/21 IPv6: 2804:4f60::/32 Signature Algorithm: sha256WithRSAEncryption 4c:bd:6c:32:11:37:50:5e:47:f2:68:0e:65:20:7f:1e:c4:f2: 43:67:6c:0f:29:0e:07:3f:d2:3e:db:44:2d:ab:41:c0:05:ee: 6d:4d:17:d9:a5:8a:ba:a2:aa:23:94:c0:6b:d0:74:49:27:25: 56:84:90:39:e6:c8:7e:38:49:f4:46:1e:ae:5d:f8:f4:76:9a: 2d:2d:41:6d:4d:03:9d:4a:86:7e:fb:8c:48:0b:a9:c6:0b:90: 2d:85:27:d8:8c:4d:8e:77:99:88:7b:e1:e2:28:30:c8:2f:df: 62:c4:5a:0c:df:34:c5:00:11:10:69:57:a4:71:3b:a6:4f:8f: 8a:e1:03:26:0d:cb:2e:a4:fa:42:93:20:96:82:20:d5:c9:db: 38:18:a1:40:5a:58:77:c5:d5:16:a3:29:17:62:25:2d:e6:f8: 3b:1e:b5:40:6e:33:db:e7:a5:83:8d:df:ba:1a:32:e0:21:ef: 44:c5:f7:c6:ee:af:51:8c:e8:92:2a:a5:97:6b:88:4d:d6:b4: 69:05:f7:07:97:44:fd:05:c7:da:f2:cb:43:cd:2f:76:d2:f2: 97:ba:e5:84:65:e2:86:36:70:ad:01:64:52:fd:4a:58:2f:fd: b6:d9:28:1e:02:b0:09:66:d9:93:a4:f4:c5:66:a3:ca:3e:d5: f4:57:3e:fa -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUahQXg9mLFq3dUr78KPu2JctiUsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE M0FDMjYxODAeFw0yNjA1MTMxNzAwMDlaFw0yNzA1MTIxNzA1MDlaMDMxMTAvBgNV BAMTKDM3M0FEM0ZGMDAwRjQwMDkzQ0UwRUMyMDk0ODdFREZEODhDNDJDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIiDdaioe14VBwTLUd0rijm5F QPG777XpZgb6yqqizwo34DYO6xKqDm1mBUTLdPmwA8fsH72G5EXGUB8H6bvc39KD XQNtW2ode4OhAXO1Xy+Qgs2Oie0EuljITmXy92iBYbK7+C/SsXHL+T0c2rC63835 44b8PDQIvh8Hy22MZyjOxrquMxUP+zZ1IKWiR/nz4BF+NDNpcjjFkYr3QkyF1o9B cLh5UqB/6GKSRS7kpPxFtKNM3CeMt7Pp2QMR0XDGnGD2s28Fwbe4keKrvc6O7Cdd eLpcObVL9tKBThM3Jk75hpz7k2SVk+Sg9J6yYIxBhDgMQB+Mnkaj7AAOpYH7AgMB AAGjggJzMIICbzAdBgNVHQ4EFgQUNzrT/wAPQAk84OwglIft/YjELIEwHwYDVR0j BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjY4 MzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/ BGcwZTBUBAIAATBOAwQCLa+8AwQCLehYAwQCLe50AwQCqvZEAwQDsTWAAwQDsX24 AwQEuy0wAwQEu18wAwQEu1+wAwQDvyWQAwQCwI3EAwQCyAmgAwQDyZ4oMA0EAgAC MAcDBQAoBE9gMA0GCSqGSIb3DQEBCwUAA4IBAQBMvWwyETdQXkfyaA5lIH8exPJD Z2wPKQ4HP9I+20Qtq0HABe5tTRfZpYq6oqojlMBr0HRJJyVWhJA55sh+OEn0Rh6u Xfj0dpotLUFtTQOdSoZ++4xIC6nGC5AthSfYjE2Od5mIe+HiKDDIL99ixFoM3zTF ABEQaVekcTumT4+K4QMmDcsupPpCkyCWgiDVyds4GKFAWlh3xdUWoykXYiUt5vg7 HrVAbjPb56WDjd+6GjLgIe9ExffG7q9RjOiSKqWXa4hN1rRpBfcHl0T9Bcfa8stD zS920vKXuuWEZeKGNnCtAWRS/UpYL/222SgeArAJZtmTpPTFZqPKPtX0Vz76 -----END CERTIFICATE-----Generated at Sun May 24 16:17:59 2026 by rpki-client