$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262907.roa File: AS262907.roa (raw, json) Hash identifier: eX5F3iu0E9at0FJIKInpU1NiY4HtiGJRkM2gXBgdiCY= Subject key identifier: 56:DE:8F:03:97:8E:AD:50:8A:EC:C0:04:EB:4D:BF:25:A4:E2:4E:14 Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 186677A01880E54C6D519612AFCC6AAC2BA33A99 Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262907.roa Signing time: Wed 12 Mar 2025 23:23:56 +0000 ROA not before: Wed 12 Mar 2025 23:18:56 +0000 ROA not after: Wed 11 Mar 2026 23:23:56 +0000 asID: 262907 IP address blocks: 45.178.40.0/22 maxlen: 24 45.184.148.0/22 maxlen: 24 45.226.16.0/22 maxlen: 24 45.237.80.0/22 maxlen: 24 131.161.0.0/22 maxlen: 24 131.221.52.0/22 maxlen: 24 143.208.76.0/22 maxlen: 24 168.0.88.0/22 maxlen: 24 168.0.160.0/22 maxlen: 24 168.121.92.0/22 maxlen: 24 168.197.252.0/22 maxlen: 24 168.227.168.0/22 maxlen: 24 170.83.72.0/22 maxlen: 24 170.254.188.0/22 maxlen: 24 177.11.192.0/21 maxlen: 24 177.11.200.0/21 maxlen: 24 177.36.32.0/20 maxlen: 24 177.44.192.0/20 maxlen: 24 177.66.176.0/22 maxlen: 24 177.72.96.0/21 maxlen: 24 177.87.184.0/22 maxlen: 24 177.87.188.0/22 maxlen: 24 177.87.216.0/21 maxlen: 24 177.92.168.0/21 maxlen: 24 177.104.96.0/20 maxlen: 24 177.130.32.0/20 maxlen: 24 177.155.102.0/23 maxlen: 24 177.155.104.0/22 maxlen: 24 177.185.124.0/22 maxlen: 24 186.195.16.0/20 maxlen: 24 186.209.80.0/21 maxlen: 24 186.251.168.0/22 maxlen: 24 187.16.224.0/20 maxlen: 24 187.49.156.0/22 maxlen: 24 187.60.96.0/20 maxlen: 24 187.60.176.0/20 maxlen: 24 187.84.48.0/20 maxlen: 24 191.6.160.0/22 maxlen: 24 191.253.192.0/20 maxlen: 24 200.18.112.0/20 maxlen: 24 201.87.192.0/20 maxlen: 24 2804:297c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:66:77:a0:18:80:e5:4c:6d:51:96:12:af:cc:6a:ac:2b:a3:3a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Mar 12 23:18:56 2025 GMT Not After : Mar 11 23:23:56 2026 GMT Subject: CN=56DE8F03978EAD508AECC004EB4DBF25A4E24E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:1a:4e:ba:7d:a0:3a:b2:9f:07:e5:46:8d: 92:6c:c0:39:c9:cc:74:a5:88:e6:96:26:df:95:e8: ea:eb:27:ef:c1:c4:da:02:67:44:7a:ee:7e:b2:2f: b8:83:24:cb:3a:c0:34:a2:ab:2e:1a:22:c0:48:38: 27:89:5c:b1:48:a0:42:4b:72:08:a7:d2:eb:ff:ca: 27:0d:5e:f4:56:9c:c0:ab:82:d1:76:96:2d:ff:69: f4:24:bb:34:be:72:79:c3:d6:db:89:a3:15:2f:1a: 33:a7:96:1a:08:7a:43:9c:01:19:3d:82:ac:69:49: 45:90:a0:ec:46:bd:ef:99:35:8f:ac:93:3b:db:dc: 21:54:52:21:9e:79:d2:4b:88:d9:97:db:6f:ee:27: dc:28:ce:9b:e7:b1:ea:64:e9:ee:6a:11:36:c3:14: 65:80:f9:33:99:d3:24:ef:24:81:8c:7b:b8:77:d7: af:22:19:f5:16:36:54:e6:bd:19:c2:41:47:2a:a6: 54:c3:fb:ac:02:0f:fc:8b:1c:86:74:90:3b:74:71: 6f:d6:3a:30:40:fc:6b:8c:ec:f0:6f:91:d4:8e:e1: c6:2d:17:eb:f3:8f:57:67:5b:f4:be:81:7d:cd:0c: 7c:67:c6:30:ff:59:8d:59:aa:14:d8:59:c3:24:9c: 4d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DE:8F:03:97:8E:AD:50:8A:EC:C0:04:EB:4D:BF:25:A4:E2:4E:14 X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.40.0/22 45.184.148.0/22 45.226.16.0/22 45.237.80.0/22 131.161.0.0/22 131.221.52.0/22 143.208.76.0/22 168.0.88.0/22 168.0.160.0/22 168.121.92.0/22 168.197.252.0/22 168.227.168.0/22 170.83.72.0/22 170.254.188.0/22 177.11.192.0/20 177.36.32.0/20 177.44.192.0/20 177.66.176.0/22 177.72.96.0/21 177.87.184.0/21 177.87.216.0/21 177.92.168.0/21 177.104.96.0/20 177.130.32.0/20 177.155.102.0-177.155.107.255 177.185.124.0/22 186.195.16.0/20 186.209.80.0/21 186.251.168.0/22 187.16.224.0/20 187.49.156.0/22 187.60.96.0/20 187.60.176.0/20 187.84.48.0/20 191.6.160.0/22 191.253.192.0/20 200.18.112.0/20 201.87.192.0/20 IPv6: 2804:297c::/32 Signature Algorithm: sha256WithRSAEncryption af:35:c4:9d:fb:5f:cf:46:d5:62:a2:09:ef:38:53:af:58:86: b5:04:72:75:6b:e5:a9:6e:5a:ec:6c:ec:f5:9e:43:7e:38:d2: 75:ff:f9:3e:95:57:e8:0c:af:3f:de:94:0a:a0:69:d4:ab:db: 79:36:d9:da:ff:7a:ea:79:9d:e6:21:d0:fe:c4:cc:3f:6c:dc: c3:09:34:df:7f:0f:54:55:7c:70:60:cc:5d:51:ae:58:0e:1a: d1:48:f3:3a:b6:57:11:64:23:5e:da:26:5f:63:05:32:fb:ad: 0e:e9:a8:e1:40:3f:3a:36:05:ea:7c:2d:da:2c:b7:6c:74:a0: 8a:28:37:e6:20:e4:2f:d2:2f:91:a6:cd:68:29:2b:35:dd:4a: 3d:78:44:19:58:7f:51:0d:7c:d8:d5:33:69:1d:b3:4f:d1:2a: 5e:d0:3f:4c:8f:05:8f:4c:cc:23:15:0b:cb:2e:58:9b:20:b7: 36:fb:2f:7f:a5:27:03:6f:39:5e:d7:35:0d:47:f9:e7:2e:ad: 22:5e:d8:5b:d8:c6:93:c1:e1:e5:8d:42:59:c2:4f:fe:97:16: ce:e0:94:10:18:12:7d:00:31:20:23:79:4b:f4:e4:e4:48:89: 8b:9b:74:d4:d3:14:72:09:23:c6:8c:9b:e5:8b:0b:52:cb:ac: 01:1e:eb:89 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIUGGZ3oBiA5UxtUZYSr8xqrCujOpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNTAzMTIyMzE4NTZaFw0yNjAzMTEyMzIzNTZaMDMxMTAvBgNV BAMTKDU2REU4RjAzOTc4RUFENTA4QUVDQzAwNEVCNERCRjI1QTRFMjRFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4BpOun2gOrKfB+VGjZJswDnJ zHSliOaWJt+V6OrrJ+/BxNoCZ0R67n6yL7iDJMs6wDSiqy4aIsBIOCeJXLFIoEJL cgin0uv/yicNXvRWnMCrgtF2li3/afQkuzS+cnnD1tuJoxUvGjOnlhoIekOcARk9 gqxpSUWQoOxGve+ZNY+skzvb3CFUUiGeedJLiNmX22/uJ9wozpvnsepk6e5qETbD FGWA+TOZ0yTvJIGMe7h3168iGfUWNlTmvRnCQUcqplTD+6wCD/yLHIZ0kDt0cW/W OjBA/GuM7PBvkdSO4cYtF+vzj1dnW/S+gX3NDHxnxjD/WY1ZqhTYWcMknE0vAgMB AAGjggMZMIIDFTAdBgNVHQ4EFgQUVt6PA5eOrVCK7MAE602/JaTiThQwHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjYy OTA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGgYIKwYBBQUHAQcB Af8EggEJMIIBBTCB8wQCAAEwgewDBAItsigDBAItuJQDBAIt4hADBAIt7VADBAKD oQADBAKD3TQDBAKP0EwDBAKoAFgDBAKoAKADBAKoeVwDBAKoxfwDBAKo46gDBAKq U0gDBAKq/rwDBASxC8ADBASxJCADBASxLMADBAKxQrADBAOxSGADBAOxV7gDBAOx V9gDBAOxXKgDBASxaGADBASxgiAwDAMEAbGbZgMEArGbaAMEArG5fAMEBLrDEAME A7rRUAMEArr7qAMEBLsQ4AMEArsxnAMEBLs8YAMEBLs8sAMEBLtUMAMEAr8GoAME BL/9wAMEBMgScAMEBMlXwDANBAIAAjAHAwUAKAQpfDANBgkqhkiG9w0BAQsFAAOC AQEArzXEnftfz0bVYqIJ7zhTr1iGtQRydWvlqW5a7Gzs9Z5DfjjSdf/5PpVX6Ayv P96UCqBp1KvbeTbZ2v966nmd5iHQ/sTMP2zcwwk0338PVFV8cGDMXVGuWA4a0Ujz OrZXEWQjXtomX2MFMvutDumo4UA/OjYF6nwt2iy3bHSgiig35iDkL9IvkabNaCkr Nd1KPXhEGVh/UQ182NUzaR2zT9EqXtA/TI8Fj0zMIxULyy5YmyC3Nvsvf6UnA285 Xtc1DUf55y6tIl7YW9jGk8Hh5Y1CWcJP/pcWzuCUEBgSfQAxICN5S/Tk5EiJi5t0 1NMUcgkjxoyb5YsLUsusAR7riQ== -----END CERTIFICATE-----Generated at Sun Apr 6 19:21:21 2025 by rpki-client