$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS264524.roa File: AS264524.roa (raw, json) Hash identifier: ulsbnGOW36kVtM7xaHkMfzehX9m0QmfYcvYHNXyAJ3A= Subject key identifier: C3:AD:47:1E:1E:5A:88:67:D5:0E:59:C1:D3:49:C0:21:F3:4D:5F:C0 Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Certificate serial: 120D8340A79CB308546EC34798E5A860488E3D93 Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS264524.roa Signing time: Fri 12 Sep 2025 12:30:46 +0000 ROA not before: Fri 12 Sep 2025 12:25:46 +0000 ROA not after: Fri 11 Sep 2026 12:30:46 +0000 asID: 264524 IP address blocks: 138.0.0.0/22 maxlen: 22 138.0.0.0/24 maxlen: 24 138.0.1.0/24 maxlen: 24 138.0.3.0/24 maxlen: 24 170.247.36.0/22 maxlen: 22 170.247.36.0/24 maxlen: 24 170.247.37.0/24 maxlen: 24 170.247.38.0/24 maxlen: 24 170.247.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 05:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0d:83:40:a7:9c:b3:08:54:6e:c3:47:98:e5:a8:60:48:8e:3d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA Validity Not Before: Sep 12 12:25:46 2025 GMT Not After : Sep 11 12:30:46 2026 GMT Subject: CN=C3AD471E1E5A8867D50E59C1D349C021F34D5FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:8a:bc:f4:4f:9f:59:58:be:46:0a:32:32: 1f:2e:f4:43:7d:bd:b5:a2:81:11:7c:46:52:82:82: b9:92:8a:c5:da:1b:5f:dd:b5:a8:24:e6:3d:14:1c: 67:7f:20:a5:74:32:53:13:30:89:7a:ce:de:f5:40: 98:0f:4d:01:cb:58:c9:5d:66:f2:af:90:49:f5:5b: 7d:64:32:15:70:e6:06:ec:da:e3:86:f8:7d:fb:5a: 73:f9:0f:0a:2a:23:86:12:f6:90:3f:d9:ac:d5:b4: 58:0e:83:4d:fb:f7:b5:8e:29:db:dc:54:98:d6:05: 75:90:3d:d3:89:8b:c1:cb:6f:3a:ea:49:5b:25:62: 2a:54:57:ce:b7:6d:7d:ca:17:16:25:b7:67:8a:81: 60:ef:15:54:6b:e0:a3:83:de:54:d5:93:04:c1:f5: e8:7d:30:98:23:10:1f:35:39:6d:3f:f1:f1:7e:b0: ff:76:bf:41:77:7e:e3:e5:f9:c4:a2:6e:c8:bc:4b: 8d:ca:1b:f6:99:92:3d:64:6f:51:2e:58:d7:d9:87: d2:75:7e:61:fe:08:9a:05:ae:6e:8f:45:a0:1e:8d: a2:bd:85:75:98:ea:49:bc:d7:6a:00:4f:53:0e:19: 12:96:b6:e6:d5:fb:0d:da:2a:6a:0c:e7:c9:f5:33: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AD:47:1E:1E:5A:88:67:D5:0E:59:C1:D3:49:C0:21:F3:4D:5F:C0 X509v3 Authority Key Identifier: keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS264524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.0.0/22 170.247.36.0/22 Signature Algorithm: sha256WithRSAEncryption b2:48:78:3d:51:10:da:ac:cf:69:96:5c:4a:6d:55:b5:90:b3: d9:14:f5:4f:1f:cb:c0:94:81:24:f3:9a:5c:43:bd:e8:ef:5e: 61:8b:fc:ec:f5:fd:4a:f6:61:21:5c:d6:f9:32:e9:c1:b0:c7: 0c:3a:70:db:63:2a:69:17:f0:67:45:a2:fa:2a:03:a6:9e:85: 36:47:f2:d6:c3:d1:18:3d:d0:b9:da:3b:99:34:bb:a5:6c:4f: 5c:3e:cb:bd:66:16:41:46:ff:bf:18:24:42:85:11:5e:a7:62: 4e:2c:28:08:a8:96:d5:eb:81:1b:a1:ea:b7:38:a8:bd:ba:9d: 03:42:36:76:19:53:7f:30:58:43:fa:87:17:62:6d:ab:0f:ea: 0e:37:fa:c2:a5:a3:99:18:99:f2:15:9d:94:1d:67:cd:cb:37: 68:c3:bf:e3:d0:7d:77:e6:29:c0:13:81:36:be:03:95:0b:59: b8:1d:10:2c:04:75:b9:6a:49:72:bd:72:a5:60:50:ff:10:1b: 60:ab:f8:25:f9:01:b3:7a:c3:f8:cd:92:26:60:37:ce:37:47: 26:99:0a:74:57:d6:7b:68:94:a6:30:6b:d2:42:5e:39:9f:19: 36:8a:4f:78:f6:51:3c:9f:dc:02:35:0b:70:6b:85:66:e1:05: e8:bb:27:8a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUEg2DQKecswhUbsNHmOWoYEiOPZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3 MUQxQzRBQTAeFw0yNTA5MTIxMjI1NDZaFw0yNjA5MTExMjMwNDZaMDMxMTAvBgNV BAMTKEMzQUQ0NzFFMUU1QTg4NjdENTBFNTlDMUQzNDlDMDIxRjM0RDVGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+4q89E+fWVi+RgoyMh8u9EN9 vbWigRF8RlKCgrmSisXaG1/dtagk5j0UHGd/IKV0MlMTMIl6zt71QJgPTQHLWMld ZvKvkEn1W31kMhVw5gbs2uOG+H37WnP5DwoqI4YS9pA/2azVtFgOg03797WOKdvc VJjWBXWQPdOJi8HLbzrqSVslYipUV863bX3KFxYlt2eKgWDvFVRr4KOD3lTVkwTB 9eh9MJgjEB81OW0/8fF+sP92v0F3fuPl+cSibsi8S43KG/aZkj1kb1EuWNfZh9J1 fmH+CJoFrm6PRaAejaK9hXWY6km812oAT1MOGRKWtubV+w3aKmoM58n1M8+1AgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUw61HHh5aiGfVDlnB00nAIfNNX8AwHwYDVR0j BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UWZ4 UnJ0aEVXd20xdzdZU2ZZRTlXZDY0MVYxbmFYZGt1S2tBdEM4cWdhVi8xL0FTMjY0 NTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCigAAAwQCqvckMA0GCSqGSIb3DQEBCwUAA4IBAQCySHg9 URDarM9pllxKbVW1kLPZFPVPH8vAlIEk85pcQ73o715hi/zs9f1K9mEhXNb5MunB sMcMOnDbYyppF/BnRaL6KgOmnoU2R/LWw9EYPdC52juZNLulbE9cPsu9ZhZBRv+/ GCRChRFep2JOLCgIqJbV64Eboeq3OKi9up0DQjZ2GVN/MFhD+ocXYm2rD+oON/rC paOZGJnyFZ2UHWfNyzdow7/j0H135inAE4E2vgOVC1m4HRAsBHW5aklyvXKlYFD/ EBtgq/gl+QGzesP4zZImYDfON0cmmQp0V9Z7aJSmMGvSQl45nxk2ik949lE8n9wC NQtwa4Vm4QXouyeK -----END CERTIFICATE-----Generated at Tue Nov 4 17:45:20 2025 by rpki-client