$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS28212.roa File: AS28212.roa (raw, json) Hash identifier: 4IDBvQnr4muF3V1TifOBiHOd9mGL+JPuB1OZMKxYCFQ= Subject key identifier: 17:8A:DC:A5:8E:7F:F7:94:3A:B9:A0:1D:EA:90:B8:81:1D:58:07:AA Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C Certificate serial: 2638F125F7F97C43DACB35307AE9E209401BC16A Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS28212.roa Signing time: Mon 20 Jan 2025 16:28:47 +0000 ROA not before: Mon 20 Jan 2025 16:23:47 +0000 ROA not after: Mon 19 Jan 2026 16:28:47 +0000 asID: 28212 IP address blocks: 187.63.16.0/20 maxlen: 20 187.63.16.0/21 maxlen: 21 187.63.16.0/22 maxlen: 22 187.63.16.0/23 maxlen: 23 187.63.16.0/24 maxlen: 24 187.63.17.0/24 maxlen: 24 187.63.18.0/23 maxlen: 23 187.63.18.0/24 maxlen: 24 187.63.19.0/24 maxlen: 24 187.63.20.0/22 maxlen: 22 187.63.20.0/23 maxlen: 23 187.63.20.0/24 maxlen: 24 187.63.21.0/24 maxlen: 24 187.63.22.0/23 maxlen: 23 187.63.22.0/24 maxlen: 24 187.63.23.0/24 maxlen: 24 187.63.24.0/21 maxlen: 21 187.63.24.0/22 maxlen: 22 187.63.24.0/23 maxlen: 23 187.63.24.0/24 maxlen: 24 187.63.25.0/24 maxlen: 24 187.63.26.0/23 maxlen: 23 187.63.27.0/24 maxlen: 24 187.63.28.0/22 maxlen: 22 187.63.28.0/23 maxlen: 23 187.63.28.0/24 maxlen: 24 187.63.29.0/24 maxlen: 24 187.63.30.0/23 maxlen: 23 187.63.30.0/24 maxlen: 24 187.63.31.0/24 maxlen: 24 189.113.96.0/20 maxlen: 20 189.113.96.0/21 maxlen: 21 189.113.96.0/22 maxlen: 22 189.113.96.0/23 maxlen: 23 189.113.96.0/24 maxlen: 24 189.113.97.0/24 maxlen: 24 189.113.98.0/23 maxlen: 23 189.113.98.0/24 maxlen: 24 189.113.99.0/24 maxlen: 24 189.113.100.0/22 maxlen: 22 189.113.100.0/23 maxlen: 23 189.113.100.0/24 maxlen: 24 189.113.101.0/24 maxlen: 24 189.113.102.0/23 maxlen: 23 189.113.102.0/24 maxlen: 24 189.113.103.0/24 maxlen: 24 189.113.104.0/21 maxlen: 21 189.113.104.0/22 maxlen: 22 189.113.104.0/23 maxlen: 23 189.113.104.0/24 maxlen: 24 189.113.105.0/24 maxlen: 24 189.113.106.0/23 maxlen: 23 189.113.106.0/24 maxlen: 24 189.113.107.0/24 maxlen: 24 189.113.108.0/22 maxlen: 22 189.113.108.0/23 maxlen: 23 189.113.108.0/24 maxlen: 24 189.113.109.0/24 maxlen: 24 189.113.110.0/23 maxlen: 23 189.113.110.0/24 maxlen: 24 189.113.111.0/24 maxlen: 24 2804:32d8::/32 maxlen: 32 2804:32d8::/33 maxlen: 33 2804:32d8::/34 maxlen: 34 2804:32d8::/35 maxlen: 35 2804:32d8::/36 maxlen: 36 2804:32d8:1000::/36 maxlen: 36 2804:32d8:2000::/35 maxlen: 35 2804:32d8:2000::/36 maxlen: 36 2804:32d8:3000::/36 maxlen: 36 2804:32d8:4000::/34 maxlen: 34 2804:32d8:4000::/35 maxlen: 35 2804:32d8:4000::/36 maxlen: 36 2804:32d8:5000::/36 maxlen: 36 2804:32d8:6000::/35 maxlen: 35 2804:32d8:6000::/36 maxlen: 36 2804:32d8:7000::/36 maxlen: 36 2804:32d8:8000::/33 maxlen: 33 2804:32d8:8000::/34 maxlen: 34 2804:32d8:8000::/35 maxlen: 35 2804:32d8:8000::/36 maxlen: 36 2804:32d8:9000::/36 maxlen: 36 2804:32d8:a000::/35 maxlen: 35 2804:32d8:a000::/36 maxlen: 36 2804:32d8:b000::/36 maxlen: 36 2804:32d8:c000::/34 maxlen: 34 2804:32d8:c000::/35 maxlen: 35 2804:32d8:c000::/36 maxlen: 36 2804:32d8:d000::/36 maxlen: 36 2804:32d8:e000::/35 maxlen: 35 2804:32d8:e000::/36 maxlen: 36 2804:32d8:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:38:f1:25:f7:f9:7c:43:da:cb:35:30:7a:e9:e2:09:40:1b:c1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C Validity Not Before: Jan 20 16:23:47 2025 GMT Not After : Jan 19 16:28:47 2026 GMT Subject: CN=178ADCA58E7FF7943AB9A01DEA90B8811D5807AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:8e:38:0d:53:bd:8d:c6:7c:07:a5:ba:e3: 9c:27:26:51:c4:3f:7c:a4:98:39:26:92:7f:4f:ca: 2e:6c:7c:54:86:65:f5:43:03:8f:25:a2:b4:95:13: 89:64:61:79:70:7b:14:c9:88:89:6e:24:7f:a5:51: 63:b5:29:d1:79:c6:3d:7b:86:0a:8c:89:b9:05:1f: 52:53:4b:55:61:a8:67:fc:a4:47:cf:07:b6:05:26: b7:d5:64:6e:5d:f5:48:02:dc:d0:be:c9:81:49:8d: b6:7c:61:35:56:da:ef:54:24:9d:6d:34:90:1d:d3: 42:4a:11:c8:9f:ec:02:37:56:d5:3b:02:d7:6e:e6: 1a:40:5d:ad:4c:dd:49:e6:0b:de:19:35:c1:bc:a0: 40:71:15:a9:f3:a6:5b:24:7a:f2:d3:b2:72:2d:fb: ce:ae:e4:ae:ff:b2:67:76:24:4a:4a:9e:52:36:62: d6:aa:b3:80:49:3e:06:6d:72:80:b9:2b:ed:71:e5: b9:43:8c:f0:18:37:7c:e8:98:5b:a5:73:f8:73:cf: f4:a1:00:e2:da:f3:d0:78:ed:a3:76:8e:bf:da:43: 05:db:b8:f8:93:5f:9b:c6:1f:4f:25:ae:78:11:12: bb:0d:a5:66:85:bb:d6:ec:b4:3a:b4:f5:20:0f:0e: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:DC:A5:8E:7F:F7:94:3A:B9:A0:1D:EA:90:B8:81:1D:58:07:AA X509v3 Authority Key Identifier: keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS28212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.63.16.0/20 189.113.96.0/20 IPv6: 2804:32d8::/32 Signature Algorithm: sha256WithRSAEncryption 15:7e:89:6e:32:e0:c3:28:2b:b2:a4:2c:4d:cd:d7:40:f5:1f: fb:51:b0:66:a8:d6:c3:cd:5e:92:c6:e6:4f:7a:31:85:c0:d9: d5:29:7a:85:0a:b5:fe:2e:37:80:64:b0:c3:d5:02:32:66:bc: ac:45:6c:45:dc:cf:86:f0:0c:fe:59:c3:37:5d:10:7e:40:b1: b4:34:f3:84:ac:0e:ba:2c:b3:31:88:f4:e3:e2:af:7b:cf:21: 7d:cc:e0:33:9e:c5:40:7a:58:56:14:11:53:45:f2:64:d8:60: b9:40:40:ac:8c:34:3a:f4:cf:cd:ed:35:fe:a1:7f:a0:3c:e3: 09:00:ac:8c:31:43:0c:fc:18:f9:57:10:c4:2d:95:82:d8:46: 00:9c:57:f3:a0:5e:0f:3a:9b:d7:32:37:c3:6b:57:6c:d4:2c: e8:91:5c:a5:b6:7c:24:8a:5a:17:c2:e2:f0:75:be:f3:16:ea: 44:d6:17:37:65:1c:9e:a9:22:db:c0:20:4a:5f:73:f9:02:17: 60:4b:c6:f8:1d:d1:e4:be:4a:f9:6b:31:c7:9a:87:4e:f0:74: 9d:e4:1b:62:c1:7d:43:36:f2:f2:32:64:64:6d:8d:27:db:c3: d8:37:98:df:4a:8b:8d:9a:da:c1:37:c2:d9:ae:b6:20:6a:ed: 63:c5:f1:22 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJjjxJff5fEPayzUweuniCUAbwWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJEOEEyQUQ1MzFGMTI5RTIxRDkyRDI3NUUwRUZEMzgw QzkzRkMzQzAeFw0yNTAxMjAxNjIzNDdaFw0yNjAxMTkxNjI4NDdaMDMxMTAvBgNV BAMTKDE3OEFEQ0E1OEU3RkY3OTQzQUI5QTAxREVBOTBCODgxMUQ1ODA3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMo44DVO9jcZ8B6W645wnJlHE P3ykmDkmkn9Pyi5sfFSGZfVDA48lorSVE4lkYXlwexTJiIluJH+lUWO1KdF5xj17 hgqMibkFH1JTS1VhqGf8pEfPB7YFJrfVZG5d9UgC3NC+yYFJjbZ8YTVW2u9UJJ1t NJAd00JKEcif7AI3VtU7Atdu5hpAXa1M3UnmC94ZNcG8oEBxFanzplskevLTsnIt +86u5K7/smd2JEpKnlI2Ytaqs4BJPgZtcoC5K+1x5blDjPAYN3zomFulc/hzz/Sh AOLa89B47aN2jr/aQwXbuPiTX5vGH08lrngRErsNpWaFu9bstDq09SAPDrubAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUF4rcpY5/95Q6uaAd6pC4gR1YB6owHwYDVR0j BBgwFoAUAtiirVMfEp4h2S0nXg79OAyT/DwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lW a1gvMS8wMkQ4QTJBRDUzMUYxMjlFMjFEOTJEMjc1RTBFRkQzODBDOTNGQzNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRDhBMkFENTMxRjEyOUUy MUQ5MkQyNzVFMEVGRDM4MEM5M0ZDM0MuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQnBX akVYaVBEU0xNeFhlRUt0QjIzTVR0ZWlxc051QUxQWUp3NXpXWVZrWC8xL0FTMjgy MTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAS7PxADBAS9cWAwDQQCAAIwBwMFACgEMtgwDQYJKoZIhvcN AQELBQADggEBABV+iW4y4MMoK7KkLE3N10D1H/tRsGao1sPNXpLG5k96MYXA2dUp eoUKtf4uN4BksMPVAjJmvKxFbEXcz4bwDP5ZwzddEH5AsbQ084SsDrosszGI9OPi r3vPIX3M4DOexUB6WFYUEVNF8mTYYLlAQKyMNDr0z83tNf6hf6A84wkArIwxQwz8 GPlXEMQtlYLYRgCcV/OgXg86m9cyN8NrV2zULOiRXKW2fCSKWhfC4vB1vvMW6kTW FzdlHJ6pItvAIEpfc/kCF2BLxvgd0eS+SvlrMceah07wdJ3kG2LBfUM28vIyZGRt jSfbw9g3mN9Ki42a2sE3wtmutiBq7WPF8SI= -----END CERTIFICATE-----Generated at Wed Apr 9 13:14:01 2025 by rpki-client