$ rpki-client -vvvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28635.roa File: AS28635.roa (raw, json) Hash identifier: LaE/mN3LOcjbY8zoDOcQLYqFYyR49oQV4UsEy8vFjOg= Subject key identifier: C5:E1:F5:D0:CA:47:E7:8D:25:7B:E9:A4:59:3A:DA:1A:CA:65:C0:41 Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 751FC8B4E850547F9C0EF7E9D11C54ECC0DCBB73 Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28635.roa Signing time: Wed 30 Sep 2026 08:26:55 +0000 ROA not before: Wed 30 Sep 2026 08:21:55 +0000 ROA not after: Wed 29 Sep 2027 08:26:55 +0000 asID: 28635 IP address blocks: 201.71.128.0/18 maxlen: 24 2804:1408::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 03:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1f:c8:b4:e8:50:54:7f:9c:0e:f7:e9:d1:1c:54:ec:c0:dc:bb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Sep 30 08:21:55 2026 GMT Not After : Sep 29 08:26:55 2027 GMT Subject: CN=C5E1F5D0CA47E78D257BE9A4593ADA1ACA65C041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:94:eb:a0:20:f7:26:57:5e:87:1a:83:96: ad:46:c8:f5:5c:a5:ee:59:33:dd:ea:a8:a4:f4:d1: e2:a3:27:9a:36:8b:28:a9:50:dc:33:c0:24:05:26: 32:47:f0:b6:b7:0c:5b:3a:d0:64:06:b3:da:4b:f2: e1:10:0a:f4:84:7d:19:2a:f9:8a:40:0a:6a:36:d9: 14:f1:1d:45:82:c4:aa:18:92:80:5c:5a:3e:cf:e4: 23:f8:2b:ce:c1:68:0d:e2:2f:e7:6d:fd:7f:dc:cf: 14:2c:2c:3d:f2:43:63:e0:76:37:71:9a:99:4e:e1: ad:40:2d:9c:74:41:a5:ef:03:3d:e4:cf:e2:6e:6e: a3:b7:7d:b6:4b:2f:46:63:6a:43:15:53:68:16:fb: bb:47:57:16:06:0b:f9:25:3c:54:14:dd:3d:43:16: 37:6a:98:6c:16:3d:c6:25:9d:d0:b2:c2:cf:17:b9: ed:23:b1:3f:23:be:43:e6:d4:86:c9:03:9d:ac:ae: e4:f7:5d:7a:35:bc:ea:b8:e2:8a:7a:50:b3:ba:aa: a0:02:08:0d:5b:49:50:6d:63:66:26:70:f7:ee:85: bc:9a:2d:5a:82:2b:80:2d:61:4c:c3:aa:e4:96:41: 1c:18:8e:b9:00:4f:a2:b0:e1:25:3f:25:81:23:2a: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:F5:D0:CA:47:E7:8D:25:7B:E9:A4:59:3A:DA:1A:CA:65:C0:41 X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.71.128.0/18 IPv6: 2804:1408::/32 Signature Algorithm: sha256WithRSAEncryption 88:d9:be:3e:55:15:85:cf:f2:af:5d:92:6c:e5:aa:4a:a6:44: bb:51:6f:81:81:7e:84:09:65:4a:49:76:76:d3:13:e6:e5:7d: e8:61:a8:97:99:d8:38:57:2c:ff:39:39:06:85:b0:b5:d3:d2: 48:72:04:b3:6e:d9:ed:7a:6e:c1:1b:94:1b:d3:7d:94:ef:b1: c3:b3:0e:26:aa:e4:c8:0b:e4:5c:3c:7e:7a:de:3d:bf:b5:a0: e6:99:af:c3:b1:a4:58:37:6b:b9:0c:ce:a6:17:67:ee:ca:8f: f4:ef:a9:06:02:6f:93:89:ed:7f:37:9e:a8:79:bd:55:fe:17: 22:d6:55:9d:cc:82:18:12:bd:be:23:2b:46:aa:38:cf:76:06: 38:99:07:fa:57:29:24:9a:bc:1c:53:41:9e:16:7b:8a:1d:f7: 3c:bb:9b:10:58:25:a6:c0:58:d2:03:94:b1:21:92:61:72:de: c3:4c:5e:66:05:b8:72:a8:23:7d:d5:a3:e9:71:5f:fb:ad:18: ff:ad:ca:59:c8:ca:a4:2b:10:c1:1b:e0:b4:b6:56:d0:28:19: 82:81:36:2d:79:d3:db:b8:a7:5c:eb:b9:76:ba:f5:2b:c5:dd: 7b:d0:4a:aa:50:90:9c:a8:48:31:bc:69:a0:d7:85:c9:87:3f: 03:81:7e:9e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIUdR/ItOhQVH+cDvfp0RxU7MDcu3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNjA5MzAwODIxNTVaFw0yNzA5MjkwODI2NTVaMDMxMTAvBgNV BAMTKEM1RTFGNUQwQ0E0N0U3OEQyNTdCRTlBNDU5M0FEQTFBQ0E2NUMwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOO5TroCD3JldehxqDlq1GyPVc pe5ZM93qqKT00eKjJ5o2iyipUNwzwCQFJjJH8La3DFs60GQGs9pL8uEQCvSEfRkq +YpACmo22RTxHUWCxKoYkoBcWj7P5CP4K87BaA3iL+dt/X/czxQsLD3yQ2Pgdjdx mplO4a1ALZx0QaXvAz3kz+JubqO3fbZLL0ZjakMVU2gW+7tHVxYGC/klPFQU3T1D FjdqmGwWPcYlndCyws8Xue0jsT8jvkPm1IbJA52sruT3XXo1vOq44op6ULO6qqAC CA1bSVBtY2YmcPfuhbyaLVqCK4AtYUzDquSWQRwYjrkAT6Kw4SU/JYEjKicLAgMB AAGjggIqMIICJjAdBgNVHQ4EFgQUxeH10MpH540le+mkWTraGsplwEEwHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjg2 MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAbJR4AwDQQCAAIwBwMFACgEFAgwDQYJKoZIhvcNAQELBQAD ggEBAIjZvj5VFYXP8q9dkmzlqkqmRLtRb4GBfoQJZUpJdnbTE+blfehhqJeZ2DhX LP85OQaFsLXT0khyBLNu2e16bsEblBvTfZTvscOzDiaq5MgL5Fw8fnrePb+1oOaZ r8OxpFg3a7kMzqYXZ+7Kj/TvqQYCb5OJ7X83nqh5vVX+FyLWVZ3MghgSvb4jK0aq OM92BjiZB/pXKSSavBxTQZ4We4od9zy7mxBYJabAWNIDlLEhkmFy3sNMXmYFuHKo I33Vo+lxX/utGP+tylnIyqQrEMEb4LS2VtAoGYKBNi1509u4p1zruXa69SvF3XvQ SqpQkJyoSDG8aaDXhcmHPwOBfp4= -----END CERTIFICATE-----Generated at Mon Oct 12 04:47:26 2026 by rpki-client