$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS28598.roa File: AS28598.roa (raw, json) Hash identifier: S6n6B9MdpzLwDvnSPRY1Qr/qubR/jewwwC7LdwNlaRM= Subject key identifier: BF:5A:BA:D3:45:9F:A4:36:F1:70:E7:BA:C2:6E:53:AB:B5:09:4B:08 Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Certificate serial: 519009EA3A85985DC268C28D5456B1EB9728EA1A Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS28598.roa Signing time: Thu 24 Sep 2026 18:41:37 +0000 ROA not before: Thu 24 Sep 2026 18:36:37 +0000 ROA not after: Thu 23 Sep 2027 18:41:37 +0000 asID: 28598 IP address blocks: 45.7.104.0/22 maxlen: 22 45.7.104.0/23 maxlen: 23 45.165.228.0/22 maxlen: 24 45.172.124.0/22 maxlen: 22 45.172.124.0/23 maxlen: 23 45.172.124.0/24 maxlen: 24 45.172.125.0/24 maxlen: 24 45.172.126.0/23 maxlen: 23 45.172.126.0/24 maxlen: 24 45.179.224.0/22 maxlen: 22 45.179.224.0/23 maxlen: 24 45.179.226.0/23 maxlen: 24 45.229.212.0/22 maxlen: 24 138.59.228.0/22 maxlen: 22 138.59.228.0/23 maxlen: 23 138.59.230.0/23 maxlen: 23 138.122.80.0/22 maxlen: 22 138.122.80.0/23 maxlen: 23 138.122.82.0/23 maxlen: 23 167.250.136.0/22 maxlen: 22 167.250.136.0/23 maxlen: 23 167.250.138.0/23 maxlen: 23 167.250.139.0/24 maxlen: 24 170.78.4.0/22 maxlen: 22 170.78.4.0/23 maxlen: 23 170.78.6.0/23 maxlen: 23 170.81.4.0/22 maxlen: 22 170.81.4.0/23 maxlen: 23 170.81.6.0/23 maxlen: 23 177.104.112.0/20 maxlen: 20 177.104.112.0/21 maxlen: 21 177.104.120.0/21 maxlen: 21 177.104.124.0/24 maxlen: 24 177.190.208.0/22 maxlen: 22 177.190.208.0/23 maxlen: 23 177.190.210.0/23 maxlen: 23 187.94.8.0/22 maxlen: 22 187.94.8.0/23 maxlen: 23 187.94.10.0/23 maxlen: 23 187.110.224.0/20 maxlen: 20 187.110.224.0/21 maxlen: 21 187.110.224.0/23 maxlen: 23 187.110.226.0/23 maxlen: 23 187.110.228.0/23 maxlen: 23 187.110.230.0/23 maxlen: 23 187.110.232.0/21 maxlen: 21 187.110.232.0/22 maxlen: 22 187.110.232.0/23 maxlen: 23 187.110.236.0/22 maxlen: 22 187.110.238.0/23 maxlen: 23 187.120.48.0/20 maxlen: 20 187.120.48.0/21 maxlen: 21 191.52.224.0/20 maxlen: 20 201.20.64.0/18 maxlen: 18 201.20.64.0/19 maxlen: 19 201.20.64.0/20 maxlen: 20 201.20.64.0/21 maxlen: 21 201.20.64.0/23 maxlen: 23 201.20.71.0/24 maxlen: 24 201.20.72.0/21 maxlen: 21 201.20.80.0/20 maxlen: 20 201.20.80.0/21 maxlen: 21 201.20.87.0/24 maxlen: 24 201.20.94.0/24 maxlen: 24 201.20.96.0/19 maxlen: 19 201.20.96.0/20 maxlen: 20 201.20.96.0/21 maxlen: 21 201.20.96.0/23 maxlen: 23 201.20.104.0/23 maxlen: 23 201.20.112.0/20 maxlen: 20 201.20.116.0/23 maxlen: 23 201.20.117.0/24 maxlen: 24 201.20.119.0/24 maxlen: 24 201.20.120.0/21 maxlen: 21 201.20.126.0/24 maxlen: 24 201.148.120.0/22 maxlen: 22 201.148.120.0/23 maxlen: 23 201.148.122.0/23 maxlen: 23 2804:248::/32 maxlen: 32 2804:248::/34 maxlen: 34 2804:248::/48 maxlen: 48 2804:248:2::/48 maxlen: 48 2804:248:4::/48 maxlen: 48 2804:248:8::/48 maxlen: 48 2804:248:100::/40 maxlen: 40 2804:248:800::/39 maxlen: 39 2804:248:3000::/40 maxlen: 40 2804:248:4000::/34 maxlen: 34 2804:248:4002::/48 maxlen: 48 2804:248:4004::/48 maxlen: 48 2804:248:4007::/48 maxlen: 48 2804:248:8000::/34 maxlen: 34 2804:248:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:90:09:ea:3a:85:98:5d:c2:68:c2:8d:54:56:b1:eb:97:28:ea:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Validity Not Before: Sep 24 18:36:37 2026 GMT Not After : Sep 23 18:41:37 2027 GMT Subject: CN=BF5ABAD3459FA436F170E7BAC26E53ABB5094B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:80:71:0c:cd:45:eb:ae:d4:73:4c:0b:2b: b6:e4:0c:52:05:3d:13:62:f3:de:92:af:6d:f4:0b: 14:be:8f:af:b7:0b:7e:1f:c9:43:48:cc:0e:cb:08: 89:56:83:34:b4:54:92:ff:f8:da:21:20:b6:90:38: f9:a6:22:c4:c8:dd:4f:e2:83:90:af:31:da:20:d2: 0c:4a:ad:3d:52:14:c4:ea:f5:50:09:3e:fd:09:22: 19:7f:14:23:a7:f7:47:d4:6d:10:45:23:7d:f3:ff: 72:99:42:8e:3a:de:35:91:1a:9b:b3:03:59:21:2d: bb:ba:f7:bd:ed:f6:a3:84:38:aa:c6:b5:66:24:68: c6:91:9e:ee:51:1b:cc:3f:03:ae:c4:4d:ea:07:25: c8:3d:d4:5a:cb:3a:21:34:a6:c7:13:1b:16:e5:4d: 15:7a:e2:65:1d:0c:b1:e7:09:cf:ff:83:2b:8c:cc: e3:9c:69:8f:f0:55:91:66:62:77:53:1d:dd:69:c8: 21:fc:51:f1:1d:7f:86:f7:91:9c:cc:6c:52:f1:11: d4:d7:0f:00:ff:0b:ca:a9:08:69:8e:19:4a:f1:42: a5:77:79:bc:8f:ea:2f:2a:d0:9d:bb:c7:e7:73:ec: 53:c2:67:4f:35:ec:4b:b1:80:36:20:1e:15:1e:28: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5A:BA:D3:45:9F:A4:36:F1:70:E7:BA:C2:6E:53:AB:B5:09:4B:08 X509v3 Authority Key Identifier: keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS28598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.104.0/22 45.165.228.0/22 45.172.124.0/22 45.179.224.0/22 45.229.212.0/22 138.59.228.0/22 138.122.80.0/22 167.250.136.0/22 170.78.4.0/22 170.81.4.0/22 177.104.112.0/20 177.190.208.0/22 187.94.8.0/22 187.110.224.0/20 187.120.48.0/20 191.52.224.0/20 201.20.64.0/18 201.148.120.0/22 IPv6: 2804:248::/32 Signature Algorithm: sha256WithRSAEncryption 75:93:3b:d3:68:38:81:d8:ca:18:6a:14:4e:18:c2:9c:e7:a6: 81:bd:6f:7c:c6:eb:be:b9:9b:09:de:e2:5d:15:e7:ce:e6:86: 30:dd:e3:d8:a9:d3:57:5d:7a:0a:7d:d9:d1:d2:06:a9:f8:ac: 60:07:0a:a3:93:ce:69:ab:ca:01:ba:0f:40:d7:09:7b:2c:c2: a3:9d:f2:8d:47:15:45:f5:43:3f:0a:c9:f6:7c:20:29:13:d6: 17:21:69:c6:9d:66:88:23:25:85:eb:3a:d1:1a:e3:92:ab:dd: 77:02:a1:9b:7c:7b:1f:06:0d:e1:dc:f6:2a:a6:b7:2d:a3:13: c9:f7:e2:ec:8d:c8:fd:8e:e5:d1:02:38:65:25:24:12:84:e7: b7:b8:4a:d2:bc:b1:eb:f0:03:84:15:c7:59:13:b2:82:b2:20: 0e:86:6f:a8:33:a8:dd:f7:c8:02:66:f1:ca:84:21:d8:8c:ea: 30:5d:bd:e4:4b:63:f9:5f:e0:9a:23:4b:dd:49:c9:ce:8f:57: 15:5a:77:27:20:48:9b:b8:ba:77:f9:d1:69:89:00:2c:97:d0: e3:3a:ba:75:e1:90:82:3d:66:9c:5a:53:34:bd:4e:db:11:87: 4a:e7:1c:fc:a5:2d:de:da:2e:57:58:e4:76:d5:23:55:64:d9: 2e:23:1c:1e -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUUZAJ6jqFmF3CaMKNVFax65co6howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTkyMkUyRUJGRkJBODA0NjhDMTcwRjBCMDUzQzkw RkQxNjBFNDAeFw0yNjA5MjQxODM2MzdaFw0yNzA5MjMxODQxMzdaMDMxMTAvBgNV BAMTKEJGNUFCQUQzNDU5RkE0MzZGMTcwRTdCQUMyNkU1M0FCQjUwOTRCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zYBxDM1F667Uc0wLK7bkDFIF PRNi896Sr230CxS+j6+3C34fyUNIzA7LCIlWgzS0VJL/+NohILaQOPmmIsTI3U/i g5CvMdog0gxKrT1SFMTq9VAJPv0JIhl/FCOn90fUbRBFI33z/3KZQo463jWRGpuz A1khLbu6973t9qOEOKrGtWYkaMaRnu5RG8w/A67ETeoHJcg91FrLOiE0pscTGxbl TRV64mUdDLHnCc//gyuMzOOcaY/wVZFmYndTHd1pyCH8UfEdf4b3kZzMbFLxEdTX DwD/C8qpCGmOGUrxQqV3ebyP6i8q0J27x+dz7FPCZ0817EuxgDYgHhUeKAHFAgMB AAGjggKTMIICjzAdBgNVHQ4EFgQUv1q600WfpDbxcOe6wm5Tq7UJSwgwHwYDVR0j BBgwFoAUmI6SLi6/+6gEaMFw8LBTyQ/RYOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm dXEvMS85ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OEU5MjJFMkVCRkZCQTgw NDY4QzE3MEYwQjA1M0M5MEZEMTYwRTQuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DUld4 d3FqOUtrQ1VqVXJRYTYxYzhabzFESG1IbXBUa1Q5blVmamFmUWZ1cS8xL0FTMjg1 OTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZYGCCsGAQUFBwEHAQH/ BIGGMIGDMHIEAgABMGwDBAItB2gDBAItpeQDBAItrHwDBAIts+ADBAIt5dQDBAKK O+QDBAKKelADBAKn+ogDBAKqTgQDBAKqUQQDBASxaHADBAKxvtADBAK7XggDBAS7 buADBAS7eDADBAS/NOADBAbJFEADBALJlHgwDQQCAAIwBwMFACgEAkgwDQYJKoZI hvcNAQELBQADggEBAHWTO9NoOIHYyhhqFE4YwpznpoG9b3zG6765mwne4l0V587m hjDd49ip01ddegp92dHSBqn4rGAHCqOTzmmrygG6D0DXCXsswqOd8o1HFUX1Qz8K yfZ8ICkT1hchacadZogjJYXrOtEa45Kr3XcCoZt8ex8GDeHc9iqmty2jE8n34uyN yP2O5dECOGUlJBKE57e4StK8sevwA4QVx1kTsoKyIA6Gb6gzqN33yAJm8cqEIdiM 6jBdveRLY/lf4JojS91Jyc6PVxVadycgSJu4unf50WmJACyX0OM6unXhkII9Zpxa UzS9TtsRh0rnHPylLd7aLldY5HbVI1Vk2S4jHB4= -----END CERTIFICATE-----Generated at Sun Nov 1 14:07:11 2026 by rpki-client