$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28338.roa File: AS28338.roa (raw, json) Hash identifier: K4QyTmrfc2Z3I/HaX7MsE6XpYI8G6Z2kDHZgQ70oM6w= Subject key identifier: 0C:F8:48:D8:DE:46:FD:BD:A9:AD:F2:7B:BA:00:81:2A:B0:89:2E:99 Certificate issuer: /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0 Certificate serial: 1F37BAF7AA9543481EF3590A02E65E548D14B510 Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28338.roa Signing time: Tue 21 Jul 2026 13:25:33 +0000 ROA not before: Tue 21 Jul 2026 13:20:33 +0000 ROA not after: Tue 20 Jul 2027 13:25:33 +0000 asID: 28338 IP address blocks: 177.87.24.0/24 maxlen: 24 177.87.25.0/24 maxlen: 24 177.87.26.0/24 maxlen: 24 189.45.0.0/20 maxlen: 20 189.45.0.0/24 maxlen: 24 189.45.3.0/24 maxlen: 24 189.45.5.0/24 maxlen: 24 189.45.8.0/24 maxlen: 24 189.45.10.0/24 maxlen: 24 189.45.11.0/24 maxlen: 24 189.45.12.0/24 maxlen: 24 189.45.13.0/24 maxlen: 24 189.45.14.0/24 maxlen: 24 189.84.224.0/24 maxlen: 24 189.84.225.0/24 maxlen: 24 189.84.230.0/24 maxlen: 24 189.84.232.0/24 maxlen: 24 189.84.233.0/24 maxlen: 24 189.84.234.0/24 maxlen: 24 189.84.235.0/24 maxlen: 24 189.84.236.0/24 maxlen: 24 189.84.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 21:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:37:ba:f7:aa:95:43:48:1e:f3:59:0a:02:e6:5e:54:8d:14:b5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0 Validity Not Before: Jul 21 13:20:33 2026 GMT Not After : Jul 20 13:25:33 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:f3:56:b1:04:75:34:80:ca:dd:cf:37:f2: 8b:ac:5d:a0:11:6b:9b:9b:c1:3f:54:78:74:46:d1: 67:29:fe:e2:5c:75:81:a0:91:54:5f:3b:80:44:eb: be:c2:84:51:84:12:17:98:20:db:6c:5d:f3:a3:92: 60:cc:f6:99:17:5f:0b:cf:b7:83:07:18:ea:40:8b: 3c:e2:64:f8:79:f2:11:bd:39:01:2e:56:22:6f:33: 6b:c2:6c:9e:b4:ae:42:37:4f:4f:67:ef:40:30:1c: 7e:25:8a:c9:69:ee:57:c0:95:8f:ec:d2:dc:13:79: ee:a3:c3:6a:f8:2b:ac:77:78:b7:f1:cf:d5:a4:ad: e8:36:ac:00:0e:d3:cb:1a:c2:ce:73:c8:14:d2:f1: b9:74:ab:27:fd:2c:56:0e:ef:d0:5a:54:16:70:40: d6:49:86:aa:bf:d9:55:d5:a0:0f:1d:eb:d1:f0:8e: f2:db:d3:99:f8:90:18:d2:22:5e:14:a9:df:97:59: 5b:2a:d5:1c:bd:dd:f0:cd:78:1a:8a:c4:ca:04:09: 6e:cf:be:bc:8a:30:f1:dd:46:9e:46:66:cb:72:69: a9:eb:99:31:a4:30:96:7f:c5:d0:f8:4c:93:20:27: 71:91:ea:49:24:a3:4b:10:fc:67:b9:6a:2c:18:17: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F8:48:D8:DE:46:FD:BD:A9:AD:F2:7B:BA:00:81:2A:B0:89:2E:99 X509v3 Authority Key Identifier: keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.24.0-177.87.26.255 189.45.0.0/20 189.84.224.0/23 189.84.230.0/24 189.84.232.0-189.84.236.255 189.84.239.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ab:38:a1:1c:e6:87:d8:1f:1c:20:3b:b5:62:5b:cd:03:ca: ce:06:3e:c9:97:a6:f9:93:07:16:5a:54:fb:28:ff:3b:c7:20: 89:97:b7:4b:db:86:64:39:72:67:f9:6a:ad:f3:84:96:d3:5e: a8:29:81:1f:20:45:87:b2:e8:28:98:5b:e3:43:9d:82:e1:9f: 3d:4f:4e:10:06:62:9b:de:e8:02:c8:be:da:82:f6:25:3b:0d: 0e:6c:b9:ad:48:42:e5:e2:45:fd:1f:05:37:b4:cd:06:7f:36: 80:c9:4f:e6:d2:64:63:f2:87:d6:dc:f4:1c:e8:29:aa:98:57: 0a:7d:14:a7:a1:7e:1e:b6:e5:1a:d3:27:9f:69:ba:22:5b:28: 84:50:bb:80:8b:67:20:70:ec:fe:ad:f8:bb:b9:46:c6:18:bd: 77:7e:63:99:f8:68:65:44:d0:50:ce:d1:42:d0:a7:fa:3a:1e: 4f:78:67:84:8b:c4:f0:e0:f6:bd:4c:f0:5a:57:8c:f6:74:cd: d5:6d:6b:7f:b3:9d:f7:3b:d3:c3:56:20:aa:a3:7b:0d:88:69: 86:d8:b1:d1:d5:b3:31:bf:47:d1:7b:88:97:2a:32:73:3e:0e: 34:34:c1:3b:b8:1b:e8:60:e9:2d:b7:da:22:2d:8a:45:2b:db: 2c:8a:d2:6e -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUHze696qVQ0ge81kKAuZeVI0UtRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy REMzNzlGMDAeFw0yNjA3MjExMzIwMzNaFw0yNzA3MjAxMzI1MzNaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDU5QUYzNTZCMTA0NzUzNDgw Q0FERENGMzdGMjhCQUM1REEwMTE2QjlCOUJDMTNGNTQ3ODc0NDZEMTY3MjlGRUUy NUM3NTgxQTA5MTU0NUYzQjgwNDRFQkJFQzI4NDUxODQxMjE3OTgyMERCNkM1REYz QTM5MjYwQ0NGNjk5MTc1RjBCQ0ZCNzgzMDcxOEVBNDA4QjNDRTI2NEY4NzlGMjEx QkQzOTAxMkU1NjIyNkYzMzZCQzI2QzlFQjRBRTQyMzc0RjRGNjdFRjQwMzAxQzdF MjU4QUM5NjlFRTU3QzA5NThGRUNEMkRDMTM3OUVFQTNDMzZBRjgyQkFDNzc3OEI3 RjFDRkQ1QTRBREU4MzZBQzAwMEVEM0NCMUFDMkNFNzNDODE0RDJGMUI5NzRBQjI3 RkQyQzU2MEVFRkQwNUE1NDE2NzA0MEQ2NDk4NkFBQkZEOTU1RDVBMDBGMURFQkQx RjA4RUYyREJEMzk5Rjg5MDE4RDIyMjVFMTRBOURGOTc1OTVCMkFENTFDQkREREYw Q0Q3ODFBOEFDNENBMDQwOTZFQ0ZCRUJDOEEzMEYxREQ0NjlFNDY2NkNCNzI2OUE5 RUI5OTMxQTQzMDk2N0ZDNUQwRjg0QzkzMjAyNzcxOTFFQTQ5MjRBMzRCMTBGQzY3 Qjk2QTJDMTgxN0I5MUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA1ZrzVrEEdTSAyt3PN/KLrF2gEWubm8E/VHh0RtFnKf7iXHWBoJFU XzuAROu+woRRhBIXmCDbbF3zo5JgzPaZF18Lz7eDBxjqQIs84mT4efIRvTkBLlYi bzNrwmyetK5CN09PZ+9AMBx+JYrJae5XwJWP7NLcE3nuo8Nq+Cusd3i38c/VpK3o NqwADtPLGsLOc8gU0vG5dKsn/SxWDu/QWlQWcEDWSYaqv9lV1aAPHevR8I7y29OZ +JAY0iJeFKnfl1lbKtUcvd3wzXgaisTKBAluz768ijDx3UaeRmbLcmmp65kxpDCW f8XQ+EyTICdxkepJJKNLEPxnuWosGBe5HwIDAQABo4ICSTCCAkUwHQYDVR0OBBYE FAz4SNjeRv29qa3ye7oAgSqwiS6ZMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0 TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1 Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3 OUYwLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnl5OXQ3YkFhWTFTUnRNamprWHdVTW5F Y3hZdWVxNjVkWjlMYVYxTkQyeUEvMS9BUzI4MzM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAOxVxgD BACxVxoDBAS9LQADBAG9VOADBAC9VOYwDAMEA71U6AMEAL1U7AMEAL1U7zANBgkq hkiG9w0BAQsFAAOCAQEAfqs4oRzmh9gfHCA7tWJbzQPKzgY+yZem+ZMHFlpU+yj/ O8cgiZe3S9uGZDlyZ/lqrfOEltNeqCmBHyBFh7LoKJhb40OdguGfPU9OEAZim97o Asi+2oL2JTsNDmy5rUhC5eJF/R8FN7TNBn82gMlP5tJkY/KH1tz0HOgpqphXCn0U p6F+HrblGtMnn2m6IlsohFC7gItnIHDs/q34u7lGxhi9d35jmfhoZUTQUM7RQtCn +joeT3hnhIvE8OD2vUzwWleM9nTN1W1rf7Od9zvTw1YgqqN7DYhphtix0dWzMb9H 0XuIlyoycz4ONDTBO7gb6GDpLbfaIi2KRSvbLIrSbg== -----END CERTIFICATE-----Generated at Sat Jul 25 00:01:26 2026 by rpki-client