$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28338.roa File: AS28338.roa (raw, json) Hash identifier: /NWf5UVMJGCCUm/Cuk3ZD31mOx14A2i3ziQJ640xqh8= Subject key identifier: 60:88:AB:B3:E5:DA:0B:20:22:35:D0:82:1B:0E:A7:2A:55:FD:35:76 Certificate issuer: /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0 Certificate serial: 3D0A86A91DA8AA0C7746B4FB211BC16DCAF3AE68 Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28338.roa Signing time: Tue 02 Jun 2026 22:14:08 +0000 ROA not before: Tue 02 Jun 2026 22:09:08 +0000 ROA not after: Tue 01 Jun 2027 22:14:08 +0000 asID: 28338 IP address blocks: 177.87.24.0/24 maxlen: 24 177.87.25.0/24 maxlen: 24 177.87.26.0/24 maxlen: 24 189.45.0.0/20 maxlen: 20 189.45.0.0/24 maxlen: 24 189.45.3.0/24 maxlen: 24 189.45.5.0/24 maxlen: 24 189.45.8.0/24 maxlen: 24 189.45.10.0/24 maxlen: 24 189.45.11.0/24 maxlen: 24 189.45.12.0/24 maxlen: 24 189.45.13.0/24 maxlen: 24 189.45.14.0/24 maxlen: 24 189.84.224.0/24 maxlen: 24 189.84.230.0/24 maxlen: 24 189.84.232.0/24 maxlen: 24 189.84.233.0/24 maxlen: 24 189.84.234.0/24 maxlen: 24 189.84.235.0/24 maxlen: 24 189.84.236.0/24 maxlen: 24 189.84.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 14:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:86:a9:1d:a8:aa:0c:77:46:b4:fb:21:1b:c1:6d:ca:f3:ae:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0 Validity Not Before: Jun 2 22:09:08 2026 GMT Not After : Jun 1 22:14:08 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:c3:c2:5f:cf:81:0a:f7:9e:7a:8b:b9:ab: b6:eb:8d:a1:6c:13:81:df:22:e3:9a:bf:97:0e:28: 52:14:39:8d:73:a1:aa:82:32:ce:fa:cb:ad:d0:e8: 2d:38:1b:f3:d7:d2:a4:44:4c:1c:f7:41:00:62:3a: 15:4a:d4:b8:93:d8:49:69:d9:97:38:74:f1:6f:72: d6:a6:09:00:3b:71:71:3b:ff:fa:ac:23:91:76:ef: fc:8f:c5:89:3c:02:a8:a2:21:5c:68:dd:be:a8:3e: 7e:ee:cc:f2:01:16:ec:b3:be:fd:2d:10:0a:42:28: de:5f:ab:55:47:78:e8:50:09:97:1e:1a:78:e7:ec: 18:52:a1:d1:4f:ba:55:2e:27:24:6f:6e:fb:22:7a: 30:ab:4c:e0:e5:a4:fc:7a:2e:08:e1:c2:ef:7f:97: 72:30:18:2c:e0:f3:60:92:98:e0:4c:02:31:fc:44: e6:07:99:f8:0c:5b:95:57:c2:cb:a4:c9:0f:0b:df: fc:c1:38:8a:44:2d:a9:86:15:54:43:db:d1:8c:b3: f7:01:04:7f:8b:f9:de:1f:26:b0:47:ee:ea:6d:d8: 61:9e:6d:c1:01:60:f3:35:f2:be:0a:25:83:17:6a: 65:7d:6e:22:1e:86:be:af:38:e0:4a:c3:3b:5d:24: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:AB:B3:E5:DA:0B:20:22:35:D0:82:1B:0E:A7:2A:55:FD:35:76 X509v3 Authority Key Identifier: keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS28338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.24.0-177.87.26.255 189.45.0.0/20 189.84.224.0/24 189.84.230.0/24 189.84.232.0-189.84.236.255 189.84.239.0/24 Signature Algorithm: sha256WithRSAEncryption 18:ca:e5:68:fc:7f:60:65:9e:51:61:ba:d9:da:90:24:8e:09: 8b:f6:61:35:f9:97:96:9c:b8:9c:90:a0:be:f7:0c:41:98:2e: 5f:e7:1e:67:65:b5:42:2b:9c:31:8f:af:23:70:7c:03:3c:aa: 72:18:c4:3d:e0:06:24:7b:13:19:7f:15:91:e2:84:5d:77:7f: 46:71:d2:d2:d6:61:99:76:9c:18:d7:45:6f:3e:04:14:a1:63: 45:f2:97:83:92:c7:4f:94:5f:4c:7d:f6:7b:f3:c5:45:c2:20: 6f:b8:f9:8a:dc:f4:c1:6e:ed:a8:1c:58:58:1e:18:71:b3:e1: 1d:92:bf:d5:63:2e:4f:2b:38:c3:0a:c2:66:bb:ee:fe:0d:00: a3:65:ed:95:a1:53:35:d7:dd:a2:d6:0e:e1:95:23:74:6a:8e: 66:4f:ac:7b:42:29:3b:4e:0d:98:e5:0e:20:23:7b:e2:9c:ad: a9:1c:80:dc:5c:04:02:be:4b:7b:d9:df:9e:b0:59:f9:93:dd: 14:da:57:4e:1a:bf:e7:4f:92:51:56:56:bd:ae:d2:c9:c4:b3: 78:98:c6:48:91:b5:6c:0d:8f:4b:0e:6a:97:99:43:71:63:ce: 52:dd:48:16:6e:6f:88:45:05:d0:50:c1:8a:50:6f:63:ee:c1: 34:3c:2c:ca -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUPQqGqR2oqgx3RrT7IRvBbcrzrmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy REMzNzlGMDAeFw0yNjA2MDIyMjA5MDhaFw0yNzA2MDEyMjE0MDhaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTkxMkMzQzI1RkNGODEwQUY3 OUU3QThCQjlBQkI2RUI4REExNkMxMzgxREYyMkUzOUFCRjk3MEUyODUyMTQzOThE NzNBMUFBODIzMkNFRkFDQkFERDBFODJEMzgxQkYzRDdEMkE0NDQ0QzFDRjc0MTAw NjIzQTE1NEFENEI4OTNEODQ5NjlEOTk3Mzg3NEYxNkY3MkQ2QTYwOTAwM0I3MTcx M0JGRkZBQUMyMzkxNzZFRkZDOEZDNTg5M0MwMkE4QTIyMTVDNjhEREJFQTgzRTdF RUVDQ0YyMDExNkVDQjNCRUZEMkQxMDBBNDIyOERFNUZBQjU1NDc3OEU4NTAwOTk3 MUUxQTc4RTdFQzE4NTJBMUQxNEZCQTU1MkUyNzI0NkY2RUZCMjI3QTMwQUI0Q0Uw RTVBNEZDN0EyRTA4RTFDMkVGN0Y5NzcyMzAxODJDRTBGMzYwOTI5OEUwNEMwMjMx RkM0NEU2MDc5OUY4MEM1Qjk1NTdDMkNCQTRDOTBGMEJERkZDQzEzODhBNDQyREE5 ODYxNTU0NDNEQkQxOENCM0Y3MDEwNDdGOEJGOURFMUYyNkIwNDdFRUVBNkREODYx OUU2REMxMDE2MEYzMzVGMkJFMEEyNTgzMTc2QTY1N0Q2RTIyMUU4NkJFQUYzOEUw NEFDMzNCNUQyNEM2NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAmRLDwl/PgQr3nnqLuau2642hbBOB3yLjmr+XDihSFDmNc6GqgjLO +sut0OgtOBvz19KkREwc90EAYjoVStS4k9hJadmXOHTxb3LWpgkAO3FxO//6rCOR du/8j8WJPAKooiFcaN2+qD5+7szyARbss779LRAKQijeX6tVR3joUAmXHhp45+wY UqHRT7pVLickb277Inowq0zg5aT8ei4I4cLvf5dyMBgs4PNgkpjgTAIx/ETmB5n4 DFuVV8LLpMkPC9/8wTiKRC2phhVUQ9vRjLP3AQR/i/neHyawR+7qbdhhnm3BAWDz NfK+CiWDF2plfW4iHoa+rzjgSsM7XSTGcQIDAQABo4ICSTCCAkUwHQYDVR0OBBYE FGCIq7Pl2gsgIjXQghsOpypV/TV2MB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0 TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1 Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3 OUYwLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnl5OXQ3YkFhWTFTUnRNamprWHdVTW5F Y3hZdWVxNjVkWjlMYVYxTkQyeUEvMS9BUzI4MzM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAOxVxgD BACxVxoDBAS9LQADBAC9VOADBAC9VOYwDAMEA71U6AMEAL1U7AMEAL1U7zANBgkq hkiG9w0BAQsFAAOCAQEAGMrlaPx/YGWeUWG62dqQJI4Ji/ZhNfmXlpy4nJCgvvcM QZguX+ceZ2W1QiucMY+vI3B8AzyqchjEPeAGJHsTGX8VkeKEXXd/RnHS0tZhmXac GNdFbz4EFKFjRfKXg5LHT5RfTH32e/PFRcIgb7j5itz0wW7tqBxYWB4YcbPhHZK/ 1WMuTys4wwrCZrvu/g0Ao2XtlaFTNdfdotYO4ZUjdGqOZk+se0IpO04NmOUOICN7 4pytqRyA3FwEAr5Le9nfnrBZ+ZPdFNpXThq/50+SUVZWva7SycSzeJjGSJG1bA2P Sw5ql5lDcWPOUt1IFm5viEUF0FDBilBvY+7BNDwsyg== -----END CERTIFICATE-----Generated at Sun Jun 14 06:18:49 2026 by rpki-client