$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS28598.roa File: AS28598.roa (raw, json) Hash identifier: 5bUkUQ1lO2Kxbzfv478MZl39vPmAGBW1yAixOETxjFk= Subject key identifier: CD:43:21:DF:23:9C:07:63:DA:7B:7F:1A:DC:18:16:C2:03:2F:31:65 Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Certificate serial: 0D5E425D71B247ADCC5E1FF0AC311B4D8DCF94BA Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS28598.roa Signing time: Wed 02 Sep 2026 14:38:27 +0000 ROA not before: Wed 02 Sep 2026 14:33:27 +0000 ROA not after: Wed 01 Sep 2027 14:38:27 +0000 asID: 28598 IP address blocks: 45.7.104.0/22 maxlen: 22 45.7.104.0/23 maxlen: 23 45.165.228.0/22 maxlen: 24 45.172.124.0/22 maxlen: 22 45.172.124.0/23 maxlen: 23 45.172.124.0/24 maxlen: 24 45.172.125.0/24 maxlen: 24 45.172.126.0/23 maxlen: 23 45.172.126.0/24 maxlen: 24 45.179.224.0/22 maxlen: 22 45.179.224.0/23 maxlen: 24 45.179.226.0/23 maxlen: 24 45.229.212.0/22 maxlen: 22 45.229.212.0/23 maxlen: 23 45.229.214.0/23 maxlen: 23 138.59.228.0/22 maxlen: 22 138.59.228.0/23 maxlen: 23 138.59.230.0/23 maxlen: 23 138.122.80.0/22 maxlen: 22 138.122.80.0/23 maxlen: 23 138.122.82.0/23 maxlen: 23 167.250.136.0/22 maxlen: 22 167.250.136.0/23 maxlen: 23 167.250.138.0/23 maxlen: 23 167.250.139.0/24 maxlen: 24 170.78.4.0/22 maxlen: 22 170.78.4.0/23 maxlen: 23 170.78.6.0/23 maxlen: 23 170.81.4.0/22 maxlen: 22 170.81.4.0/23 maxlen: 23 170.81.6.0/23 maxlen: 23 177.104.112.0/20 maxlen: 20 177.104.112.0/21 maxlen: 21 177.104.120.0/21 maxlen: 21 177.104.124.0/24 maxlen: 24 177.190.208.0/22 maxlen: 22 177.190.208.0/23 maxlen: 23 177.190.210.0/23 maxlen: 23 187.94.8.0/22 maxlen: 22 187.94.8.0/23 maxlen: 23 187.94.10.0/23 maxlen: 23 187.110.224.0/20 maxlen: 20 187.110.224.0/21 maxlen: 21 187.110.224.0/23 maxlen: 23 187.110.226.0/23 maxlen: 23 187.110.228.0/23 maxlen: 23 187.110.230.0/23 maxlen: 23 187.110.232.0/21 maxlen: 21 187.110.232.0/22 maxlen: 22 187.110.232.0/23 maxlen: 23 187.110.236.0/22 maxlen: 22 187.110.238.0/23 maxlen: 23 187.120.48.0/20 maxlen: 20 187.120.48.0/21 maxlen: 21 191.52.224.0/20 maxlen: 20 201.20.64.0/18 maxlen: 18 201.20.64.0/19 maxlen: 19 201.20.64.0/20 maxlen: 20 201.20.64.0/21 maxlen: 21 201.20.64.0/23 maxlen: 23 201.20.71.0/24 maxlen: 24 201.20.72.0/21 maxlen: 21 201.20.80.0/20 maxlen: 20 201.20.80.0/21 maxlen: 21 201.20.87.0/24 maxlen: 24 201.20.94.0/24 maxlen: 24 201.20.96.0/19 maxlen: 19 201.20.96.0/20 maxlen: 20 201.20.96.0/21 maxlen: 21 201.20.96.0/23 maxlen: 23 201.20.104.0/23 maxlen: 23 201.20.112.0/20 maxlen: 20 201.20.116.0/23 maxlen: 23 201.20.117.0/24 maxlen: 24 201.20.119.0/24 maxlen: 24 201.20.120.0/21 maxlen: 21 201.20.126.0/24 maxlen: 24 201.148.120.0/22 maxlen: 22 201.148.120.0/23 maxlen: 23 201.148.122.0/23 maxlen: 23 2804:248::/32 maxlen: 32 2804:248::/34 maxlen: 34 2804:248::/48 maxlen: 48 2804:248:2::/48 maxlen: 48 2804:248:4::/48 maxlen: 48 2804:248:8::/48 maxlen: 48 2804:248:100::/40 maxlen: 40 2804:248:800::/39 maxlen: 39 2804:248:3000::/40 maxlen: 40 2804:248:4000::/34 maxlen: 34 2804:248:4002::/48 maxlen: 48 2804:248:4004::/48 maxlen: 48 2804:248:4007::/48 maxlen: 48 2804:248:8000::/34 maxlen: 34 2804:248:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 20:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5e:42:5d:71:b2:47:ad:cc:5e:1f:f0:ac:31:1b:4d:8d:cf:94:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Validity Not Before: Sep 2 14:33:27 2026 GMT Not After : Sep 1 14:38:27 2027 GMT Subject: CN=CD4321DF239C0763DA7B7F1ADC1816C2032F3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:bc:62:d4:4e:c6:71:c2:e7:3f:7e:00:31: 8d:f8:bb:65:f8:d5:58:9d:4a:d4:64:ac:9d:a2:65: 13:1f:f4:b3:7d:c3:4e:a8:5e:50:cb:57:2e:c1:86: 1e:be:a9:c0:9c:71:e3:bc:2f:9a:09:90:2d:d4:9e: 1b:90:73:6c:97:24:f3:7e:b6:d6:79:6b:0d:43:c1: e8:9d:f0:12:77:4f:0a:3b:07:3d:86:43:81:73:67: 7c:b2:4d:32:f8:58:96:00:7f:cc:86:fc:df:06:b7: 5c:0d:38:70:79:ba:4a:e6:18:7e:29:9f:bf:18:8c: 14:6d:cc:f3:18:2d:28:49:25:38:56:bd:e7:b5:1a: 00:2b:c5:44:41:a0:c9:99:b5:d5:ee:78:13:e4:ab: 1d:e8:d7:17:9a:1e:8c:da:7b:3f:0b:36:53:96:f9: 94:de:45:3b:f3:27:ad:1a:c8:6b:3a:f6:ab:94:e8: c7:81:30:8b:ca:f2:a4:8c:f5:bf:28:cb:2d:be:9b: f5:40:ec:27:fd:7e:86:78:ad:fa:12:ba:52:66:56: ae:75:1a:2a:a4:e1:a2:81:a4:ee:c9:1a:5c:05:63: 23:f7:22:2e:a9:e8:02:b8:8d:28:45:68:5a:fe:7a: 03:c8:f8:85:4e:5b:10:44:a2:40:cd:da:38:34:bf: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:21:DF:23:9C:07:63:DA:7B:7F:1A:DC:18:16:C2:03:2F:31:65 X509v3 Authority Key Identifier: keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS28598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.104.0/22 45.165.228.0/22 45.172.124.0/22 45.179.224.0/22 45.229.212.0/22 138.59.228.0/22 138.122.80.0/22 167.250.136.0/22 170.78.4.0/22 170.81.4.0/22 177.104.112.0/20 177.190.208.0/22 187.94.8.0/22 187.110.224.0/20 187.120.48.0/20 191.52.224.0/20 201.20.64.0/18 201.148.120.0/22 IPv6: 2804:248::/32 Signature Algorithm: sha256WithRSAEncryption 4c:2a:dd:30:f8:a6:5c:87:ee:db:b9:4d:ed:87:c3:ca:2d:47: 9f:3a:34:86:6a:7d:54:69:13:91:70:c6:6b:b8:c8:e5:43:a5: 96:1c:d9:41:7a:e5:0d:24:09:43:61:de:c2:c8:6f:da:3d:9b: d5:66:99:a6:a0:60:95:6f:e0:79:22:2e:6f:ad:6a:ee:e6:5e: 82:8f:1c:79:5d:72:c7:3a:34:65:0c:31:d9:93:3d:7c:da:e7: da:e7:9d:53:05:3f:6e:4e:9e:b3:26:b5:d4:98:19:b6:a1:79: 65:f2:54:d0:f4:ec:d5:a6:d7:17:41:d4:7a:39:13:fd:2e:0e: 45:b5:6b:71:8a:64:58:e2:94:93:70:22:f0:d3:58:71:a9:2c: fe:f1:c2:dc:57:7a:ca:2a:38:9d:27:1a:12:42:bd:2e:fc:0b: 2a:cb:b5:14:63:57:79:a3:ad:7b:4d:ce:dc:89:c0:77:57:e6: d4:82:f6:08:0a:52:ab:ac:2d:d2:39:41:5d:61:d2:4f:f8:71: 76:47:7d:bc:a3:b9:32:58:be:c2:d0:3f:a7:3f:92:6f:29:58: 50:8e:5e:c5:e4:3d:38:ee:21:46:52:d5:ab:43:46:d4:79:db: d5:c6:fd:a6:b3:70:9c:9c:98:d1:7d:b9:af:3d:d2:c6:93:3c: 92:32:26:b3 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUDV5CXXGyR63MXh/wrDEbTY3PlLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTkyMkUyRUJGRkJBODA0NjhDMTcwRjBCMDUzQzkw RkQxNjBFNDAeFw0yNjA5MDIxNDMzMjdaFw0yNzA5MDExNDM4MjdaMDMxMTAvBgNV BAMTKENENDMyMURGMjM5QzA3NjNEQTdCN0YxQURDMTgxNkMyMDMyRjMxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHp7xi1E7GccLnP34AMY34u2X4 1VidStRkrJ2iZRMf9LN9w06oXlDLVy7Bhh6+qcCcceO8L5oJkC3UnhuQc2yXJPN+ ttZ5aw1Dweid8BJ3Two7Bz2GQ4FzZ3yyTTL4WJYAf8yG/N8Gt1wNOHB5ukrmGH4p n78YjBRtzPMYLShJJThWvee1GgArxURBoMmZtdXueBPkqx3o1xeaHozaez8LNlOW +ZTeRTvzJ60ayGs69quU6MeBMIvK8qSM9b8oyy2+m/VA7Cf9foZ4rfoSulJmVq51 Giqk4aKBpO7JGlwFYyP3Ii6p6AK4jShFaFr+egPI+IVOWxBEokDN2jg0v7nHAgMB AAGjggKTMIICjzAdBgNVHQ4EFgQUzUMh3yOcB2Pae38a3BgWwgMvMWUwHwYDVR0j BBgwFoAUmI6SLi6/+6gEaMFw8LBTyQ/RYOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm dXEvMS85ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OEU5MjJFMkVCRkZCQTgw NDY4QzE3MEYwQjA1M0M5MEZEMTYwRTQuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DUld4 d3FqOUtrQ1VqVXJRYTYxYzhabzFESG1IbXBUa1Q5blVmamFmUWZ1cS8xL0FTMjg1 OTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZYGCCsGAQUFBwEHAQH/ BIGGMIGDMHIEAgABMGwDBAItB2gDBAItpeQDBAItrHwDBAIts+ADBAIt5dQDBAKK O+QDBAKKelADBAKn+ogDBAKqTgQDBAKqUQQDBASxaHADBAKxvtADBAK7XggDBAS7 buADBAS7eDADBAS/NOADBAbJFEADBALJlHgwDQQCAAIwBwMFACgEAkgwDQYJKoZI hvcNAQELBQADggEBAEwq3TD4plyH7tu5Te2Hw8otR586NIZqfVRpE5Fwxmu4yOVD pZYc2UF65Q0kCUNh3sLIb9o9m9VmmaagYJVv4HkiLm+tau7mXoKPHHldcsc6NGUM MdmTPXza59rnnVMFP25OnrMmtdSYGbaheWXyVND07NWm1xdB1Ho5E/0uDkW1a3GK ZFjilJNwIvDTWHGpLP7xwtxXesoqOJ0nGhJCvS78CyrLtRRjV3mjrXtNztyJwHdX 5tSC9ggKUqusLdI5QV1h0k/4cXZHfbyjuTJYvsLQP6c/km8pWFCOXsXkPTjuIUZS 1atDRtR529XG/aazcJycmNF9ua890saTPJIyJrM= -----END CERTIFICATE-----Generated at Sat Sep 5 06:58:44 2026 by rpki-client