$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa File: AS28638.roa (raw, json) Hash identifier: Had80vKTy4bmueQNT3ikeqmr/P2zt1KeEJv6k0oc6aE= Subject key identifier: A9:E2:AE:8B:C9:08:74:A1:FE:69:43:15:4E:2C:61:E9:E6:68:34:0C Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Certificate serial: 156E289F3A5F0117691F6E7031ED8C844385BF5D Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa Signing time: Tue 31 Dec 2024 22:56:47 +0000 ROA not before: Tue 31 Dec 2024 22:51:47 +0000 ROA not after: Tue 30 Dec 2025 22:56:47 +0000 asID: 28638 IP address blocks: 138.118.160.0/22 maxlen: 24 186.209.216.0/22 maxlen: 24 2804:dcc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6e:28:9f:3a:5f:01:17:69:1f:6e:70:31:ed:8c:84:43:85:bf:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD Validity Not Before: Dec 31 22:51:47 2024 GMT Not After : Dec 30 22:56:47 2025 GMT Subject: CN=A9E2AE8BC90874A1FE6943154E2C61E9E668340C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8e:99:f7:e7:47:5d:28:5b:60:47:b9:e2:7f: de:4b:c4:20:e5:fb:be:4d:a6:eb:ba:fd:f2:ae:a4: ab:3a:d2:be:c2:4b:b8:a7:f0:f3:3f:19:3f:44:60: a6:a4:0c:1d:03:24:32:34:23:44:e1:f6:26:57:b3: 46:f9:30:d7:4e:a9:c1:01:93:16:7b:94:6b:bd:c5: 31:80:0a:ca:88:d2:f0:32:4c:2e:24:db:93:48:ae: 12:cd:4c:ef:06:aa:65:06:f6:3a:34:40:28:1d:d3: 34:dd:d6:eb:a5:38:8f:ca:96:1e:d9:ff:a7:ea:81: 10:f3:2c:75:17:8e:42:83:2e:91:91:9c:1a:95:9f: de:f0:89:8d:e7:4f:15:54:84:30:ec:ac:be:24:c6: 97:dc:8d:a4:a1:05:1c:ac:12:e8:a4:99:97:75:96: 24:87:28:2e:a1:7a:f4:cc:53:e0:42:0d:b3:f2:f8: bb:2d:3e:ef:e3:66:0e:c4:b6:c8:b0:5b:6d:a7:82: b6:00:9c:97:24:40:52:86:da:98:23:d3:85:7f:c6: b4:14:98:0e:c6:3d:91:9e:04:d0:29:7c:92:94:45: 83:a4:5d:6f:15:a2:5a:da:e8:c9:94:1a:e8:4a:5d: 70:64:59:38:bc:91:71:b1:10:a1:68:e0:16:4e:cc: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:AE:8B:C9:08:74:A1:FE:69:43:15:4E:2C:61:E9:E6:68:34:0C X509v3 Authority Key Identifier: keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.160.0/22 186.209.216.0/22 IPv6: 2804:dcc::/32 Signature Algorithm: sha256WithRSAEncryption 50:93:dc:5a:6a:59:47:76:31:92:a6:f5:a1:96:47:17:1c:d2: 79:c8:73:73:c4:16:39:73:2d:31:bb:a1:46:09:b2:1d:77:0c: 26:3e:0d:ce:5e:61:ae:5a:1f:0d:4b:a5:12:6b:39:e6:63:cf: c1:2e:b6:3f:85:c0:d3:c3:65:ca:81:9f:37:5d:10:89:7b:e5: fb:87:d6:88:bc:00:29:c2:79:67:76:b3:65:88:60:65:22:b6: ad:9e:af:d2:81:27:72:2b:ef:67:5f:70:f1:8c:97:02:65:df: ee:3e:21:e9:bf:de:fb:93:fd:4d:6c:25:46:5a:4e:be:d5:42: 5a:e0:b3:42:e5:81:f2:64:1a:a9:14:30:d1:d1:dd:b2:3f:24: 22:03:8c:30:f5:96:af:ee:44:94:b0:54:48:56:dd:b8:2d:e3: 54:70:9a:3f:60:6d:58:e3:88:06:c7:83:2d:32:be:60:ca:6a: 53:05:cd:aa:5d:9f:53:44:43:d0:8e:c9:dc:00:ca:57:c1:88: 50:77:43:44:cd:f6:09:05:2f:90:9b:f6:5c:e9:3d:fa:ab:d5: cd:ab:54:b3:05:25:ec:ff:d3:45:73:00:1b:61:2b:e8:ff:04: cc:81:91:9d:2f:fb:d8:9c:50:d8:b2:be:82:9e:36:de:94:81: d0:08:de:06 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUFW4onzpfARdpH25wMe2MhEOFv10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC OTYyN0JDRDAeFw0yNDEyMzEyMjUxNDdaFw0yNTEyMzAyMjU2NDdaMDMxMTAvBgNV BAMTKEE5RTJBRThCQzkwODc0QTFGRTY5NDMxNTRFMkM2MUU5RTY2ODM0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejpn350ddKFtgR7nif95LxCDl +75Npuu6/fKupKs60r7CS7in8PM/GT9EYKakDB0DJDI0I0Th9iZXs0b5MNdOqcEB kxZ7lGu9xTGACsqI0vAyTC4k25NIrhLNTO8GqmUG9jo0QCgd0zTd1uulOI/Klh7Z /6fqgRDzLHUXjkKDLpGRnBqVn97wiY3nTxVUhDDsrL4kxpfcjaShBRysEuikmZd1 liSHKC6hevTMU+BCDbPy+LstPu/jZg7EtsiwW22ngrYAnJckQFKG2pgj04V/xrQU mA7GPZGeBNApfJKURYOkXW8Volra6MmUGuhKXXBkWTi8kXGxEKFo4BZOzBa5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUqeKui8kIdKH+aUMVTixh6eZoNAwwHwYDVR0j BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0 MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTMjg2 Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAKKdqADBAK60dgwDQQCAAIwBwMFACgEDcwwDQYJKoZIhvcN AQELBQADggEBAFCT3FpqWUd2MZKm9aGWRxcc0nnIc3PEFjlzLTG7oUYJsh13DCY+ Dc5eYa5aHw1LpRJrOeZjz8Eutj+FwNPDZcqBnzddEIl75fuH1oi8ACnCeWd2s2WI YGUitq2er9KBJ3Ir72dfcPGMlwJl3+4+Iem/3vuT/U1sJUZaTr7VQlrgs0LlgfJk GqkUMNHR3bI/JCIDjDD1lq/uRJSwVEhW3bgt41Rwmj9gbVjjiAbHgy0yvmDKalMF zapdn1NEQ9COydwAylfBiFB3Q0TN9gkFL5Cb9lzpPfqr1c2rVLMFJez/00VzABth K+j/BMyBkZ0v+9icUNiyvoKeNt6UgdAI3gY= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:14 2025 by rpki-client on console.sobornost.net