$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer File: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer (raw, json) Hash identifier: XMYoYXmqV/Ts9qn0PsKXAGd2FKvqqPzCDtBv857Fda0= Subject key identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 797D7B56EE8AA7798ED882AED8FE8F11E48B0E18 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft caRepository: rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Jul 2025 23:47:11 +0000 Certificate not after: Thu 09 Jul 2026 23:52:11 +0000 Subordinate resources: AS: 270647 IP: 189.36.136.0/22 IP: 2804:6f3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 15:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7d:7b:56:ee:8a:a7:79:8e:d8:82:ae:d8:fe:8f:11:e4:8b:0e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 10 23:47:11 2025 GMT Not After : Jul 9 23:52:11 2026 GMT Subject: CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:ca:a5:90:8c:34:0a:c5:bc:78:91:cc:a8: 02:a2:0b:61:ed:b6:ac:fd:db:22:6f:df:84:57:1d: 23:1b:36:58:8c:d3:98:4e:76:d7:20:c5:5a:a5:e6: 42:87:a4:7c:80:8e:69:ee:a9:a3:d5:62:d1:04:9e: 4a:96:aa:56:37:fa:28:0b:7f:dc:1a:d1:e6:4e:f1: 84:55:ec:16:f9:82:78:52:51:57:f8:3d:bd:ec:d4: 6c:16:8d:87:a4:21:89:76:05:af:9d:62:8e:94:93: da:0d:00:16:4b:dd:18:11:0c:4b:69:9b:05:10:8d: 88:83:28:b7:fa:1f:3d:34:26:a0:8a:1f:ae:f6:5c: 36:a1:8e:0d:fd:41:b4:ee:e6:23:72:e0:b6:7f:ef: 18:ae:f2:13:98:df:ce:b0:af:a0:72:06:c6:dc:3b: e5:d7:89:a7:7e:33:f2:2c:cd:d0:6c:07:96:33:4b: fb:1e:f8:69:72:97:bd:45:d8:ed:b3:f8:dc:ff:0a: 12:a3:5f:26:40:6b:91:29:1f:9e:e7:3b:8d:1d:3f: 5f:8e:5f:3a:14:94:a0:a0:4e:2e:48:8f:6b:54:12: 7b:23:08:ba:3e:f3:6d:65:93:5e:d9:a7:ee:f6:17: 7e:3b:ee:ee:2d:88:ee:42:c9:40:22:fb:31:1c:51: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.36.136.0/22 IPv6: 2804:6f3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270647 Signature Algorithm: sha256WithRSAEncryption cf:e9:96:10:4c:ea:d9:72:0b:71:bf:49:fa:56:db:c9:8d:4a: 56:6f:f9:72:9f:59:2b:45:15:1c:83:d0:0b:b6:f3:95:9f:3a: eb:10:71:04:6f:9b:9c:4a:5e:65:0f:a4:91:22:65:79:92:25: ef:fd:b7:d1:96:23:09:b2:84:a0:90:4e:f7:38:2e:70:00:e5: d4:61:0b:1e:78:a3:b8:2b:da:fb:6e:8e:b5:70:01:07:5a:0e: bd:ab:45:ff:0a:75:27:9d:15:d2:9a:fe:b4:b8:e2:d1:f1:40: 5d:8b:86:33:08:30:6d:8e:26:67:92:9c:18:46:0f:2b:eb:c8: 84:b2:26:fc:a9:f9:c5:30:51:c7:78:d2:a1:e6:79:3c:5a:57: 0d:1f:77:67:d5:19:b4:6b:b4:05:aa:f5:d2:f4:eb:ad:64:3b: 84:02:fa:80:30:d8:0e:04:51:4a:78:8e:fd:1d:c7:4c:0d:91: 02:ff:c3:3c:83:aa:15:c7:e9:63:b9:1a:67:15:61:b1:46:1d: c3:6b:e5:f8:ef:db:86:fc:eb:c0:c0:f3:88:29:ad:39:f0:c1: 6f:39:78:1b:33:96:2a:dc:cb:8c:78:2a:2b:08:0f:65:58:d5: 24:0c:9c:46:b9:26:20:b4:3f:a3:ad:e2:dc:4c:3b:d6:3d:6e: 8f:89:37:6e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUeX17Vu6Kp3mO2IKu2P6PEeSLDhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTAyMzQ3MTFaFw0yNjA3MDkyMzUyMTFaMDMxMTAvBgNV BAMTKDJCMEQ1NTZCRDE2REMyMzA0QjkyRDg4RDRERThBNzQ5RTIyREZBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCsqlkIw0CsW8eJHMqAKiC2Ht tqz92yJv34RXHSMbNliM05hOdtcgxVql5kKHpHyAjmnuqaPVYtEEnkqWqlY3+igL f9wa0eZO8YRV7Bb5gnhSUVf4Pb3s1GwWjYekIYl2Ba+dYo6Uk9oNABZL3RgRDEtp mwUQjYiDKLf6Hz00JqCKH672XDahjg39QbTu5iNy4LZ/7xiu8hOY386wr6ByBsbc O+XXiad+M/IszdBsB5YzS/se+Glyl71F2O2z+Nz/ChKjXyZAa5EpH57nO40dP1+O XzoUlKCgTi5Ij2tUEnsjCLo+821lk17Zp+72F3477u4tiO5CyUAi+zEcUUwVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrDVVr0W3CMEuS 2I1N6KdJ4i36HTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWtY UnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxtTWIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVr WFJyc1VqWlM0TGVjaTc0Y0szOGlwNFhuaXZxVUtjZndSNjJqdEFMbU1iLzAvMkIw RDU1NkJEMTZEQzIzMDRCOTJEODhENERFOEE3NDlFMjJERkExRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvSSIMA0EAgACMAcDBQAoBG88MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhNzANBgkqhkiG9w0BAQsFAAOCAQEAz+mWEEzq2XILcb9J +lbbyY1KVm/5cp9ZK0UVHIPQC7bzlZ866xBxBG+bnEpeZQ+kkSJleZIl7/230ZYj CbKEoJBO9zgucADl1GELHnijuCva+26OtXABB1oOvatF/wp1J50V0pr+tLji0fFA XYuGMwgwbY4mZ5KcGEYPK+vIhLIm/Kn5xTBRx3jSoeZ5PFpXDR93Z9UZtGu0Bar1 0vTrrWQ7hAL6gDDYDgRRSniO/R3HTA2RAv/DPIOqFcfpY7kaZxVhsUYdw2vl+O/b hvzrwMDziCmtOfDBbzl4GzOWKtzLjHgqKwgPZVjVJAycRrkmILQ/o63i3Ew71j1u j4k3bg== -----END CERTIFICATE-----Generated at Sat Jul 26 14:56:12 2025 by rpki-client