$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7651A842E34BF1A427ECE613831D697900FC14F9.cer File: 7651A842E34BF1A427ECE613831D697900FC14F9.cer (raw, json) Hash identifier: Jj4fCyw8OyLJ6CaQdN3M5utaVQGMKZwl4pC3WxfS5Ys= Subject key identifier: 76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 679A5AC5AAD10AAF2E868932104EB2D39A35B311 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.mft caRepository: rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 14:58:16 +0000 Certificate not after: Tue 07 Jul 2026 15:03:16 +0000 Subordinate resources: AS: 267028 IP: 45.184.240.0/22 IP: 45.227.180.0/22 IP: 2804:470c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 04:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9a:5a:c5:aa:d1:0a:af:2e:86:89:32:10:4e:b2:d3:9a:35:b3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 14:58:16 2025 GMT Not After : Jul 7 15:03:16 2026 GMT Subject: CN=7651A842E34BF1A427ECE613831D697900FC14F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:58:9a:87:21:84:88:81:a5:9f:d4:83:7d: ad:8e:98:1d:9a:cc:da:53:03:5a:0a:6f:6d:69:d2: b8:9f:ad:be:28:57:aa:cc:73:00:c8:1e:da:65:b2: 65:08:48:89:51:bc:7f:83:dc:05:e2:aa:58:d5:7f: be:ce:5c:fe:1f:d1:25:42:8e:70:bc:6b:88:48:94: 42:98:01:7f:14:7b:7d:0a:65:86:ed:fc:ef:3a:1f: 71:a5:4b:81:8c:9d:74:43:2b:b2:25:94:24:46:e4: d6:fc:f3:32:99:b1:32:32:44:d5:67:1c:cb:2c:72: 78:a8:41:28:93:3e:99:48:04:26:2f:5b:63:b4:96: e6:07:dd:de:6a:c0:8b:3c:e1:66:38:d5:36:e6:09: 0b:d6:a1:5f:f4:94:b7:77:01:b8:23:a4:4b:e3:a3: 04:bd:27:01:c5:09:24:a7:f4:e1:1a:b2:ff:3c:2c: 3a:6c:5c:7a:db:6a:d7:4b:47:d8:03:68:70:40:bf: 0c:b7:2b:19:5c:c8:e9:40:50:e4:46:ab:8a:d4:83: 0b:db:7b:65:2b:22:9f:72:8f:3a:e6:a0:18:9b:a8: 5b:d9:20:f0:ab:15:2c:06:a5:09:3e:54:5d:60:47: 99:00:61:ee:0a:95:83:5c:e0:7a:1d:01:68:46:a4: 3e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:51:A8:42:E3:4B:F1:A4:27:EC:E6:13:83:1D:69:79:00:FC:14:F9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/1/7651A842E34BF1A427ECE613831D697900FC14F9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.184.240.0/22 45.227.180.0/22 IPv6: 2804:470c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267028 Signature Algorithm: sha256WithRSAEncryption 38:82:93:7d:4e:52:35:09:d0:ab:0d:f6:74:fa:cd:ea:5c:27: 46:3d:39:e8:1e:f7:8b:9c:7f:f1:8e:6f:b3:04:4d:7a:19:84: 24:4d:02:e1:94:77:28:e7:9d:1e:1b:68:f2:0a:f9:99:51:0a: 2c:98:31:fc:75:7e:53:58:99:18:78:9f:78:85:8a:73:7d:a7: 82:b8:11:5c:f8:9e:e6:3c:1a:61:84:03:01:7a:3a:48:57:56: df:c3:c6:e9:82:56:03:aa:00:2b:49:2c:b3:4c:0f:70:cf:ca: 60:95:e4:25:53:f4:15:6e:f6:1b:15:8e:b1:e9:4a:24:f5:57: ae:ff:b9:39:58:62:f7:0a:94:2f:49:54:46:f6:62:34:ca:bc: f3:2c:f8:ae:7e:e8:21:ba:22:4a:3c:65:1f:a7:16:7d:e0:1a: 52:0d:04:5a:76:1c:0e:f1:58:fa:ae:2c:74:86:86:84:cd:7f: 64:95:80:2a:0d:d7:c4:89:72:bf:c4:9f:5f:72:3b:fc:26:89: c2:5d:d4:3d:1a:e0:f8:57:18:0f:f6:e1:3a:d3:b8:6a:fd:4a: c8:b8:58:2a:ff:6a:6c:e8:99:f9:2c:89:80:a2:f5:b1:ea:f0: ab:91:71:26:a8:3b:c2:c1:1b:ab:de:8e:cd:43:73:2f:57:12: ec:58:e0:a4 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUZ5paxarRCq8uhokyEE6y05o1sxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDgxNDU4MTZaFw0yNjA3MDcxNTAzMTZaMDMxMTAvBgNV BAMTKDc2NTFBODQyRTM0QkYxQTQyN0VDRTYxMzgzMUQ2OTc5MDBGQzE0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+1iahyGEiIGln9SDfa2OmB2a zNpTA1oKb21p0rifrb4oV6rMcwDIHtplsmUISIlRvH+D3AXiqljVf77OXP4f0SVC jnC8a4hIlEKYAX8Ue30KZYbt/O86H3GlS4GMnXRDK7IllCRG5Nb88zKZsTIyRNVn HMsscnioQSiTPplIBCYvW2O0luYH3d5qwIs84WY41TbmCQvWoV/0lLd3AbgjpEvj owS9JwHFCSSn9OEasv88LDpsXHrbatdLR9gDaHBAvwy3KxlcyOlAUORGq4rUgwvb e2UrIp9yjzrmoBibqFvZIPCrFSwGpQk+VF1gR5kAYe4KlYNc4HodAWhGpD7NAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2UahC40vxpCfs 5hODHWl5APwU+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Zk amRtYXB0MkdSVnVhVG8xZGdYcUtGQk42aHNScXB3V1I1bXdFVGFzYUIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Zk amRtYXB0MkdSVnVhVG8xZGdYcUtGQk42aHNScXB3V1I1bXdFVGFzYUIvMS83NjUx QTg0MkUzNEJGMUE0MjdFQ0U2MTM4MzFENjk3OTAwRkMxNEY5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItuPADBAIt47QwDQQCAAIwBwMFACgERwwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBMUMA0GCSqGSIb3DQEBCwUAA4IBAQA4gpN9TlI1 CdCrDfZ0+s3qXCdGPTnoHveLnH/xjm+zBE16GYQkTQLhlHco550eG2jyCvmZUQos mDH8dX5TWJkYeJ94hYpzfaeCuBFc+J7mPBphhAMBejpIV1bfw8bpglYDqgArSSyz TA9wz8pgleQlU/QVbvYbFY6x6Uok9Veu/7k5WGL3CpQvSVRG9mI0yrzzLPiufugh uiJKPGUfpxZ94BpSDQRadhwO8Vj6rix0hoaEzX9klYAqDdfEiXK/xJ9fcjv8JonC XdQ9GuD4VxgP9uE607hq/UrIuFgq/2ps6Jn5LImAovWx6vCrkXEmqDvCwRur3o7N Q3MvVxLsWOCk -----END CERTIFICATE-----Generated at Sun Jul 27 09:29:40 2025 by rpki-client