$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer File: 89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer (raw, json) Hash identifier: 6c+IJQXvNqzCBz56Tp19WJlbV+t7K1Vx/CNAKd//dP8= Subject key identifier: 89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 085A073D9BC9044EF9C76D9B28584DBA241EBDDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft caRepository: rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Jul 2025 12:33:40 +0000 Certificate not after: Thu 09 Jul 2026 12:38:40 +0000 Subordinate resources: AS: 266005 IP: 181.191.120.0/22 IP: 2804:4120::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5a:07:3d:9b:c9:04:4e:f9:c7:6d:9b:28:58:4d:ba:24:1e:bd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 10 12:33:40 2025 GMT Not After : Jul 9 12:38:40 2026 GMT Subject: CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:45:c9:ae:63:6b:4d:3d:96:74:90:95:ab: d7:c8:a2:bd:0c:37:55:42:bf:19:ee:0f:18:82:5d: fd:09:6a:30:04:d9:42:fe:a4:95:86:46:22:71:a4: ba:78:1b:45:b0:3d:3c:42:09:ee:dc:cd:be:aa:03: be:d1:b7:ca:14:5b:77:6d:38:1e:8c:c7:8a:74:d6: f3:2b:1f:78:42:29:38:f6:33:89:52:74:bb:c9:2a: 03:59:e0:07:69:a2:7f:a6:fa:1b:43:1e:d9:94:97: b7:cb:19:d8:15:6a:d5:37:73:ed:a1:01:ba:5c:07: 19:30:c3:b3:32:2f:76:06:ba:a8:fb:57:87:19:f5: ee:28:b3:3e:b9:b8:fa:ec:d9:99:2d:a5:89:1b:28: 95:a6:31:b4:21:9c:d5:cd:13:d9:2c:9f:a7:1e:a2: 24:34:f8:c7:8c:33:03:93:5c:65:85:34:a7:21:65: dd:7a:fe:a4:d2:6f:9f:68:1a:07:15:a6:23:57:01: 36:f3:9a:bd:bc:30:7f:5b:64:7b:3f:2c:cf:c1:2e: 97:50:cb:54:36:42:0f:19:46:c4:01:66:c0:b9:75: 5d:00:f2:b9:51:53:20:ec:74:41:24:ad:c8:ab:06: f5:c4:cf:6d:bd:a5:a2:f9:34:e6:61:97:c4:c4:d6: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.191.120.0/22 IPv6: 2804:4120::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266005 Signature Algorithm: sha256WithRSAEncryption 36:f3:58:5d:7c:48:85:a8:f1:25:09:5d:d3:db:fb:34:9e:ad: 7a:b9:28:d9:30:e0:b3:a9:e9:af:41:51:9d:69:7f:bc:b6:40: 22:7c:91:d8:fc:8c:15:ef:06:a1:d6:5c:40:d1:a1:c6:91:3d: 7f:e2:60:bd:2e:c9:d7:49:68:18:09:95:0d:97:ce:cf:ee:e9: 89:bf:b8:57:ec:23:09:17:8b:c9:fe:f4:bc:db:c7:69:b7:14: 27:a1:1b:28:a1:8e:d7:35:f0:c1:8e:bc:3a:c0:4e:0d:ca:6d: ed:02:d4:76:91:5a:86:8c:b7:86:02:b7:5b:6a:e6:ff:61:0e: 98:b6:1e:26:63:ef:8b:81:34:c7:df:a7:b4:7c:7a:1c:5f:31: b4:e2:1b:60:5e:7f:11:08:ba:0e:f7:34:37:19:79:c7:d6:af: cb:be:50:9d:ec:a9:2b:2d:2e:18:ca:e7:9d:b8:da:a2:d3:e0: 16:1d:87:02:66:fb:dc:5f:e5:e1:b9:8a:e5:20:d8:5c:15:01: 6f:8e:05:db:0a:df:a0:42:31:97:6c:f2:d7:f5:6a:f8:8f:45: 42:bf:64:7f:7f:e8:a1:eb:b3:51:37:ea:fa:5c:3c:39:a3:9b: 4c:0c:00:87:7d:5a:b5:a9:52:f3:fe:13:e7:a9:1c:f4:93:49: b6:f9:18:b6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCFoHPZvJBE75x22bKFhNuiQevd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTAxMjMzNDBaFw0yNjA3MDkxMjM4NDBaMDMxMTAvBgNV BAMTKDg5NTA5NzY5RUI1OTVCQTI3RkM1QjgyMDhDRkIwRDA1QzM5RTJCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgV0XJrmNrTT2WdJCVq9fIor0M N1VCvxnuDxiCXf0JajAE2UL+pJWGRiJxpLp4G0WwPTxCCe7czb6qA77Rt8oUW3dt OB6Mx4p01vMrH3hCKTj2M4lSdLvJKgNZ4Adpon+m+htDHtmUl7fLGdgVatU3c+2h AbpcBxkww7MyL3YGuqj7V4cZ9e4osz65uPrs2ZktpYkbKJWmMbQhnNXNE9ksn6ce oiQ0+MeMMwOTXGWFNKchZd16/qTSb59oGgcVpiNXATbzmr28MH9bZHs/LM/BLpdQ y1Q2Qg8ZRsQBZsC5dV0A8rlRUyDsdEEkrcirBvXEz229paL5NOZhl8TE1qLzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJUJdp61lbon/F uCCM+w0Fw54r0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZj QXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWtiNXQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2 Y0F4N1VrbkxaWWpIZG1BSFZRaExzQUg3RzZqMmJVZFM5bU1heXVrYjV0LzAvODk1 MDk3NjlFQjU5NUJBMjdGQzVCODIwOENGQjBEMDVDMzlFMkJEMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCtb94MA0EAgACMAcDBQAoBEEgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPFTANBgkqhkiG9w0BAQsFAAOCAQEANvNYXXxIhajxJQld 09v7NJ6terko2TDgs6npr0FRnWl/vLZAInyR2PyMFe8GodZcQNGhxpE9f+JgvS7J 10loGAmVDZfOz+7pib+4V+wjCReLyf70vNvHabcUJ6EbKKGO1zXwwY68OsBODcpt 7QLUdpFahoy3hgK3W2rm/2EOmLYeJmPvi4E0x9+ntHx6HF8xtOIbYF5/EQi6Dvc0 Nxl5x9avy75QneypKy0uGMrnnbjaotPgFh2HAmb73F/l4bmK5SDYXBUBb44F2wrf oEIxl2zy1/Vq+I9FQr9kf3/ooeuzUTfq+lw8OaObTAwAh31atalS8/4T56kc9JNJ tvkYtg== -----END CERTIFICATE-----Generated at Sat Jul 26 14:26:09 2025 by rpki-client