$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D2922D358225395ABA691BA6723BAA778294D49.cer File: 8D2922D358225395ABA691BA6723BAA778294D49.cer (raw, json) Hash identifier: GKMsFIG6Z1CKPXXmfnIA3KO6JdYZNX95FAxG7zQfrR8= Subject key identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3DC868AFB1AFFA2218016B63A4E7C5B77B91E3B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft caRepository: rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 19 Jul 2025 02:06:23 +0000 Certificate not after: Sat 18 Jul 2026 02:11:23 +0000 Subordinate resources: AS: 266565 IP: 45.7.40.0/22 IP: 2804:3df4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 15:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c8:68:af:b1:af:fa:22:18:01:6b:63:a4:e7:c5:b7:7b:91:e3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 19 02:06:23 2025 GMT Not After : Jul 18 02:11:23 2026 GMT Subject: CN=8D2922D358225395ABA691BA6723BAA778294D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:75:d0:e6:21:64:ec:81:24:e7:63:6d:ff: b3:dd:16:68:a3:53:0a:d5:3d:60:bf:04:66:41:80: 5b:13:b9:59:f7:04:c3:f1:ca:6b:26:6a:38:75:8e: 4a:ff:81:43:30:58:86:ab:af:c7:48:4d:85:e2:04: 97:cb:eb:2b:b7:00:bc:c4:1d:0d:42:cb:d6:a4:8b: a3:d2:7d:c9:7c:49:ad:77:20:1c:18:56:b5:73:3d: ea:2b:40:80:d2:8d:3e:c6:72:28:60:bb:a7:c3:90: 2a:77:8f:f5:5a:0e:96:15:bf:5d:bf:7e:0f:67:1d: 95:43:2a:df:2e:15:7d:13:d2:1e:56:b2:f8:b8:d4: 34:16:3f:f6:a9:b0:b9:b6:77:78:c9:4e:73:38:37: 9f:bb:23:9e:30:41:ff:3f:9e:63:65:48:05:33:7d: e6:c8:7b:0e:c9:54:87:a5:bc:ab:ec:ba:d4:12:92: c5:68:d5:17:98:2c:92:75:67:f1:97:d9:7b:fc:55: 0e:4d:8b:3a:54:41:58:b5:45:74:63:d9:14:f8:5a: 9c:b7:69:38:1d:58:c7:62:52:15:b1:7f:61:0b:fe: 0d:96:b6:03:9f:0e:a3:20:4f:6c:d3:57:39:29:bd: c0:6e:8a:dd:bd:e5:92:03:95:d6:16:7d:8b:f8:b0: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:29:22:D3:58:22:53:95:AB:A6:91:BA:67:23:BA:A7:78:29:4D:49 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/8D2922D358225395ABA691BA6723BAA778294D49.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.40.0/22 IPv6: 2804:3df4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266565 Signature Algorithm: sha256WithRSAEncryption bc:81:6b:1d:e2:84:66:e9:ec:de:42:1a:2e:99:58:a9:37:d4: ac:ea:61:f3:6d:3f:15:a8:f1:f8:d7:75:fc:c8:2e:c1:a1:ec: 7a:07:60:e5:53:bd:84:07:1e:2c:c0:00:14:34:19:1b:7e:7d: 4c:b5:5c:09:48:8b:a0:94:ad:58:5f:32:71:eb:ef:5c:87:22: ea:0e:88:2c:14:11:f5:c5:e9:5d:88:af:43:64:44:3b:15:80: ac:f4:e2:a8:f6:09:55:1e:43:51:77:f6:b2:be:2d:9a:45:34: 89:a8:ad:97:e1:a2:5e:2d:a8:43:0e:2b:ea:f4:63:33:16:b8: f4:53:c7:43:28:ef:f8:00:33:d6:19:03:72:80:e6:29:5c:52: 7f:42:c8:ea:21:21:d0:3b:61:9b:9c:f8:29:4d:13:09:de:a4: fe:fd:46:1c:b9:1c:68:0a:b1:d8:b1:69:b6:81:2c:3c:9d:35: 99:86:87:8b:25:fe:c7:ee:bc:61:16:99:d5:8f:65:41:4e:0c: 68:34:c6:ef:c0:e7:07:b1:aa:17:78:75:ca:a5:bc:73:44:89: 89:f6:e7:fd:51:ba:cd:a8:d3:94:d2:df:45:95:43:58:df:9e: ff:5f:dc:5e:e3:bb:7c:18:a6:e6:90:6b:cd:27:f5:5a:12:1e: 41:60:b0:6c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPchor7Gv+iIYAWtjpOfFt3uR47QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTkwMjA2MjNaFw0yNjA3MTgwMjExMjNaMDMxMTAvBgNV BAMTKDhEMjkyMkQzNTgyMjUzOTVBQkE2OTFCQTY3MjNCQUE3NzgyOTRENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCXXQ5iFk7IEk52Nt/7PdFmij UwrVPWC/BGZBgFsTuVn3BMPxymsmajh1jkr/gUMwWIarr8dITYXiBJfL6yu3ALzE HQ1Cy9aki6PSfcl8Sa13IBwYVrVzPeorQIDSjT7Gcihgu6fDkCp3j/VaDpYVv12/ fg9nHZVDKt8uFX0T0h5Wsvi41DQWP/apsLm2d3jJTnM4N5+7I54wQf8/nmNlSAUz febIew7JVIelvKvsutQSksVo1ReYLJJ1Z/GX2Xv8VQ5NizpUQVi1RXRj2RT4Wpy3 aTgdWMdiUhWxf2EL/g2WtgOfDqMgT2zTVzkpvcBuit295ZIDldYWfYv4sAkVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNKSLTWCJTlaum kbpnI7qneClNSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Vi b2VicnpqUDl6RXl6emhEcHRrcjNENWc4ZWtMY01wN0trdGVudGpzMmMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dl Ym9lYnJ6alA5ekV5enpoRHB0a3IzRDVnOGVrTGNNcDdLa3RlbnRqczJjLzAvOEQy OTIyRDM1ODIyNTM5NUFCQTY5MUJBNjcyM0JBQTc3ODI5NEQ0OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQcoMA0EAgACMAcDBQAoBD30MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRRTANBgkqhkiG9w0BAQsFAAOCAQEAvIFrHeKEZuns3kIa LplYqTfUrOph820/Fajx+Nd1/MguwaHsegdg5VO9hAceLMAAFDQZG359TLVcCUiL oJStWF8ycevvXIci6g6ILBQR9cXpXYivQ2REOxWArPTiqPYJVR5DUXf2sr4tmkU0 iaitl+GiXi2oQw4r6vRjMxa49FPHQyjv+AAz1hkDcoDmKVxSf0LI6iEh0Dthm5z4 KU0TCd6k/v1GHLkcaAqx2LFptoEsPJ01mYaHiyX+x+68YRaZ1Y9lQU4MaDTG78Dn B7GqF3h1yqW8c0SJifbn/VG6zajTlNLfRZVDWN+e/1/cXuO7fBim5pBrzSf1WhIe QWCwbA== -----END CERTIFICATE-----Generated at Sat Jul 26 14:51:36 2025 by rpki-client