$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer File: 8D649BA756DE234532A1E9A858DEBF41843906BD.cer (raw, json) Hash identifier: 3tyG0Ip9hloEl0O0Xgn4nJRPdnyv9Enfm2FvhlWUJr0= Subject key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 210AE5A8305B08DD6DA5C8548F811772E54599CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft caRepository: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Jul 2025 20:37:11 +0000 Certificate not after: Tue 21 Jul 2026 20:42:11 +0000 Subordinate resources: AS: 263427 IP: 45.162.240.0/22 IP: 170.0.200.0/22 IP: 177.91.44.0/22 IP: 2804:119c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 04:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0a:e5:a8:30:5b:08:dd:6d:a5:c8:54:8f:81:17:72:e5:45:99:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 20:37:11 2025 GMT Not After : Jul 21 20:42:11 2026 GMT Subject: CN=8D649BA756DE234532A1E9A858DEBF41843906BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0e:ed:5c:a6:53:75:85:d7:04:9d:f2:e5:70: ed:ef:76:89:31:7e:23:01:d9:f9:d3:f9:e5:3c:2f: 6f:49:92:6a:33:bc:99:f7:b6:f8:da:bb:78:42:59: 1f:78:4b:59:25:5b:83:a5:c0:98:1d:e7:6c:cc:f0: be:90:60:f8:f0:6f:f6:56:85:92:f4:97:33:d7:4f: c1:63:3a:d2:17:85:6f:11:cc:6f:58:90:f8:e1:ae: cd:59:57:60:ff:e4:88:61:cd:2e:a3:54:6c:e5:77: d3:fb:94:de:1e:f2:64:cc:06:38:fc:31:45:13:27: 65:61:7c:35:06:a4:9c:49:d3:dc:66:6a:c4:1c:d8: e4:8d:f9:94:1b:51:4e:a2:de:92:8f:a5:fa:d2:bc: ba:00:24:c9:7e:fd:64:2b:ce:ab:75:44:bf:46:49: 09:05:76:46:bd:6e:06:80:9a:7b:0a:41:71:32:6f: 94:96:2c:53:04:43:e6:72:01:d3:5c:6e:b7:fb:85: bc:6c:dd:4f:73:84:47:e7:18:38:3f:d3:5e:be:bb: 93:e3:c8:18:8b:2f:00:08:2d:96:3b:e9:34:3e:ae: 9e:35:01:a3:23:9a:b3:8e:fc:cc:81:18:c4:70:4d: e0:b2:9e:de:b4:d1:00:bd:ef:c8:2e:89:61:10:a8: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.240.0/22 170.0.200.0/22 177.91.44.0/22 IPv6: 2804:119c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263427 Signature Algorithm: sha256WithRSAEncryption 7e:75:4e:34:f6:57:e3:09:7f:5b:7b:86:71:f1:dd:4f:ae:52: 88:74:d9:ac:4c:66:2e:a3:d9:2f:b2:ee:d4:23:00:b0:f2:df: b3:37:e3:d8:ae:5b:b2:8d:68:a0:a6:ea:ad:21:4d:de:73:c8: d8:e3:21:bc:4b:95:13:14:42:86:dd:c4:0c:f6:69:8d:2b:93: 59:31:65:87:31:d9:46:ee:de:ba:a8:f7:8e:c0:a9:09:08:ee: a2:44:94:a9:90:aa:f6:ce:cd:d6:5b:b7:2b:ce:28:a6:e2:3f: a0:32:de:35:32:d6:5c:37:ab:ce:70:ec:9d:8d:02:f3:a5:d3: 0d:70:ad:94:f7:bb:88:5d:b2:42:21:68:07:94:77:4d:c8:65: c8:e4:c4:e3:6b:29:4a:96:c6:b9:1c:af:22:8a:50:9a:61:0c: 9c:81:f9:01:2a:5f:ad:14:d4:d6:93:b7:49:25:a9:86:d0:7b: 07:21:63:04:e2:bd:f2:f4:db:47:53:91:b2:f9:66:ae:2a:6e: d1:ae:32:be:6d:25:4e:d8:29:65:0e:ab:11:4c:66:c9:cf:03: 2e:82:67:bd:b0:8b:03:46:f2:af:63:a5:ef:22:82:62:58:d1: d3:ed:df:d4:79:28:08:c4:3d:1f:37:98:45:bd:d1:8e:52:7e: b2:be:33:96 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUIQrlqDBbCN1tpchUj4EXcuVFmcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjIyMDM3MTFaFw0yNjA3MjEyMDQyMTFaMDMxMTAvBgNV BAMTKDhENjQ5QkE3NTZERTIzNDUzMkExRTlBODU4REVCRjQxODQzOTA2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwDu1cplN1hdcEnfLlcO3vdokx fiMB2fnT+eU8L29JkmozvJn3tvjau3hCWR94S1klW4OlwJgd52zM8L6QYPjwb/ZW hZL0lzPXT8FjOtIXhW8RzG9YkPjhrs1ZV2D/5IhhzS6jVGzld9P7lN4e8mTMBjj8 MUUTJ2VhfDUGpJxJ09xmasQc2OSN+ZQbUU6i3pKPpfrSvLoAJMl+/WQrzqt1RL9G SQkFdka9bgaAmnsKQXEyb5SWLFMEQ+ZyAdNcbrf7hbxs3U9zhEfnGDg/016+u5Pj yBiLLwAILZY76TQ+rp41AaMjmrOO/MyBGMRwTeCynt600QC978guiWEQqN/ZAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNZJunVt4jRTKh 6ahY3r9BhDkGvTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXdH eHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16TTQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV3 R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAvOEQ2 NDlCQTc1NkRFMjM0NTMyQTFFOUE4NThERUJGNDE4NDM5MDZCRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLaLwAwQCqgDIAwQCsVssMA0EAgACMAcDBQAoBBGc MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFAzANBgkqhkiG9w0BAQsFAAOCAQEA fnVONPZX4wl/W3uGcfHdT65SiHTZrExmLqPZL7Lu1CMAsPLfszfj2K5bso1ooKbq rSFN3nPI2OMhvEuVExRCht3EDPZpjSuTWTFlhzHZRu7euqj3jsCpCQjuokSUqZCq 9s7N1lu3K84opuI/oDLeNTLWXDerznDsnY0C86XTDXCtlPe7iF2yQiFoB5R3Tchl yOTE42spSpbGuRyvIopQmmEMnIH5ASpfrRTU1pO3SSWphtB7ByFjBOK98vTbR1OR svlmripu0a4yvm0lTtgpZQ6rEUxmyc8DLoJnvbCLA0byr2Ol7yKCYljR0+3f1Hko CMQ9HzeYRb3RjlJ+sr4zlg== -----END CERTIFICATE-----Generated at Sun Jul 27 05:36:15 2025 by rpki-client