$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer File: D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer (raw, json) Hash identifier: 9ubKxHs3HZoFcj42YJa8zXGt2HQrQLa93HCyyFRvqlQ= Subject key identifier: D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5329C76CF341B5C58DED6D16FCA984704E872CDD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft caRepository: rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 17:35:50 +0000 Certificate not after: Fri 10 Jul 2026 17:40:50 +0000 Subordinate resources: AS: 265482 IP: 168.197.140.0/22 IP: 2804:34d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 17:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:29:c7:6c:f3:41:b5:c5:8d:ed:6d:16:fc:a9:84:70:4e:87:2c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 11 17:35:50 2025 GMT Not After : Jul 10 17:40:50 2026 GMT Subject: CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:71:71:3c:79:cf:3c:8c:fb:23:d3:cb:aa: 8d:47:db:89:50:04:03:e8:e3:e0:8d:09:df:78:55: 28:41:7c:be:26:89:8e:0a:cb:00:b2:e9:68:99:f7: 02:d5:01:64:f3:25:8e:33:47:73:3a:7d:5b:09:ec: 54:5b:71:1d:6e:1c:93:9d:03:55:2e:e8:4e:5b:a2: 8b:3e:a2:93:f5:ef:6d:0f:cc:08:aa:c3:9f:54:12: dc:2e:00:4c:56:95:10:c4:d6:7d:e7:1a:b4:00:2e: 0c:5d:b2:c7:74:4a:04:92:03:ef:eb:6a:7d:c9:60: 75:50:3a:6e:48:6b:20:20:d4:cc:ec:94:e0:6c:25: 6d:fc:7c:b5:b5:5f:33:72:2e:8c:b7:41:51:e9:16: 12:c9:20:fa:ec:f1:d8:31:e2:72:1b:00:a8:44:2e: 4e:c3:9d:e9:ed:ef:51:e3:11:f7:81:b5:35:39:28: ad:bb:c1:0c:b6:8a:e3:1c:ff:2c:45:cc:88:4e:ec: b5:46:89:5e:c6:52:9f:93:b4:6b:f6:38:25:85:df: 6f:48:2a:fe:ae:24:24:29:40:10:06:4e:a6:be:1d: a4:81:c0:3b:4a:96:48:81:17:f4:6e:6e:50:05:69: 33:98:82:b6:3b:8b:d6:c4:6c:43:54:bb:31:68:d7: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.140.0/22 IPv6: 2804:34d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265482 Signature Algorithm: sha256WithRSAEncryption 88:d5:d9:9b:d4:54:1a:ec:10:f1:1c:f0:82:15:a0:2d:8f:9a: 4f:e4:ff:4e:b3:cc:18:b7:e8:b3:74:18:1a:6b:43:89:bb:8b: d0:15:4c:97:c9:cc:76:56:c4:3e:68:54:99:c6:2e:78:78:90: ac:f5:1e:b9:ad:68:f9:0b:aa:ad:70:c7:2b:da:9b:0d:fe:fd: 5a:95:e3:97:ad:c8:7c:09:53:95:7f:5e:bd:a1:f6:84:9b:23: db:27:84:b0:43:fc:07:fc:48:ae:fe:60:0e:fa:4a:85:f5:32: 3d:8b:9b:9c:ce:a3:aa:5a:96:69:c0:77:cc:a9:cd:25:aa:e1: 6a:b0:3f:33:fa:67:c8:24:39:63:d6:99:7c:0f:93:d2:b3:c1: a5:8c:0f:2e:ec:99:72:6f:ef:38:56:ad:55:44:e9:9e:68:2c: e7:b5:78:ed:fa:58:88:5e:5b:06:3f:06:9a:43:b5:8b:9f:ae: f9:0b:6e:5f:4d:2b:dd:ac:ed:3b:88:24:4e:2e:e9:85:85:06: d5:e2:87:d9:a1:b5:6c:dc:79:4c:81:07:c2:44:9a:8e:80:fa: f9:b7:b6:a0:c6:09:8f:9f:d6:6f:fb:74:42:9a:bf:cd:49:96: 64:35:8c:7c:97:8b:f1:4e:6e:c6:1d:14:5d:a9:1e:1b:b5:a6: 47:38:15:4f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUynHbPNBtcWN7W0W/KmEcE6HLN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTExNzM1NTBaFw0yNjA3MTAxNzQwNTBaMDMxMTAvBgNV BAMTKEQyRDg1NUM2MzMwNTFBNzY0ODdBODJDMUVEMERCNTg3QTE4Q0YxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRnFxPHnPPIz7I9PLqo1H24lQ BAPo4+CNCd94VShBfL4miY4KywCy6WiZ9wLVAWTzJY4zR3M6fVsJ7FRbcR1uHJOd A1Uu6E5boos+opP1720PzAiqw59UEtwuAExWlRDE1n3nGrQALgxdssd0SgSSA+/r an3JYHVQOm5IayAg1MzslOBsJW38fLW1XzNyLoy3QVHpFhLJIPrs8dgx4nIbAKhE Lk7Dnent71HjEfeBtTU5KK27wQy2iuMc/yxFzIhO7LVGiV7GUp+TtGv2OCWF329I Kv6uJCQpQBAGTqa+HaSBwDtKlkiBF/RublAFaTOYgrY7i9bEbENUuzFo19TvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTS2FXGMwUadkh6 gsHtDbWHoYzxyTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnJn NzlDMVFvdlJBOGpONUZqWHBWQWJ6YVdzQ2V2WkZpeVNWZ1g4V1BRN28vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zy Zzc5QzFRb3ZSQThqTjVGalhwVkFiemFXc0NldlpGaXlTVmdYOFdQUTdvLzAvRDJE ODU1QzYzMzA1MUE3NjQ4N0E4MkMxRUQwREI1ODdBMThDRjFDOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMWMMA0EAgACMAcDBQAoBDTQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQNCjANBgkqhkiG9w0BAQsFAAOCAQEAiNXZm9RUGuwQ8Rzw ghWgLY+aT+T/TrPMGLfos3QYGmtDibuL0BVMl8nMdlbEPmhUmcYueHiQrPUeua1o +QuqrXDHK9qbDf79WpXjl63IfAlTlX9evaH2hJsj2yeEsEP8B/xIrv5gDvpKhfUy PYubnM6jqlqWacB3zKnNJarharA/M/pnyCQ5Y9aZfA+T0rPBpYwPLuyZcm/vOFat VUTpnmgs57V47fpYiF5bBj8GmkO1i5+u+QtuX00r3aztO4gkTi7phYUG1eKH2aG1 bNx5TIEHwkSajoD6+be2oMYJj5/Wb/t0Qpq/zUmWZDWMfJeL8U5uxh0UXakeG7Wm RzgVTw== -----END CERTIFICATE-----Generated at Sat Jul 26 20:05:16 2025 by rpki-client