$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer File: E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer (raw, json) Hash identifier: NTuZrRErdLTapSg6o9EigZN0sQXd4p2oIfM+2J8S1QM= Subject key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3482E65D5D6827BD58723D3B2E107F5BBD1D99CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft caRepository: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Jul 2025 17:06:30 +0000 Certificate not after: Tue 21 Jul 2026 17:11:30 +0000 Subordinate resources: AS: 52721 AS: 264088 IP: 138.185.108.0/22 IP: 143.208.4.0/22 IP: 170.246.96.0/22 IP: 177.84.108.0/22 IP: 2804:2664::/32 IP: 2804:2aa8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 07:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:82:e6:5d:5d:68:27:bd:58:72:3d:3b:2e:10:7f:5b:bd:1d:99:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 17:06:30 2025 GMT Not After : Jul 21 17:11:30 2026 GMT Subject: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:db:5f:c6:26:a1:26:14:07:9e:18:96:ed: 89:2b:83:16:ab:60:4d:43:b4:8f:e1:18:e6:76:56: e3:cf:c4:63:96:5d:20:bc:8d:27:b7:ca:d7:79:f2: 94:71:67:76:50:c4:61:08:bd:a1:0e:97:1f:e7:c4: 2f:97:be:38:5d:5c:07:b8:1b:58:3f:32:d3:7b:b6: b1:d2:31:de:68:f3:86:19:71:ad:28:ed:a8:11:7f: e7:13:42:60:c8:c6:4a:d3:c8:30:42:27:84:31:12: 75:58:96:a9:a3:d6:0d:90:a5:79:a3:69:78:e8:d2: 75:dd:44:a3:d7:a9:41:59:27:32:7e:55:82:67:8b: 66:ea:6f:f7:9d:71:20:5a:e9:8f:85:3f:4e:77:09: 18:fa:e7:b3:6f:3c:a1:3d:06:33:f4:70:1d:53:f6: a2:58:b0:42:2b:22:c4:83:14:a4:ec:fc:fd:3b:27: 17:0c:a4:82:52:22:57:1d:35:e2:1d:3a:94:98:59: 02:09:8b:d3:d0:f7:83:b4:af:d3:e3:07:9d:98:38: 30:fb:e3:dd:c4:8a:54:3d:db:43:df:f2:1a:24:35: aa:8e:33:ad:d5:7d:10:54:17:66:af:bb:99:f5:c2: 50:c4:3b:11:73:bb:bd:07:2f:d7:34:3c:8e:1e:d0: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.108.0/22 143.208.4.0/22 170.246.96.0/22 177.84.108.0/22 IPv6: 2804:2664::/32 2804:2aa8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52721 264088 Signature Algorithm: sha256WithRSAEncryption 66:b2:7a:0b:39:a9:d5:ae:c0:98:a5:05:07:77:b3:2d:6c:d7: cb:c5:78:14:f7:f2:57:cc:48:2f:66:16:86:56:b1:f7:49:c5: 26:fe:95:67:f3:f5:d9:89:6a:27:75:e3:de:4d:fc:c8:14:32: 8f:89:4e:cd:47:72:ba:e4:69:f6:c3:8e:f4:95:d2:ed:d7:ec: 02:b7:6f:58:c2:2b:7a:7f:4c:08:16:ba:9a:75:35:c2:ce:29: fd:96:8c:b5:21:37:47:70:20:42:c2:b4:55:7d:c4:28:cd:6b: 9f:b1:8e:ea:6e:8d:cd:11:b6:1c:f1:5c:4d:6c:d7:e1:3d:b0: 24:b6:92:79:22:3b:d7:6c:82:2e:8b:11:8d:52:5d:33:1b:d7: 46:52:d9:5e:d9:62:e6:20:1b:ca:57:a8:e6:a1:55:93:59:07: 18:44:ce:41:61:bf:91:6e:66:c6:e2:50:a7:39:c1:ef:4f:45: 4b:50:c5:b8:c8:8e:12:4d:af:fc:18:23:8d:de:44:e6:32:44: a6:0d:b2:b8:f9:6b:57:2c:04:e4:07:d9:e7:e7:78:f5:79:1f: 56:87:0b:f3:f6:2a:a0:99:2f:02:e9:af:0f:97:38:57:ba:ca: 84:d2:64:64:58:57:34:99:2d:b8:37:ba:ab:13:63:3e:77:fa: a0:de:62:c9 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUNILmXV1oJ71Ycj07LhB/W70dmc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjIxNzA2MzBaFw0yNjA3MjExNzExMzBaMDMxMTAvBgNV BAMTKEUzRjE3MkI0QzY5MkFBQTk1OEE5M0YwQzdENTc3QTVBRThENzA4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMdtfxiahJhQHnhiW7Ykrgxar YE1DtI/hGOZ2VuPPxGOWXSC8jSe3ytd58pRxZ3ZQxGEIvaEOlx/nxC+XvjhdXAe4 G1g/MtN7trHSMd5o84YZca0o7agRf+cTQmDIxkrTyDBCJ4QxEnVYlqmj1g2QpXmj aXjo0nXdRKPXqUFZJzJ+VYJni2bqb/edcSBa6Y+FP053CRj657NvPKE9BjP0cB1T 9qJYsEIrIsSDFKTs/P07JxcMpIJSIlcdNeIdOpSYWQIJi9PQ94O0r9PjB52YODD7 493EilQ920Pf8hokNaqOM63VfRBUF2avu5n1wlDEOxFzu70HL9c0PI4e0D4lAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTj8XK0xpKqqVip Pwx9V3pa6NcILzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlJS elB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZcWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJS UnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAvRTNG MTcyQjRDNjkyQUFBOTU4QTkzRjBDN0Q1NzdBNUFFOEQ3MDgyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEH AQH/BDgwNjAeBAIAATAYAwQCirlsAwQCj9AEAwQCqvZgAwQCsVRsMBQEAgACMA4D BQAoBCZkAwUAKAQqqDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAzfECAwQHmDAN BgkqhkiG9w0BAQsFAAOCAQEAZrJ6Czmp1a7AmKUFB3ezLWzXy8V4FPfyV8xIL2YW hlax90nFJv6VZ/P12YlqJ3Xj3k38yBQyj4lOzUdyuuRp9sOO9JXS7dfsArdvWMIr en9MCBa6mnU1ws4p/ZaMtSE3R3AgQsK0VX3EKM1rn7GO6m6NzRG2HPFcTWzX4T2w JLaSeSI712yCLosRjVJdMxvXRlLZXtli5iAbyleo5qFVk1kHGETOQWG/kW5mxuJQ pznB709FS1DFuMiOEk2v/Bgjjd5E5jJEpg2yuPlrVywE5AfZ5+d49XkfVocL8/Yq oJkvAumvD5c4V7rKhNJkZFhXNJktuDe6qxNjPnf6oN5iyQ== -----END CERTIFICATE-----Generated at Sat Jul 26 11:31:21 2025 by rpki-client