$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer File: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer (raw, json) Hash identifier: OczckUUnrjDZv38Lih4i4F3tijmiv1ZRJBsWKHrduCU= Subject key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0774048201926AC255A22746E6835D94F53AB81C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft caRepository: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 13 Sep 2025 22:25:08 +0000 Certificate not after: Sat 12 Sep 2026 22:30:08 +0000 Subordinate resources: AS: 28360 IP: 138.94.8.0/22 IP: 177.8.0.0/19 IP: 179.124.224.0/20 IP: 189.76.208.0 -- 189.76.239.255 IP: 2804:14::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 05:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:74:04:82:01:92:6a:c2:55:a2:27:46:e6:83:5d:94:f5:3a:b8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 13 22:25:08 2025 GMT Not After : Sep 12 22:30:08 2026 GMT Subject: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:05:e5:7e:21:b7:95:4c:7f:15:15:c4:85:e9: 58:bb:3e:74:f8:3d:54:db:79:d9:29:b8:a8:fe:b7: 84:eb:d8:88:47:e0:40:50:05:e8:6a:ec:1f:8a:28: b7:17:84:37:c4:26:b7:17:4d:eb:2f:ec:5f:cf:71: 24:6d:e7:99:4d:aa:fb:2b:5b:ff:a0:dd:63:d6:8a: 32:9a:8d:75:2d:dd:d6:68:2e:6d:ce:1b:14:e8:1b: 03:e6:65:1b:d9:d8:a5:11:15:82:c5:ff:1d:b4:4b: b4:ba:04:13:63:a5:c1:65:a4:31:4d:9a:ef:11:dd: 20:e5:3e:31:9a:ca:a9:b3:09:87:cd:68:3d:8f:a5: 2f:79:88:e5:39:16:0f:3e:ee:db:7b:b1:a2:b7:f5: c3:6e:09:c7:d8:68:5e:9b:33:95:0f:08:1a:c7:df: ae:8a:90:91:e1:7f:27:30:ba:e0:3b:37:33:72:21: 42:37:b8:9d:b6:38:30:1c:9b:5c:fc:69:e2:98:2d: f9:7a:99:93:22:03:78:3b:08:4f:b2:10:08:10:4c: eb:38:65:f4:c4:cf:ee:5e:77:06:c2:84:82:a4:cd: 6b:ae:e1:bf:de:d9:5f:9e:08:3a:2a:6c:bb:39:64: 7c:35:f3:26:0d:15:4a:77:a8:b0:cd:e9:b0:e1:e8: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.8.0/22 177.8.0.0/19 179.124.224.0/20 189.76.208.0-189.76.239.255 IPv6: 2804:14::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28360 Signature Algorithm: sha256WithRSAEncryption 3a:87:2f:c3:c3:8a:39:58:bf:12:25:2f:a0:6d:f6:4f:b4:26: 95:7a:4b:0c:50:a2:8b:4d:79:72:93:c4:29:a6:cb:b6:d3:3f: 64:3f:68:a8:a1:5b:89:68:52:aa:fb:13:95:89:bd:e9:49:c7: 5c:37:d6:ec:7a:cc:08:64:dd:43:f4:7e:e8:f6:d7:9b:bc:4a: a7:88:97:04:e9:f8:87:32:1f:bd:ab:73:73:4e:09:0c:6b:c3: b9:10:8e:50:52:75:1c:5f:54:a3:af:3c:6d:84:45:4a:99:60: 0f:f7:22:1e:a2:15:ec:d3:b7:e0:81:43:78:e8:0f:89:e7:c3: e4:0d:8b:3d:c7:bd:da:a8:ca:df:74:87:a5:7f:4e:8e:73:af: e3:13:30:c8:18:6d:e6:20:63:52:b0:32:3d:f2:4d:04:cc:f6: d5:44:1c:df:90:a9:de:db:7e:cc:e4:ea:b7:5b:57:d7:0f:fd: 79:09:04:9e:b0:6a:20:40:97:f2:b6:d1:0f:6d:57:dd:93:f5: 85:da:04:8b:30:ff:02:ee:e7:44:93:26:61:46:28:0f:3f:29: 31:fd:48:b7:78:bf:5d:07:a3:c2:65:5f:ea:08:24:c4:db:cb: 7b:68:6f:00:b5:45:75:ea:b2:bd:b8:16:bd:c4:33:da:ca:33: cb:d6:7f:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUB3QEggGSasJVoidG5oNdlPU6uBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTMyMjI1MDhaFw0yNjA5MTIyMjMwMDhaMDMxMTAvBgNV BAMTKDAwQUE1Qjg1NzdDMDY5N0M4NDQzNzVENEVGNDQwMEEzN0ZBN0ZBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhBeV+IbeVTH8VFcSF6Vi7PnT4 PVTbedkpuKj+t4Tr2IhH4EBQBehq7B+KKLcXhDfEJrcXTesv7F/PcSRt55lNqvsr W/+g3WPWijKajXUt3dZoLm3OGxToGwPmZRvZ2KURFYLF/x20S7S6BBNjpcFlpDFN mu8R3SDlPjGayqmzCYfNaD2PpS95iOU5Fg8+7tt7saK39cNuCcfYaF6bM5UPCBrH 366KkJHhfycwuuA7NzNyIUI3uJ22ODAcm1z8aeKYLfl6mZMiA3g7CE+yEAgQTOs4 ZfTEz+5edwbChIKkzWuu4b/e2V+eCDoqbLs5ZHw18yYNFUp3qLDN6bDh6DAdAgMB AAGjggNTMIIDTzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAqluFd8BpfIRD ddTvRACjf6f6GDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEJo YXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRC aGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAvMDBB QTVCODU3N0MwNjk3Qzg0NDM3NUQ0RUY0NDAwQTM3RkE3RkExOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEH AQH/BDkwNzAmBAIAATAgAwQCil4IAwQFsQgAAwQEs3zgMAwDBAS9TNADBAS9TOAw DQQCAAIwBwMFACgEABQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbsgwDQYJKoZI hvcNAQELBQADggEBADqHL8PDijlYvxIlL6Bt9k+0JpV6SwxQootNeXKTxCmmy7bT P2Q/aKihW4loUqr7E5WJvelJx1w31ux6zAhk3UP0fuj215u8SqeIlwTp+IcyH72r c3NOCQxrw7kQjlBSdRxfVKOvPG2ERUqZYA/3Ih6iFezTt+CBQ3joD4nnw+QNiz3H vdqoyt90h6V/To5zr+MTMMgYbeYgY1KwMj3yTQTM9tVEHN+Qqd7bfszk6rdbV9cP /XkJBJ6waiBAl/K20Q9tV92T9YXaBIsw/wLu50STJmFGKA8/KTH9SLd4v10Ho8Jl X+oIJMTby3tobwC1RXXqsr24Fr3EM9rKM8vWf8M= -----END CERTIFICATE-----Generated at Thu Sep 18 06:03:21 2025 by rpki-client