$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer (raw, json) Hash identifier: ssygibRLVvpamQG68F3TU92VKTzhVRtsLMAhYeMz7lc= Subject key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64397599C674E1893EC26EAB502465D9767D9C8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft caRepository: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 06:45:14 +0000 Certificate not after: Fri 06 Mar 2026 06:50:14 +0000 Subordinate resources: AS: 53130 IP: 187.120.240.0/20 IP: 191.7.72.0/21 IP: 2804:141c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:39:75:99:c6:74:e1:89:3e:c2:6e:ab:50:24:65:d9:76:7d:9c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 06:45:14 2025 GMT Not After : Mar 6 06:50:14 2026 GMT Subject: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:75:a3:3c:44:09:84:e5:a7:87:ef:6e:4a: 2c:92:49:0f:05:e9:b2:8e:36:11:6c:59:48:ba:42: 77:68:4b:ab:c4:0f:26:a4:83:01:91:59:e1:89:f7: af:71:34:49:75:4a:46:0d:db:2c:e5:c1:82:6b:78: f6:c2:3d:d2:52:49:17:39:cc:67:53:a5:bd:09:15: e4:51:2a:b7:55:c3:47:d8:74:39:75:61:84:91:26: f7:db:2e:98:08:71:d0:18:91:e0:fa:92:ee:df:1b: 58:7a:a9:b2:db:78:9b:2f:05:1c:9f:f5:76:dd:36: c9:47:84:05:d5:61:11:ef:2e:93:be:74:7c:46:ed: 6e:d1:3a:0b:c1:fc:e0:1d:7b:5b:e0:cf:e5:4e:23: 31:e2:ac:bc:ef:28:86:c2:72:ce:ce:0a:58:34:0e: bf:6f:81:dc:63:2b:91:1e:89:dc:fc:a8:17:5f:50: 3a:11:32:dc:40:6f:f2:d2:52:2e:ec:7d:59:f4:bf: 1c:df:f4:1f:a8:2f:68:e6:dc:22:d4:37:00:1f:df: 5d:1e:da:44:0c:54:bf:ba:0b:a9:be:da:a2:04:5e: 80:b0:2b:62:1f:cc:57:71:1b:10:ca:6e:0d:2a:01: 94:d4:e7:ba:56:87:d4:6a:90:18:12:56:45:d6:3e: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.120.240.0/20 191.7.72.0/21 IPv6: 2804:141c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53130 Signature Algorithm: sha256WithRSAEncryption a2:13:ba:e8:bc:5c:1b:bf:d2:06:75:0c:97:79:93:2e:2f:6d: 81:95:30:1b:51:e2:a6:e8:42:df:b6:82:15:59:c3:2f:b1:5c: c3:fe:b9:4f:92:aa:46:81:c2:b1:0b:f2:5a:d6:ea:e6:5b:9b: 77:3f:cb:cf:7d:79:6e:cf:80:f3:39:e1:c6:44:50:8c:5d:1f: fa:6c:5f:c5:06:3f:ca:e8:a8:d9:33:ad:fa:46:b6:28:80:10: 35:f7:f3:25:61:c0:4c:d5:bb:37:04:17:3a:3f:28:2e:95:7a: d7:4a:f7:1e:50:42:1c:3d:9a:76:38:a7:6b:d4:22:6e:23:11: 12:29:21:ea:47:ee:1a:3b:e8:0c:63:67:c0:d1:f6:f8:53:79: b5:a6:45:e1:c1:13:40:2a:c0:d5:f3:17:c8:2f:b0:47:0f:f9: 28:57:dc:4e:fd:60:78:05:c4:f0:bf:a4:c8:e3:b1:62:88:2c: d0:53:a1:f2:47:27:da:54:bf:80:86:35:ce:93:63:1f:aa:73: e3:13:74:42:3a:d2:68:a0:e0:39:f5:53:fc:3a:4d:58:58:ef: 2d:ee:ce:5f:78:85:47:48:fd:7e:b5:83:bb:a7:b9:10:08:5a: 5b:1a:05:99:08:97:c0:b1:bd:f2:99:8b:13:d6:93:45:ca:ee: 27:74:4d:0f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZDl1mcZ04Yk+wm6rUCRl2XZ9nI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNjQ1MTRaFw0yNjAzMDYwNjUwMTRaMDMxMTAvBgNV BAMTKDAyQ0I5OTNFOTU4NUE1M0ZDNkI0MERBNzYyQTczRUIyODIxQkY2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVInWjPEQJhOWnh+9uSiySSQ8F 6bKONhFsWUi6QndoS6vEDyakgwGRWeGJ969xNEl1SkYN2yzlwYJrePbCPdJSSRc5 zGdTpb0JFeRRKrdVw0fYdDl1YYSRJvfbLpgIcdAYkeD6ku7fG1h6qbLbeJsvBRyf 9XbdNslHhAXVYRHvLpO+dHxG7W7ROgvB/OAde1vgz+VOIzHirLzvKIbCcs7OClg0 Dr9vgdxjK5Eeidz8qBdfUDoRMtxAb/LSUi7sfVn0vxzf9B+oL2jm3CLUNwAf310e 2kQMVL+6C6m+2qIEXoCwK2IfzFdxGxDKbg0qAZTU57pWh9RqkBgSVkXWPrQRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCy5k+lYWlP8a0 Dadipz6yghv27TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFI4 R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RS OEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzEvMDJD Qjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4MjFCRjZFRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu3jwAwQDvwdIMA0EAgACMAcDBQAoBBQcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPijANBgkqhkiG9w0BAQsFAAOCAQEAohO66Lxc G7/SBnUMl3mTLi9tgZUwG1HipuhC37aCFVnDL7Fcw/65T5KqRoHCsQvyWtbq5lub dz/Lz315bs+A8znhxkRQjF0f+mxfxQY/yuio2TOt+ka2KIAQNffzJWHATNW7NwQX Oj8oLpV610r3HlBCHD2adjina9QibiMREikh6kfuGjvoDGNnwNH2+FN5taZF4cET QCrA1fMXyC+wRw/5KFfcTv1geAXE8L+kyOOxYogs0FOh8kcn2lS/gIY1zpNjH6pz 4xN0QjrSaKDgOfVT/DpNWFjvLe7OX3iFR0j9frWDu6e5EAhaWxoFmQiXwLG98pmL E9aTRcruJ3RNDw== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:42 2025 by rpki-client