$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer File: 061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer (raw, json) Hash identifier: 7soSU5y0fq+Iwri9hPYHidXRWhMjXLnmZ1aVwozihio= Subject key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CBF94D1A1DA8E31D6FB14D5571667F3EED02654 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft caRepository: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 12 Sep 2025 14:26:48 +0000 Certificate not after: Fri 11 Sep 2026 14:31:48 +0000 Subordinate resources: AS: 28128 IP: 168.195.32.0/22 IP: 187.19.48.0/20 IP: 2804:3458::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 10:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:94:d1:a1:da:8e:31:d6:fb:14:d5:57:16:67:f3:ee:d0:26:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 12 14:26:48 2025 GMT Not After : Sep 11 14:31:48 2026 GMT Subject: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:f4:c6:d4:e7:27:77:e8:ed:b6:dc:d5:f4: f1:f3:85:f8:70:15:de:a2:02:98:e9:c8:2b:2b:59: cb:e4:58:24:2d:95:1a:0e:f9:d2:9f:7b:85:8b:65: 8f:bb:18:40:71:5e:b6:20:e4:71:f8:a6:a4:9f:62: b3:3d:ee:fc:6f:06:6f:25:db:aa:35:8b:f7:60:24: 54:97:44:21:18:00:47:54:39:bc:cc:ea:53:f2:5a: 1c:0a:a1:05:24:ee:5b:08:09:a9:d8:56:5e:75:7e: ae:e5:69:cf:99:a1:34:f9:b3:67:9f:9e:66:0c:49: 11:a4:13:98:0e:10:ae:e5:08:3e:de:13:8b:00:c8: 33:1c:77:fd:58:63:98:7e:df:a3:05:c6:7c:63:4c: db:17:94:5e:03:8b:d8:f3:47:d4:b8:1b:5d:b6:7a: 7d:11:ea:21:a2:1c:0d:d2:da:74:52:5f:b8:14:de: ab:6e:3c:2f:02:57:13:d3:ac:24:f1:50:55:49:05: 3c:74:2a:8b:1a:68:97:3d:ee:27:32:2f:10:62:29: 0d:5d:44:54:fa:46:57:12:1b:29:f5:3f:ed:80:44: 56:77:7b:4b:3e:6f:d7:b6:bb:16:9a:50:8a:8f:dd: 99:26:20:f5:69:06:49:31:91:05:90:9f:bd:b6:32: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.32.0/22 187.19.48.0/20 IPv6: 2804:3458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28128 Signature Algorithm: sha256WithRSAEncryption 25:92:77:ec:fe:e0:00:89:07:27:11:c3:b2:89:42:be:3c:c8: 38:bd:78:33:b1:a2:3e:84:78:cc:b9:a5:16:4c:6e:e4:7a:ea: 4a:23:18:72:36:21:f5:19:32:c0:d9:0d:9f:83:2d:8c:df:c3: f2:77:45:87:d5:19:48:e0:32:f1:04:55:92:95:2c:32:a9:71: 8f:ab:7a:44:6c:af:e8:69:68:c9:9b:75:a8:01:f2:a2:2e:4d: 1b:ea:08:b1:a2:3e:da:ab:06:0d:a5:53:08:29:67:e0:a5:78: fe:38:13:c0:f2:b0:8c:ad:26:0f:64:b3:fe:b7:37:d7:a9:a9: f9:54:2c:6f:a0:f0:6e:fb:4b:34:b9:8c:2e:6d:ce:8b:8b:73: 5e:12:f9:02:d3:93:b5:50:b6:fb:39:92:2e:2f:6c:3e:05:c2: 78:bd:3c:03:4a:53:56:b3:3b:aa:5d:48:ad:6e:32:82:a8:d6: 8b:86:a4:da:9e:2d:26:17:01:40:8b:ad:d1:ab:7b:53:3a:77: f7:c6:9c:4b:91:17:25:23:4c:98:5a:17:fd:8a:a9:0a:25:8c: cd:81:55:b1:25:cc:53:76:af:07:f8:7c:0a:88:cf:28:f6:18: a7:19:33:35:1f:d3:4c:42:6c:72:d2:dd:51:2e:98:68:a2:0e: b8:30:08:ac -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUXL+U0aHajjHW+xTVVxZn8+7QJlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTIxNDI2NDhaFw0yNjA5MTExNDMxNDhaMDMxMTAvBgNV BAMTKDA2MUI5MTRCQzBDNkNEQTZEMzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0/TG1Ocnd+jtttzV9PHzhfhw Fd6iApjpyCsrWcvkWCQtlRoO+dKfe4WLZY+7GEBxXrYg5HH4pqSfYrM97vxvBm8l 26o1i/dgJFSXRCEYAEdUObzM6lPyWhwKoQUk7lsICanYVl51fq7lac+ZoTT5s2ef nmYMSRGkE5gOEK7lCD7eE4sAyDMcd/1YY5h+36MFxnxjTNsXlF4Di9jzR9S4G122 en0R6iGiHA3S2nRSX7gU3qtuPC8CVxPTrCTxUFVJBTx0KosaaJc97icyLxBiKQ1d RFT6RlcSGyn1P+2ARFZ3e0s+b9e2uxaaUIqP3ZkmIPVpBkkxkQWQn722MnypAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGG5FLwMbNptN8 LLBwj39yj5xScjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWpz dzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIxOUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vq c3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAvMDYx QjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4RjlDNTI3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqMMgAwQEuxMwMA0EAgACMAcDBQAoBDRYMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3gMA0GCSqGSIb3DQEBCwUAA4IBAQAlknfs/uAA iQcnEcOyiUK+PMg4vXgzsaI+hHjMuaUWTG7keupKIxhyNiH1GTLA2Q2fgy2M38Py d0WH1RlI4DLxBFWSlSwyqXGPq3pEbK/oaWjJm3WoAfKiLk0b6gixoj7aqwYNpVMI KWfgpXj+OBPA8rCMrSYPZLP+tzfXqan5VCxvoPBu+0s0uYwubc6Li3NeEvkC05O1 ULb7OZIuL2w+BcJ4vTwDSlNWszuqXUitbjKCqNaLhqTani0mFwFAi63Rq3tTOnf3 xpxLkRclI0yYWhf9iqkKJYzNgVWxJcxTdq8H+HwKiM8o9hinGTM1H9NMQmxy0t1R Lphoog64MAis -----END CERTIFICATE-----Generated at Thu Sep 18 11:45:24 2025 by rpki-client