$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer File: 1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer (raw, json) Hash identifier: J9xmKrw5jTUIYUG7a1jnxwQ+y9NZ7DlVU3WebaeZcNs= Subject key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 188B436E2DE0A9BA28F0110F0A2C7B9B07B313A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft caRepository: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 May 2025 20:39:29 +0000 Certificate not after: Thu 30 Apr 2026 20:44:29 +0000 Subordinate resources: AS: 52916 IP: 143.255.16.0/22 IP: 177.10.20.0/22 IP: 2804:2b10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8b:43:6e:2d:e0:a9:ba:28:f0:11:0f:0a:2c:7b:9b:07:b3:13:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 1 20:39:29 2025 GMT Not After : Apr 30 20:44:29 2026 GMT Subject: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:df:71:f4:4a:31:3a:45:77:29:ec:62:9e: a8:a1:1b:ff:a1:67:63:7c:e8:ff:5b:bc:74:96:45: fc:35:08:f9:6b:25:b5:bf:a3:42:95:29:28:5f:90: 99:dd:4d:70:b5:b7:99:ac:42:a2:f2:4d:66:f2:63: a1:d7:c2:a4:94:5b:a2:84:a9:95:d6:47:e5:e7:59: 3b:70:cb:dc:4c:65:14:97:8b:3c:6e:42:1f:00:14: f3:41:7a:eb:0b:c5:d6:55:c7:2c:e9:40:b7:5d:5a: 18:c6:fe:fd:46:4c:03:77:50:83:19:31:36:cc:5b: f5:c5:e9:2a:85:f2:da:2d:58:08:77:9c:f4:74:43: 89:fe:04:af:a8:0c:a0:8d:91:b9:2a:2b:22:9e:ef: 9b:cf:1f:2c:fc:f0:84:c6:0e:d9:e7:66:1f:23:c7: 7b:ad:6f:7e:69:70:4b:ac:fe:98:5e:b8:cf:49:da: 14:80:58:e8:16:65:70:01:77:48:20:a6:29:6f:a1: 48:bf:ea:06:df:1b:34:9b:d7:8d:18:77:fd:c4:4b: 3e:2a:fa:f7:7e:3b:d0:e4:7e:92:84:12:e3:6a:7a: 6d:c4:54:5d:b7:57:f2:93:5c:70:dc:27:17:69:e3: 47:c0:40:05:fc:e0:f4:54:98:00:10:97:2d:05:b4: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.16.0/22 177.10.20.0/22 IPv6: 2804:2b10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52916 Signature Algorithm: sha256WithRSAEncryption 33:0b:63:d3:f0:d6:77:30:cb:44:ce:97:1f:aa:f5:c9:fd:9c: e1:0f:6a:9e:2d:57:72:c6:c0:e0:71:7e:df:ad:97:cf:45:ee: ad:1a:31:33:45:e7:94:4c:cc:ee:f4:50:16:d2:0a:49:de:40: ec:86:bb:83:9d:1b:f2:75:1f:34:51:69:ef:a9:51:5a:94:e4: 48:e6:fb:70:af:19:59:de:af:74:b0:e4:44:70:b8:31:17:95: a3:d3:82:22:cb:06:9c:0e:39:47:24:16:44:a8:e3:7a:44:79: 6e:8e:fa:d2:3a:53:d7:d0:b8:7f:de:c2:5b:8b:ee:8b:4e:23: af:2d:c1:c2:5e:b7:6d:d8:96:60:a0:10:f8:90:9b:57:2d:aa: 68:83:7c:46:6f:2e:97:9c:87:e6:36:7a:c4:58:11:30:c7:42: 67:8f:f9:a8:a6:2b:ec:e6:13:9b:7c:0f:90:26:1d:79:b5:a0: 03:d5:63:eb:a7:bd:72:d7:81:32:36:08:c5:41:20:d7:4d:38: 67:02:8a:42:48:8c:c6:48:3a:d9:b8:30:b1:03:13:ca:9f:83: a0:5e:1b:b2:af:a3:61:f0:c6:e9:73:cc:2e:98:ef:78:eb:67: 53:d6:c2:92:ec:53:5f:f9:7a:e1:58:94:54:c4:8a:db:fd:bd: 4a:ed:cd:bb -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUGItDbi3gqboo8BEPCix7mwezE6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDEyMDM5MjlaFw0yNjA0MzAyMDQ0MjlaMDMxMTAvBgNV BAMTKDEwMjhGOTNEQjczMEQ5MURDMDA5MURGOThDNkYwMjI5RURBNjlDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqt9x9EoxOkV3KexinqihG/+h Z2N86P9bvHSWRfw1CPlrJbW/o0KVKShfkJndTXC1t5msQqLyTWbyY6HXwqSUW6KE qZXWR+XnWTtwy9xMZRSXizxuQh8AFPNBeusLxdZVxyzpQLddWhjG/v1GTAN3UIMZ MTbMW/XF6SqF8totWAh3nPR0Q4n+BK+oDKCNkbkqKyKe75vPHyz88ITGDtnnZh8j x3utb35pcEus/pheuM9J2hSAWOgWZXABd0ggpilvoUi/6gbfGzSb140Yd/3ESz4q +vd+O9DkfpKEEuNqem3EVF23V/KTXHDcJxdp40fAQAX84PRUmAAQly0FtO8jAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQKPk9tzDZHcAJ HfmMbwIp7aac7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMS8xMDI4 RjkzREI3MzBEOTFEQzAwOTFERjk4QzZGMDIyOUVEQTY5Q0VFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP/xADBAKxChQwDQQCAAIwBwMFACgEKxAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM60MA0GCSqGSIb3DQEBCwUAA4IBAQAzC2PT8NZ3 MMtEzpcfqvXJ/ZzhD2qeLVdyxsDgcX7frZfPRe6tGjEzReeUTMzu9FAW0gpJ3kDs hruDnRvydR80UWnvqVFalORI5vtwrxlZ3q90sOREcLgxF5Wj04IiywacDjlHJBZE qON6RHlujvrSOlPX0Lh/3sJbi+6LTiOvLcHCXrdt2JZgoBD4kJtXLapog3xGby6X nIfmNnrEWBEwx0Jnj/mopivs5hObfA+QJh15taAD1WPrp71y14EyNgjFQSDXTThn AopCSIzGSDrZuDCxAxPKn4OgXhuyr6Nh8Mbpc8wumO9462dT1sKS7FNf+XrhWJRU xIrb/b1K7c27 -----END CERTIFICATE-----Generated at Mon Nov 3 05:22:09 2025 by rpki-client