$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer File: 1233961E0559F239AED4F50437087EF6837DC5E3.cer (raw, json) Hash identifier: U0do/SMhzsLaoIA2CyDnQ+/YB3EjNIA68+z2+i5kMnY= Subject key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E468FCC7621D1741DAA9CE8A18F333298BFE7BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft caRepository: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 15 Jul 2025 05:53:01 +0000 Certificate not after: Tue 14 Jul 2026 05:58:01 +0000 Subordinate resources: AS: 22128 AS: 28584 IP: 131.72.80.0/22 IP: 177.39.160.0/21 IP: 177.129.232.0/21 IP: 186.251.214.0/23 IP: 200.159.160.0/19 IP: 200.160.144.0/20 IP: 2804:d8::/32 IP: 2804:918::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 01 Aug 2025 12:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:46:8f:cc:76:21:d1:74:1d:aa:9c:e8:a1:8f:33:32:98:bf:e7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 15 05:53:01 2025 GMT Not After : Jul 14 05:58:01 2026 GMT Subject: CN=1233961E0559F239AED4F50437087EF6837DC5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:b0:8d:c3:78:8e:2b:00:5e:cf:ba:1e:12: 3c:96:8b:7e:f6:9f:f8:02:2e:c7:f0:c1:86:a4:21: 74:61:2b:90:8a:34:60:21:e8:0d:bc:75:5e:10:da: 5b:e4:33:8c:a5:d6:44:11:c2:15:ef:77:d8:4e:23: 21:a3:57:ae:b0:8c:d5:43:85:7c:ec:72:a5:9a:bf: c2:61:be:5d:46:9b:38:f1:a4:18:76:18:ec:8b:b0: f4:23:88:11:3b:2a:8b:8d:05:24:a7:aa:f2:ec:69: 90:30:6e:94:8f:70:f4:c1:1b:06:3e:5b:54:d6:d2: b4:f0:fb:87:99:98:5b:05:08:05:d3:48:9c:0f:cb: 8c:d1:42:cd:97:a6:48:56:06:86:52:ae:09:af:33: 50:2e:2e:d0:55:b9:18:02:e3:3b:08:9d:3e:83:32: f8:c3:ee:a3:53:a3:c0:7e:2e:2d:f1:0b:43:3b:54: 4f:6c:1c:c1:ef:4a:ef:18:19:e7:1b:fa:26:13:8a: d7:85:d7:c2:a0:f4:47:32:ab:28:58:27:65:d0:bf: 48:be:12:2c:8b:69:67:db:fa:ce:55:2d:21:e7:09: d6:65:7b:76:85:c8:e5:b2:6c:00:63:bf:c8:b2:16: f0:1f:a7:e8:8e:2f:1a:86:c0:2f:d6:89:09:b6:a7: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.80.0/22 177.39.160.0/21 177.129.232.0/21 186.251.214.0/23 200.159.160.0/19 200.160.144.0/20 IPv6: 2804:d8::/32 2804:918::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22128 28584 Signature Algorithm: sha256WithRSAEncryption 3e:b0:6d:eb:a6:db:57:a8:4c:a0:a2:83:1f:76:e2:f1:ce:8c: 57:23:c2:84:a4:69:0a:35:60:9c:c9:9f:94:f7:98:1e:2c:07: b4:91:1a:e1:8e:d3:cd:f6:5a:8d:52:51:0c:23:a3:87:f6:ad: e5:31:8e:a9:7f:8e:3d:df:1b:df:d1:a4:db:7c:44:33:6f:0a: 54:80:a8:0c:b1:32:1e:6f:4d:0b:e0:db:98:7e:e5:46:aa:80: 4c:e9:55:0d:b6:d4:46:e0:a0:c7:35:70:0b:f1:16:53:1a:c3: a8:4a:20:0e:ee:0e:94:42:db:e9:cc:79:dd:85:7d:dc:79:de: f3:f2:52:4e:8c:8a:f1:b6:55:de:04:64:b4:40:ca:23:ba:5b: 06:47:04:b6:40:4d:f0:c8:e2:c6:1c:55:e3:dc:78:6f:96:f2: 87:b0:f3:f8:94:81:68:d2:ac:28:a2:66:62:e6:6d:98:1a:1a: d1:b2:3e:b1:70:92:ff:8b:79:c3:e3:e7:48:74:25:09:bc:20: 1b:a3:c1:98:f7:88:c9:11:61:03:a5:f5:1c:e7:0b:85:bd:52: 84:f6:54:9a:ee:48:bd:8b:44:2b:3c:66:60:f3:f9:f1:b4:a6: 6b:ac:16:b5:3c:b7:4f:83:38:88:01:f5:40:41:28:78:6e:72: 34:b3:2e:b9 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIULkaPzHYh0XQdqpzooY8zMpi/57wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTUwNTUzMDFaFw0yNjA3MTQwNTU4MDFaMDMxMTAvBgNV BAMTKDEyMzM5NjFFMDU1OUYyMzlBRUQ0RjUwNDM3MDg3RUY2ODM3REM1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftLCNw3iOKwBez7oeEjyWi372 n/gCLsfwwYakIXRhK5CKNGAh6A28dV4Q2lvkM4yl1kQRwhXvd9hOIyGjV66wjNVD hXzscqWav8Jhvl1GmzjxpBh2GOyLsPQjiBE7KouNBSSnqvLsaZAwbpSPcPTBGwY+ W1TW0rTw+4eZmFsFCAXTSJwPy4zRQs2XpkhWBoZSrgmvM1AuLtBVuRgC4zsInT6D MvjD7qNTo8B+Li3xC0M7VE9sHMHvSu8YGecb+iYTiteF18Kg9EcyqyhYJ2XQv0i+ EiyLaWfb+s5VLSHnCdZle3aFyOWybABjv8iyFvAfp+iOLxqGwC/WiQm2p+f/AgMB AAGjggNiMIIDXjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSM5YeBVnyOa7U 9QQ3CH72g33F4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkFt VWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhRa1AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJB bVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAvMTIz Mzk2MUUwNTU5RjIzOUFFRDRGNTA0MzcwODdFRjY4MzdEQzVFMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEH AQH/BEQwQjAqBAIAATAkAwQCg0hQAwQDsSegAwQDsYHoAwQBuvvWAwQFyJ+gAwQE yKCQMBQEAgACMA4DBQAoBADYAwUAKAQJGDAdBggrBgEFBQcBCAEB/wQOMAygCjAI AgJWcAICb6gwDQYJKoZIhvcNAQELBQADggEBAD6wbeum21eoTKCigx924vHOjFcj woSkaQo1YJzJn5T3mB4sB7SRGuGO0832Wo1SUQwjo4f2reUxjql/jj3fG9/RpNt8 RDNvClSAqAyxMh5vTQvg25h+5UaqgEzpVQ221EbgoMc1cAvxFlMaw6hKIA7uDpRC 2+nMed2Ffdx53vPyUk6MivG2Vd4EZLRAyiO6WwZHBLZATfDI4sYcVePceG+W8oew 8/iUgWjSrCiiZmLmbZgaGtGyPrFwkv+LecPj50h0JQm8IBujwZj3iMkRYQOl9Rzn C4W9UoT2VJruSL2LRCs8ZmDz+fG0pmusFrU8t0+DOIgB9UBBKHhucjSzLrk= -----END CERTIFICATE-----Generated at Thu Jul 31 13:46:09 2025 by rpki-client