$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer File: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer (raw, json) Hash identifier: QHVmcgOyi3hAtkNKig97GSNg4azi10tv01TzTfuuDak= Subject key identifier: 12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7ECAC9772BF9BAF3339D8B6D22E02031822E6945 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft caRepository: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 13 Aug 2025 13:55:20 +0000 Certificate not after: Wed 12 Aug 2026 14:00:20 +0000 Subordinate resources: AS: 268258 IP: 45.237.8.0/22 IP: 2804:4e64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ca:c9:77:2b:f9:ba:f3:33:9d:8b:6d:22:e0:20:31:82:2e:69:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 13 13:55:20 2025 GMT Not After : Aug 12 14:00:20 2026 GMT Subject: CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:7f:1e:ce:76:2e:64:db:6a:87:b5:b9:1f: 83:65:03:0f:65:37:ee:6a:4c:a9:ce:b9:e9:6e:04: 4e:27:6d:8d:d5:40:f9:af:01:8f:23:db:fc:4f:6b: 8b:e4:f9:6f:4a:be:89:a0:af:08:13:e0:1b:a0:73: de:d3:2a:9f:db:20:44:da:81:ee:03:8a:54:59:e6: 7a:82:9e:c4:d4:dc:63:f1:2a:30:ac:2e:c1:36:5b: 6e:f8:a9:a9:12:ac:90:d2:39:d0:df:36:ef:ff:cc: cb:14:c9:e9:e7:9e:b7:59:15:26:83:50:73:c0:2d: a9:72:ac:13:48:1e:31:51:56:37:dc:54:9e:37:7d: 9c:8b:81:50:9f:a9:d9:1e:ac:9d:94:63:ef:7b:fa: 06:05:d7:95:cd:02:d3:0c:f2:bd:46:03:1c:94:0b: 63:ce:e2:db:ee:77:ee:c8:e3:a6:27:1a:ce:cb:82: 34:41:75:78:09:7d:53:e7:69:62:85:a9:4b:c9:34: eb:72:b5:d4:60:d2:a6:0d:a8:47:4d:af:1a:92:00: a4:de:f9:f2:a1:07:5a:f9:b8:c6:d4:a5:5d:18:c4: c5:1a:8f:c8:d3:a7:ab:ff:63:8e:c7:68:4d:24:d8: 2f:01:db:2b:01:b7:38:6c:c2:86:4f:99:6b:b6:7f: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.8.0/22 IPv6: 2804:4e64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268258 Signature Algorithm: sha256WithRSAEncryption cc:8b:eb:c5:15:67:39:3b:75:a4:6a:ce:ad:2f:ac:87:e8:ef: 67:1a:22:2b:11:f2:ab:86:3c:00:85:ec:91:e0:fa:23:45:e8: 40:6b:50:6a:4d:ee:85:8e:63:43:e0:53:48:e9:20:b7:26:14: bc:fb:ad:c6:a5:24:55:66:92:78:8b:bb:2d:7c:5e:5b:2b:81: 16:13:60:c7:3c:a9:da:89:bf:dc:63:6a:25:27:bd:5c:0c:47: ce:0d:3a:19:84:a0:40:cf:03:e2:fc:a4:91:ef:cc:8f:35:a1: 81:6e:80:71:b8:cb:ff:c0:b3:50:76:91:9f:9b:f8:c9:17:bd: e2:59:a4:9b:d0:4c:b1:f5:b4:30:94:a9:92:09:9c:69:d9:1d: 33:ba:9e:4a:df:c2:13:3a:c0:d4:65:c4:3f:76:f1:66:99:03: a6:46:7d:4a:c1:c3:04:11:df:d7:29:c2:19:ac:d5:36:4c:4e: 21:30:9a:51:3a:41:6a:05:39:cf:7a:b8:78:aa:e9:f7:17:20: e7:c0:f2:6e:53:73:f7:ef:d3:62:6c:96:94:d2:5f:b1:37:e0: 95:e8:46:fc:78:11:9c:21:11:de:02:b1:f2:7b:be:b1:b8:db: 81:c9:3a:e7:d1:49:92:d6:0b:a6:e7:9b:2e:98:03:0f:78:bb: 31:fd:4b:31 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfsrJdyv5uvMznYttIuAgMYIuaUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTMxMzU1MjBaFw0yNjA4MTIxNDAwMjBaMDMxMTAvBgNV BAMTKDEyODY0NEVDRUIzMDg2OEY3REREOEI1MEJERTNDRDBBNUEzQTA2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8l38eznYuZNtqh7W5H4NlAw9l N+5qTKnOueluBE4nbY3VQPmvAY8j2/xPa4vk+W9KvomgrwgT4Bugc97TKp/bIETa ge4DilRZ5nqCnsTU3GPxKjCsLsE2W274qakSrJDSOdDfNu//zMsUyennnrdZFSaD UHPALalyrBNIHjFRVjfcVJ43fZyLgVCfqdkerJ2UY+97+gYF15XNAtMM8r1GAxyU C2PO4tvud+7I46YnGs7LgjRBdXgJfVPnaWKFqUvJNOtytdRg0qYNqEdNrxqSAKTe +fKhB1r5uMbUpV0YxMUaj8jTp6v/Y47HaE0k2C8B2ysBtzhswoZPmWu2f0IpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQShkTs6zCGj33d i1C9480KWjoGuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0ho aWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI aGlqa1VmY0I3NWVMb21HRWdYb3lIZFgyUHlpQzFBWjhuRlRjbkJtZkJULzAvMTI4 NjQ0RUNFQjMwODY4RjdEREQ4QjUwQkRFM0NEMEE1QTNBMDZCOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe0IMA0EAgACMAcDBQAoBE5kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX4jANBgkqhkiG9w0BAQsFAAOCAQEAzIvrxRVnOTt1pGrO rS+sh+jvZxoiKxHyq4Y8AIXskeD6I0XoQGtQak3uhY5jQ+BTSOkgtyYUvPutxqUk VWaSeIu7LXxeWyuBFhNgxzyp2om/3GNqJSe9XAxHzg06GYSgQM8D4vykke/MjzWh gW6AcbjL/8CzUHaRn5v4yRe94lmkm9BMsfW0MJSpkgmcadkdM7qeSt/CEzrA1GXE P3bxZpkDpkZ9SsHDBBHf1ynCGazVNkxOITCaUTpBagU5z3q4eKrp9xcg58DyblNz 9+/TYmyWlNJfsTfglehG/HgRnCER3gKx8nu+sbjbgck659FJktYLpuebLpgDD3i7 Mf1LMQ== -----END CERTIFICATE-----Generated at Wed Aug 20 12:01:05 2025 by rpki-client