$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer File: 168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer (raw, json) Hash identifier: 4k6cIPJuNqQGPdLwloFlEkQobvykzDKbgX5jVZlweG4= Subject key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 217AA0DD4A7DEC47DEEDC3FD4239B5A5821F888E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft caRepository: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 09 Apr 2025 18:41:19 +0000 Certificate not after: Wed 08 Apr 2026 18:46:19 +0000 Subordinate resources: AS: 28252 IP: 179.189.240.0/20 IP: 187.1.160.0/20 IP: 2804:1544::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7a:a0:dd:4a:7d:ec:47:de:ed:c3:fd:42:39:b5:a5:82:1f:88:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 9 18:41:19 2025 GMT Not After : Apr 8 18:46:19 2026 GMT Subject: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:86:43:25:84:e5:6e:30:3d:55:19:22:0b: e0:96:2d:70:f7:e2:08:0e:0f:08:a3:64:b5:1b:5b: f7:5d:8f:69:1c:4f:f6:ec:97:a4:bb:f0:91:a8:27: d6:e8:fb:27:54:c1:29:95:87:39:c5:22:52:69:6a: 8d:f9:af:6c:8e:be:99:24:2d:80:5f:70:f5:7c:57: 17:ff:20:a0:c4:ea:22:d1:bc:d7:f0:67:36:dd:09: 94:58:91:02:85:bb:30:18:5a:ef:e6:2c:e7:68:5c: ce:fc:d4:a5:55:1b:9d:46:d5:06:ef:fd:86:4e:33: 2e:bd:7e:6b:d0:be:40:2e:7f:c4:1f:77:0b:0a:b1: 7c:c4:f9:0b:e7:36:61:db:99:89:f4:98:dc:e0:9d: f4:4d:da:bd:be:2d:17:83:7e:19:79:09:c3:ca:a6: f2:45:41:7e:4a:a7:56:11:cd:ea:e0:dd:3f:7b:3e: 68:93:7f:87:5d:64:5f:8e:21:96:e3:9d:95:f7:d2: 20:34:38:c3:a2:74:35:d2:5d:09:c3:41:17:81:e9: 56:10:60:de:82:ac:ae:cb:e4:a6:fa:f5:eb:05:0a: 51:d5:a2:7b:ea:14:de:75:89:2b:40:6e:ee:8a:64: 82:78:9f:ad:90:f1:51:88:04:3f:8b:ea:cf:37:87: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.189.240.0/20 187.1.160.0/20 IPv6: 2804:1544::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28252 Signature Algorithm: sha256WithRSAEncryption 9c:01:03:f7:90:01:45:12:fa:67:fb:4b:fc:3a:a8:96:c6:b9: 81:c3:48:71:9f:f6:8d:2b:1b:96:a0:31:6f:3e:82:6e:54:e0: 95:e3:2a:dd:7a:f8:ad:b7:b6:06:3a:9e:69:15:f8:db:fe:50: 89:3b:87:54:d3:73:67:19:9b:03:a8:17:85:4b:fc:e7:f0:55: 33:6f:ca:14:da:b1:23:7d:5c:d0:ef:18:22:ac:00:d0:fc:3a: 3f:b8:a3:34:b0:0f:27:c0:dd:2d:51:d3:03:46:06:79:2f:4f: 1b:78:d8:f8:5f:48:e6:a1:a7:71:1a:9f:4f:b3:d0:f7:25:7a: c1:bc:78:d4:a4:ff:c3:18:7a:d9:07:bf:17:9c:6d:a0:77:b1: 01:73:d4:cb:90:1f:82:0c:88:75:8c:0b:7e:2a:e1:4f:7b:2f: 7f:2b:fb:f5:fd:83:ef:f5:21:23:1d:d1:65:84:cd:a7:d3:57: 26:55:4a:ff:33:66:b1:09:67:73:35:d5:57:43:7d:a7:50:7e: 66:56:e2:94:20:ff:42:ad:d3:18:60:12:04:d6:a4:44:1b:98: d7:75:13:73:43:b3:7a:3f:ae:9f:5d:8c:24:14:2e:1a:e8:2a: 27:e9:de:ab:a1:e8:0b:5e:e8:a3:1a:17:8b:e0:1f:cb:80:fd: b8:16:8f:95 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUIXqg3Up97Efe7cP9Qjm1pYIfiI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDkxODQxMTlaFw0yNjA0MDgxODQ2MTlaMDMxMTAvBgNV BAMTKDE2OEUyQzczQUE3RUM5REFCMzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXoZDJYTlbjA9VRkiC+CWLXD3 4ggODwijZLUbW/ddj2kcT/bsl6S78JGoJ9bo+ydUwSmVhznFIlJpao35r2yOvpkk LYBfcPV8Vxf/IKDE6iLRvNfwZzbdCZRYkQKFuzAYWu/mLOdoXM781KVVG51G1Qbv /YZOMy69fmvQvkAuf8QfdwsKsXzE+QvnNmHbmYn0mNzgnfRN2r2+LReDfhl5CcPK pvJFQX5Kp1YRzerg3T97PmiTf4ddZF+OIZbjnZX30iA0OMOidDXSXQnDQReB6VYQ YN6CrK7L5Kb69esFClHVonvqFN51iStAbu6KZIJ4n62Q8VGIBD+L6s83h+7BAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWjixzqn7J2rMG 2Atbqk2+w9yrNDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3hT b0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1bTMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3hT b0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1bTMvMC8xNjhF MkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBASzvfADBAS7AaAwDQQCAAIwBwMFACgEFUQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICblwwDQYJKoZIhvcNAQELBQADggEBAJwBA/eQAUUS +mf7S/w6qJbGuYHDSHGf9o0rG5agMW8+gm5U4JXjKt16+K23tgY6nmkV+Nv+UIk7 h1TTc2cZmwOoF4VL/OfwVTNvyhTasSN9XNDvGCKsAND8Oj+4ozSwDyfA3S1R0wNG BnkvTxt42PhfSOahp3Ean0+z0PclesG8eNSk/8MYetkHvxecbaB3sQFz1MuQH4IM iHWMC34q4U97L38r+/X9g+/1ISMd0WWEzafTVyZVSv8zZrEJZ3M11VdDfadQfmZW 4pQg/0Kt0xhgEgTWpEQbmNd1E3NDs3o/rp9djCQULhroKifp3quh6Ate6KMaF4vg H8uA/bgWj5U= -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:11 2025 by rpki-client