$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer File: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer (raw, json) Hash identifier: MLi7T7lII1b70LCnHEIuR0JHaXGIhq2U1paGsIVCAgU= Subject key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2C2CC08ED8510744A24AD3FE6CFE7E407F535F03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft caRepository: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 19:17:37 +0000 Certificate not after: Fri 24 Apr 2026 19:22:37 +0000 Subordinate resources: AS: 264009 IP: 143.0.140.0/22 IP: 168.227.132.0/22 IP: 170.78.120.0/22 IP: 2804:2954::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2c:c0:8e:d8:51:07:44:a2:4a:d3:fe:6c:fe:7e:40:7f:53:5f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 19:17:37 2025 GMT Not After : Apr 24 19:22:37 2026 GMT Subject: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:45:38:76:20:bf:ba:c4:25:a0:bd:ed:5b: f5:2a:3f:27:39:a0:17:27:86:03:57:96:bc:cc:d6: 11:7b:f0:43:ad:b5:d0:7d:90:bc:44:87:e7:9e:9f: 77:d6:fa:90:cf:2c:c6:4a:c5:6c:4f:19:96:3b:6a: e7:21:84:7f:81:69:02:19:2d:18:79:65:9a:b2:0f: 63:27:7b:5c:e1:b2:ec:12:2c:de:e9:06:e4:7b:e2: b2:99:fa:b1:fb:ce:50:47:d2:d6:fe:91:ba:c9:fe: 35:a4:cf:4f:0d:bc:42:c7:43:8e:32:c9:1d:66:67: c6:6d:bc:6d:51:3d:77:1d:d1:ca:e4:98:a9:8a:6c: da:c3:a4:ae:36:14:4d:65:74:e1:10:50:09:05:38: b7:1c:fa:17:a2:01:2f:d0:31:ff:45:c4:b2:ee:96: b9:ec:9e:09:2d:3b:24:5e:24:0e:da:c3:7a:ca:a1: 0d:f5:d0:9d:c8:7d:67:51:59:db:a8:78:bc:83:dc: 18:ba:5c:15:e6:13:3f:df:c1:37:18:a7:da:2a:9b: aa:0e:5c:bc:f0:71:bf:fa:7e:86:92:e8:e8:34:d7: ca:c0:a4:cd:4b:39:aa:8f:bc:d6:1c:05:5c:3d:6b: 9c:d7:fc:d2:9f:0a:50:53:7e:48:15:07:c7:3c:4e: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.140.0/22 168.227.132.0/22 170.78.120.0/22 IPv6: 2804:2954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264009 Signature Algorithm: sha256WithRSAEncryption a4:70:16:d2:2b:ca:2a:3d:c8:ed:eb:3a:e7:48:6b:51:7b:42: c2:16:6a:01:6c:9c:6b:9f:d4:7d:1f:28:92:21:d8:08:87:84: 76:8e:56:e3:f2:42:0d:24:74:b7:b4:21:9d:2e:c2:09:63:a2: f1:39:52:c1:c0:e2:80:94:1d:9d:0a:1f:b0:40:9c:4c:2d:ee: 30:57:12:29:d7:fa:36:9c:a6:3b:3c:25:23:47:86:3d:f0:27: 39:6f:e0:96:54:7d:0b:59:af:98:70:e5:c9:29:0f:3c:58:f3: 5d:58:19:9e:8c:c8:a7:4e:b4:c5:19:52:51:85:ad:0c:5f:4a: 0e:a2:ed:12:a3:70:c9:b3:fe:71:c7:18:49:6d:9a:af:5d:0a: 07:d0:d4:2b:a0:03:71:c6:c4:8f:4b:c8:21:e7:41:a1:41:38: 07:9d:63:44:5b:55:ea:c6:b0:b4:b1:f7:25:e5:76:38:8a:5c: 05:55:1d:73:50:2e:2d:f1:89:79:11:a6:e1:db:7f:d1:ce:fe: 2d:d8:63:f1:6f:b4:6b:e3:81:65:d3:e8:c6:2b:ec:ee:83:ab: aa:86:29:20:bd:a4:73:fe:7d:04:f3:3a:f4:2d:e1:32:0f:69: 86:93:ef:43:d8:fd:21:57:fb:9f:2c:74:fd:d0:eb:9f:77:28: 8f:cb:00:23 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIULCzAjthRB0SiStP+bP5+QH9TXwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjUxOTE3MzdaFw0yNjA0MjQxOTIyMzdaMDMxMTAvBgNV BAMTKDFBRjdCRThGNEUyOUUxQ0VBMUExMEMwQkEwNDMwNTQyMTI2RkU3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfckU4diC/usQloL3tW/UqPyc5 oBcnhgNXlrzM1hF78EOttdB9kLxEh+een3fW+pDPLMZKxWxPGZY7auchhH+BaQIZ LRh5ZZqyD2Mne1zhsuwSLN7pBuR74rKZ+rH7zlBH0tb+kbrJ/jWkz08NvELHQ44y yR1mZ8ZtvG1RPXcd0crkmKmKbNrDpK42FE1ldOEQUAkFOLcc+heiAS/QMf9FxLLu lrnsngktOyReJA7aw3rKoQ310J3IfWdRWduoeLyD3Bi6XBXmEz/fwTcYp9oqm6oO XLzwcb/6foaS6Og018rApM1LOaqPvNYcBVw9a5zX/NKfClBTfkgVB8c8TnWzAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQa976PTinhzqGh DAugQwVCEm/niTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjM0 ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3dzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzIz NGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAvMUFG N0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIxMjZGRTc4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCjwCMAwQCqOOEAwQCqk54MA0EAgACMAcDBQAoBClU MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHSTANBgkqhkiG9w0BAQsFAAOCAQEA pHAW0ivKKj3I7es650hrUXtCwhZqAWyca5/UfR8okiHYCIeEdo5W4/JCDSR0t7Qh nS7CCWOi8TlSwcDigJQdnQofsECcTC3uMFcSKdf6NpymOzwlI0eGPfAnOW/gllR9 C1mvmHDlySkPPFjzXVgZnozIp060xRlSUYWtDF9KDqLtEqNwybP+cccYSW2ar10K B9DUK6ADccbEj0vIIedBoUE4B51jRFtV6sawtLH3JeV2OIpcBVUdc1AuLfGJeRGm 4dt/0c7+Ldhj8W+0a+OBZdPoxivs7oOrqoYpIL2kc/59BPM69C3hMg9phpPvQ9j9 IVf7nyx0/dDrn3coj8sAIw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:47 2025 by rpki-client