$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B8CB83341C89E28AEA4607F31E9D9A222E31E8C.cer File: 1B8CB83341C89E28AEA4607F31E9D9A222E31E8C.cer (raw, json) Hash identifier: PYftvjXNusXYHfLKjn3LHl7+qanoM6yl4uKsLzq/2kk= Subject key identifier: 1B:8C:B8:33:41:C8:9E:28:AE:A4:60:7F:31:E9:D9:A2:22:E3:1E:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5EC014DE9E8685814B1177156A97BB4AA2AFB5D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1B8CB83341C89E28AEA4607F31E9D9A222E31E8C.mft caRepository: rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 14:25:12 +0000 Certificate not after: Tue 30 Jun 2026 14:30:12 +0000 Subordinate resources: AS: 263483 IP: 191.242.224.0/22 IP: 2804:128c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 09:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c0:14:de:9e:86:85:81:4b:11:77:15:6a:97:bb:4a:a2:af:b5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 14:25:12 2025 GMT Not After : Jun 30 14:30:12 2026 GMT Subject: CN=1B8CB83341C89E28AEA4607F31E9D9A222E31E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:dc:75:f3:50:6e:34:99:5b:c9:98:4a:63: d5:a4:ff:ba:e2:ee:33:57:5a:e9:ea:e4:a0:50:b4: 21:c2:b2:2e:17:1b:96:97:03:2f:6e:c0:9a:b7:b1: 7d:12:06:ac:bc:4b:3b:41:fd:0a:69:ad:09:3c:2f: 9c:17:77:1e:04:99:11:ed:6d:74:b5:a2:1e:e1:03: f5:3b:3b:9a:2a:23:8d:0f:e3:8b:06:61:47:9c:46: 3f:ae:2b:62:05:5f:57:06:5e:cc:eb:35:68:22:55: 8d:5a:55:c9:1f:dc:1f:57:89:57:27:e7:f2:33:71: 0f:17:d6:c5:fe:8f:a8:03:1d:b0:58:8b:e9:61:8e: 64:4d:ba:60:63:f1:5d:38:dd:0d:9f:f3:00:af:d8: 69:d8:de:55:b6:72:c8:e0:02:f6:44:55:57:af:46: 27:d8:e6:12:5d:ab:40:43:be:0e:b7:02:a0:44:1d: a5:26:a0:73:03:4d:f2:9a:2e:c4:28:b7:06:90:c1: 3b:8f:73:e4:fe:ef:3a:dd:d8:2a:1f:2c:b2:04:9d: d2:eb:73:86:22:e6:8d:9d:80:ef:e1:af:db:aa:3e: 82:0a:40:35:95:40:16:e0:d7:e3:50:09:41:c6:ee: fb:9d:09:62:eb:e7:ae:1b:cd:f9:a7:05:95:29:13: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:8C:B8:33:41:C8:9E:28:AE:A4:60:7F:31:E9:D9:A2:22:E3:1E:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1B8CB83341C89E28AEA4607F31E9D9A222E31E8C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.242.224.0/22 IPv6: 2804:128c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263483 Signature Algorithm: sha256WithRSAEncryption 32:62:87:8b:10:eb:b2:76:dd:a2:94:c4:1f:43:ac:35:18:4c: 37:ca:28:31:c8:d1:af:f9:dc:38:da:0c:05:7f:7c:d5:ed:73: ad:3f:32:e8:a7:97:77:d1:ac:19:0e:8f:b3:63:c2:b3:91:2a: ae:14:4f:96:a2:90:3b:3e:d8:83:73:8f:ad:60:b6:76:21:17: b9:62:51:7a:d7:6c:2a:d2:56:9f:f2:42:49:22:f0:a5:a5:1c: a2:8b:83:d5:ae:f2:8f:15:ff:b1:8b:12:0e:3a:c6:5a:86:4c: 57:61:00:e7:54:6e:0a:55:b9:ff:f1:65:e1:38:6f:35:51:8c: 4e:91:d5:ec:b2:5d:1d:40:a7:1c:11:7c:89:27:0f:9d:18:2c: d8:1a:4f:c3:c2:68:ff:04:90:57:5f:49:1a:e4:79:2b:8c:71: d7:dc:39:5e:03:91:32:ac:0a:01:24:93:5e:5c:70:db:87:9e: 3e:1f:ef:1d:3d:36:45:f0:a0:4e:45:e0:65:73:0a:a9:34:d6: b7:4c:21:1e:d1:73:e0:f5:45:fb:ac:c6:c0:5e:2c:b6:79:01: b3:2b:a3:27:8a:09:16:a3:7f:a5:5f:ed:78:70:94:ec:2a:1e: fc:42:d8:92:ee:88:80:87:19:6a:c1:96:51:57:1e:51:c2:fc: e2:4d:2a:57 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXsAU3p6GhYFLEXcVape7SqKvtdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDExNDI1MTJaFw0yNjA2MzAxNDMwMTJaMDMxMTAvBgNV BAMTKDFCOENCODMzNDFDODlFMjhBRUE0NjA3RjMxRTlEOUEyMjJFMzFFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9tx181BuNJlbyZhKY9Wk/7ri 7jNXWunq5KBQtCHCsi4XG5aXAy9uwJq3sX0SBqy8SztB/QpprQk8L5wXdx4EmRHt bXS1oh7hA/U7O5oqI40P44sGYUecRj+uK2IFX1cGXszrNWgiVY1aVckf3B9XiVcn 5/IzcQ8X1sX+j6gDHbBYi+lhjmRNumBj8V043Q2f8wCv2GnY3lW2csjgAvZEVVev RifY5hJdq0BDvg63AqBEHaUmoHMDTfKaLsQotwaQwTuPc+T+7zrd2CofLLIEndLr c4Yi5o2dgO/hr9uqPoIKQDWVQBbg1+NQCUHG7vudCWLr564bzfmnBZUpE0s/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbjLgzQcieKK6k YH8x6dmiIuMejDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0RZ M2YzRGZOazhtdG1BaUhxOGpRN1R6c2dBY0JITnZQbkNmS3VOZFVtNzgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dE WTNmM0RmTms4bXRtQWlIcThqUTdUenNnQWNCSE52UG5DZkt1TmRVbTc4LzAvMUI4 Q0I4MzM0MUM4OUUyOEFFQTQ2MDdGMzFFOUQ5QTIyMkUzMUU4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCv/LgMA0EAgACMAcDBQAoBBKMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQFOzANBgkqhkiG9w0BAQsFAAOCAQEAMmKHixDrsnbdopTE H0OsNRhMN8ooMcjRr/ncONoMBX981e1zrT8y6KeXd9GsGQ6Ps2PCs5EqrhRPlqKQ Oz7Yg3OPrWC2diEXuWJRetdsKtJWn/JCSSLwpaUcoouD1a7yjxX/sYsSDjrGWoZM V2EA51RuClW5//Fl4ThvNVGMTpHV7LJdHUCnHBF8iScPnRgs2BpPw8Jo/wSQV19J GuR5K4xx19w5XgORMqwKASSTXlxw24eePh/vHT02RfCgTkXgZXMKqTTWt0whHtFz 4PVF+6zGwF4stnkBsyujJ4oJFqN/pV/teHCU7Coe/ELYku6IgIcZasGWUVceUcL8 4k0qVw== -----END CERTIFICATE-----Generated at Fri Jul 4 08:07:28 2025 by rpki-client