$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer File: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer (raw, json) Hash identifier: oj7fK/LbSv+C+XNyGMzkfZTm7M70MtOY9YMHryNq6P0= Subject key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E673D47AE0E0A85661867A9B844EAD60091CA76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft caRepository: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 22:56:34 +0000 Certificate not after: Tue 16 Jun 2026 23:01:34 +0000 Subordinate resources: AS: 270253 IP: 200.110.204.0/22 IP: 2804:692c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:67:3d:47:ae:0e:0a:85:66:18:67:a9:b8:44:ea:d6:00:91:ca:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 17 22:56:34 2025 GMT Not After : Jun 16 23:01:34 2026 GMT Subject: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:e3:ed:f0:bb:74:dc:61:fc:76:9c:02:b3: 8a:e8:43:99:1a:81:2b:be:dd:aa:02:a2:71:65:3e: 54:df:88:da:35:a8:2d:8b:d0:ff:23:d7:c7:32:8c: 5c:3f:f2:d0:4c:1e:4e:b0:25:86:3f:eb:1a:40:ec: 71:ae:9a:cb:df:f8:f8:78:95:22:76:e7:ac:58:80: 69:0c:df:09:b1:67:79:06:77:a1:ab:fb:5a:f7:26: 80:4a:4e:a2:c3:aa:fb:75:ae:00:81:3b:54:a0:fd: 87:8f:47:f1:d0:76:7a:fa:c4:fc:44:c2:f5:1c:3c: 7c:2d:9c:bf:d9:83:b8:8a:41:f1:d9:b6:39:01:10: 68:fb:1f:d7:02:42:eb:b8:fc:9d:25:ca:a6:21:cd: 5d:72:2c:fa:66:bf:86:04:a5:b6:ca:e4:99:62:4d: e0:fc:0e:f6:40:b3:d5:18:52:6b:c0:51:2b:0f:51: 2c:90:bb:6c:fd:80:e9:a7:fa:1c:a8:69:cd:ed:91: 11:fa:e7:92:8f:08:37:8b:b2:ec:97:66:85:68:d4: 2e:b6:d4:2d:d4:af:66:71:e5:e8:82:2a:15:0b:f9: 93:70:b1:e9:9e:9c:c8:d1:80:79:be:a6:8f:cd:6d: 38:c9:ad:8a:14:8d:e8:eb:1c:ce:0f:72:f9:54:04: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.110.204.0/22 IPv6: 2804:692c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270253 Signature Algorithm: sha256WithRSAEncryption 5e:d0:c7:d7:82:93:0d:86:36:63:47:f6:a7:c0:a1:c0:1e:23: e9:ef:3e:18:60:73:0d:30:5f:e1:c7:44:82:cf:8f:2b:d6:c6: 95:0b:cd:2c:85:b6:97:c7:b6:1c:42:15:d9:e9:2a:91:d9:c1: 71:fe:0c:95:e5:38:60:86:62:26:39:d8:7d:d6:ef:a7:04:19: 75:7e:c7:2c:39:99:5b:de:cd:52:d5:7b:77:25:46:ff:30:00: c9:82:b0:bb:aa:6c:d0:8f:18:b9:99:81:2b:ec:4e:d0:9e:7d: 22:f3:76:83:64:11:59:75:82:34:94:ed:0b:6d:52:4d:58:b1: a5:7c:44:28:3d:9e:e4:30:da:88:2d:91:b1:97:90:60:c6:81: 68:36:4b:d3:80:08:4c:a9:0f:d2:40:c0:61:25:d7:98:c5:42: cb:91:c6:53:96:45:60:19:17:df:7c:fc:9d:9c:6c:75:7f:06: 01:f8:1a:dc:4e:5c:ca:90:ad:e9:25:64:d2:40:90:10:84:16: 0f:06:41:05:be:7c:52:a5:4c:16:d7:bb:24:05:69:91:c5:75: a5:c7:83:a0:ab:36:d4:5a:3b:72:59:22:6e:a1:15:a2:5a:ad: 7d:09:06:24:f8:58:54:5b:79:b9:72:88:dd:04:98:6e:2a:cc: 91:6c:23:09 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPmc9R64OCoVmGGepuETq1gCRynYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTcyMjU2MzRaFw0yNjA2MTYyMzAxMzRaMDMxMTAvBgNV BAMTKDIxMUYzRDQyMEExMzZBRTczOTVBMzY3QzBEQzJDNzMwRDNCODRDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWuPt8Lt03GH8dpwCs4roQ5ka gSu+3aoConFlPlTfiNo1qC2L0P8j18cyjFw/8tBMHk6wJYY/6xpA7HGumsvf+Ph4 lSJ256xYgGkM3wmxZ3kGd6Gr+1r3JoBKTqLDqvt1rgCBO1Sg/YePR/HQdnr6xPxE wvUcPHwtnL/Zg7iKQfHZtjkBEGj7H9cCQuu4/J0lyqYhzV1yLPpmv4YEpbbK5Jli TeD8DvZAs9UYUmvAUSsPUSyQu2z9gOmn+hyoac3tkRH655KPCDeLsuyXZoVo1C62 1C3Ur2Zx5eiCKhUL+ZNwsemenMjRgHm+po/NbTjJrYoUjejrHM4PcvlUBMa1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhHz1CChNq5zla NnwNwscw07hMvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jj NDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi YzQ4NnRjeUJhdmFvaFdmNjlvTDhCdlgyQjlBVHg1WlBOTlRUUXAzOFJyLzAvMjEx RjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBEM0I4NENCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyG7MMA0EAgACMAcDBQAoBGksMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQfrTANBgkqhkiG9w0BAQsFAAOCAQEAXtDH14KTDYY2Y0f2 p8ChwB4j6e8+GGBzDTBf4cdEgs+PK9bGlQvNLIW2l8e2HEIV2ekqkdnBcf4MleU4 YIZiJjnYfdbvpwQZdX7HLDmZW97NUtV7dyVG/zAAyYKwu6ps0I8YuZmBK+xO0J59 IvN2g2QRWXWCNJTtC21STVixpXxEKD2e5DDaiC2RsZeQYMaBaDZL04AITKkP0kDA YSXXmMVCy5HGU5ZFYBkX33z8nZxsdX8GAfga3E5cypCt6SVk0kCQEIQWDwZBBb58 UqVMFte7JAVpkcV1pceDoKs21Fo7clkibqEVolqtfQkGJPhYVFt5uXKI3QSYbirM kWwjCQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:04:15 2025 by rpki-client