$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer File: 2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer (raw, json) Hash identifier: 8mDljMuLqJtMXp89GeN5NqlBp4yBVs2XVJHqqq+AVJc= Subject key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CB164207CB059D7E7BDA46615CC20ACBA8AFC72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft caRepository: rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 23 Aug 2025 12:57:54 +0000 Certificate not after: Sat 22 Aug 2026 13:02:54 +0000 Subordinate resources: AS: 52700 IP: 177.73.84.0/22 IP: 191.240.160.0/22 IP: 2804:110c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b1:64:20:7c:b0:59:d7:e7:bd:a4:66:15:cc:20:ac:ba:8a:fc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 12:57:54 2025 GMT Not After : Aug 22 13:02:54 2026 GMT Subject: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:07:44:63:f8:7f:83:85:0f:5f:ae:0b:8a: a1:65:1e:11:b4:d5:2c:0f:14:1e:1c:30:fe:7e:9e: 48:b6:5a:4d:52:c7:40:c7:33:06:18:1b:91:24:55: dc:aa:eb:04:40:72:fa:32:ec:3c:41:1a:a6:1a:ab: 07:84:61:e2:e1:28:eb:5c:d3:9e:f3:7d:4d:96:82: 6c:9a:bc:07:82:1b:b6:cd:3d:54:30:cf:26:78:04: c4:d7:9e:d5:96:d7:44:59:8d:e2:ec:4d:35:87:b6: ab:5c:44:0c:80:99:43:0b:46:38:02:d3:94:ef:d3: 2f:7b:db:02:09:0e:d2:88:d1:b4:42:b4:1a:b1:8b: dd:3a:dd:a7:5c:4b:52:cb:0a:a4:18:a3:70:cd:a1: 36:18:10:51:61:ea:9c:ed:0b:e1:ef:04:5b:81:df: ad:55:cd:f9:bb:6e:bf:fc:24:03:a5:5f:1a:45:36: e7:a5:a1:30:5c:e9:e7:a3:09:7e:bb:fa:56:75:ad: 25:83:13:c5:48:31:68:f8:50:54:21:51:83:30:f7: 43:a7:50:6f:4a:59:b1:b6:cb:0b:50:8c:4e:0b:d7: f8:b9:b7:7f:6a:b0:07:22:8a:82:63:88:8c:d2:b6: 2c:67:16:22:11:d7:3e:3d:c9:bd:6e:b1:c4:18:4f: c7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.84.0/22 191.240.160.0/22 IPv6: 2804:110c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52700 Signature Algorithm: sha256WithRSAEncryption 1c:f1:8a:c8:14:49:77:12:95:54:22:16:87:57:3b:ae:8f:56: 54:7c:84:7f:d6:be:2b:63:01:a3:08:aa:ba:d3:64:84:df:3a: 54:f9:fd:af:cf:e6:89:dc:b9:f4:e8:e0:62:f4:28:a0:cf:c7: 06:cb:57:3b:a4:c7:a0:0f:66:7c:be:32:24:c5:7b:4e:dc:08: 8f:08:9a:33:06:8f:90:84:07:82:7b:83:8e:72:98:44:a9:63: dc:ae:3a:bc:be:ef:91:87:ba:98:f5:ed:27:77:8c:22:45:b6: 6c:aa:e8:03:f5:e4:dc:ba:7a:ce:39:23:ce:3e:6f:92:df:90: fe:b1:0a:4a:07:fe:48:e8:e3:d9:cc:78:ee:71:a6:f4:72:a0: 6f:e7:66:bc:4b:7a:09:18:52:06:eb:4b:e1:8d:4d:36:13:d1: 95:25:4e:82:b8:a1:d8:0d:3b:e0:fa:9b:90:36:a7:05:8f:a8: 63:7b:c1:41:52:46:10:08:c2:b8:33:56:31:8d:3d:5e:56:d3: 35:27:0b:9a:ba:c5:e1:b3:b0:dc:c4:41:90:68:fe:f7:ba:2c: 34:18:0e:3a:36:96:86:92:4d:67:7b:e7:ef:d7:4a:f6:c4:09: 63:ed:36:93:a7:c6:7e:82:d6:d1:91:c1:d2:15:cc:8a:f5:c6: 2e:53:16:3d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXLFkIHywWdfnvaRmFcwgrLqK/HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjMxMjU3NTRaFw0yNjA4MjIxMzAyNTRaMDMxMTAvBgNV BAMTKDIzMTRGRDkxN0IwRjJCODc1M0EyRDRDQzhEN0ZGODdCRDFEMDhEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9twdEY/h/g4UPX64LiqFlHhG0 1SwPFB4cMP5+nki2Wk1Sx0DHMwYYG5EkVdyq6wRAcvoy7DxBGqYaqweEYeLhKOtc 057zfU2WgmyavAeCG7bNPVQwzyZ4BMTXntWW10RZjeLsTTWHtqtcRAyAmUMLRjgC 05Tv0y972wIJDtKI0bRCtBqxi9063adcS1LLCqQYo3DNoTYYEFFh6pztC+HvBFuB 361Vzfm7br/8JAOlXxpFNueloTBc6eejCX67+lZ1rSWDE8VIMWj4UFQhUYMw90On UG9KWbG2ywtQjE4L1/i5t39qsAciioJjiIzStixnFiIR1z49yb1uscQYT8eJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjFP2Rew8rh1Oi 1MyNf/h70dCNvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjlV ekM5bWV1aFNnd1JoUGd5R1k0dkJKN0tZUGVValZ4VnVWdm9QSkRIb1ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY5 VXpDOW1ldWhTZ3dSaFBneUdZNHZCSjdLWVBlVWpWeFZ1VnZvUEpESG9aLzAvMjMx NEZEOTE3QjBGMkI4NzUzQTJENENDOEQ3RkY4N0JEMUQwOERCRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUlUAwQCv/CgMA0EAgACMAcDBQAoBBEMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN3DANBgkqhkiG9w0BAQsFAAOCAQEAHPGKyBRJ dxKVVCIWh1c7ro9WVHyEf9a+K2MBowiqutNkhN86VPn9r8/midy59OjgYvQooM/H BstXO6THoA9mfL4yJMV7TtwIjwiaMwaPkIQHgnuDjnKYRKlj3K46vL7vkYe6mPXt J3eMIkW2bKroA/Xk3Lp6zjkjzj5vkt+Q/rEKSgf+SOjj2cx47nGm9HKgb+dmvEt6 CRhSButL4Y1NNhPRlSVOgrih2A074PqbkDanBY+oY3vBQVJGEAjCuDNWMY09XlbT NScLmrrF4bOw3MRBkGj+97osNBgOOjaWhpJNZ3vn79dK9sQJY+02k6fGfoLW0ZHB 0hXMivXGLlMWPQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:19:49 2025 by rpki-client