$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer File: 24DA1210F429D91717494C8CC3BF85882918C64A.cer (raw, json) Hash identifier: GpW7RYucVHSIbNraS7KgeyeapWYgaFbCnfPyY+2TiFU= Subject key identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E9E93F30EAADDA6848442B259248707D19F5906 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft caRepository: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 01 Sep 2025 15:12:15 +0000 Certificate not after: Mon 31 Aug 2026 15:17:15 +0000 Subordinate resources: AS: 262290 IP: 138.118.16.0/22 IP: 186.226.200.0/21 IP: 2804:24c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 08:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9e:93:f3:0e:aa:dd:a6:84:84:42:b2:59:24:87:07:d1:9f:59:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 1 15:12:15 2025 GMT Not After : Aug 31 15:17:15 2026 GMT Subject: CN=24DA1210F429D91717494C8CC3BF85882918C64A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:b7:32:2b:cd:22:f2:30:11:bc:1d:78:bd: 9b:cf:25:5a:8b:b0:52:40:e6:38:51:15:8d:50:6f: 42:6c:00:bc:0c:0c:d7:c4:4e:f4:91:a7:49:00:8a: 66:61:aa:92:7f:52:b8:6c:bb:b9:a4:7a:af:4a:bd: 25:83:b7:2a:3c:91:97:f3:0e:b8:2e:6e:0b:46:62: 05:82:c4:ec:40:5d:d5:34:d9:d7:19:50:58:a3:4b: 35:c9:9f:db:58:9f:e5:29:fd:61:c4:a0:68:c4:6d: ee:4b:6a:f6:d7:f0:a4:06:4f:36:b9:a1:97:7a:48: a3:9c:a1:6e:57:70:ad:ec:a6:35:ad:42:6c:a4:24: 5b:8f:1a:b0:ed:57:91:60:4c:94:1b:3d:7d:0a:10: 9c:0e:46:ce:c1:a5:3f:9f:82:35:ba:bc:96:84:c9: 42:bc:45:a6:3d:0f:a0:2a:f8:03:bf:2f:ee:a3:0d: 9d:5a:55:0f:b9:75:07:b0:e5:64:d4:3e:2c:d6:67: 9d:67:a2:00:74:8f:45:08:11:6f:93:dd:57:f8:dd: 48:46:03:67:3c:ab:9b:05:d4:8f:67:83:e6:07:35: fc:6b:db:33:d1:bf:ed:47:da:c6:70:fb:57:56:02: 14:85:16:a6:d3:ce:e7:65:62:68:64:39:99:2d:43: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.16.0/22 186.226.200.0/21 IPv6: 2804:24c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262290 Signature Algorithm: sha256WithRSAEncryption b6:fb:a5:4b:1a:e9:55:88:33:d5:56:bf:5b:0a:20:37:3a:5c: 76:97:6a:7f:dc:ea:4f:37:6e:62:75:03:87:a0:1f:18:13:83: 88:f1:c3:ea:31:be:7a:a9:1a:df:d9:26:b1:25:f4:1c:1e:ad: 70:32:13:75:a8:37:9c:e5:03:2f:b9:54:45:82:56:ad:57:5f: 03:6b:96:62:3b:5f:94:08:09:cb:15:ac:39:51:e1:5e:b0:f3: 07:8f:e5:45:d3:d7:cc:99:42:20:71:16:1f:76:17:cd:45:93: 7f:bf:50:53:94:a9:39:28:2d:2d:30:25:8f:4e:3d:63:15:9e: 7a:ab:21:2e:ce:c1:62:2a:de:32:68:31:b2:8c:a8:c8:32:c2: 53:03:8b:04:e3:0a:7f:2e:35:b3:2f:dc:3c:b2:d7:98:e4:9f: f2:37:83:a3:7c:c4:bc:53:cd:1f:0f:bc:95:99:5c:da:28:94: 12:fb:e8:74:3c:a9:06:8d:7e:ab:42:9a:f4:cf:af:ae:97:45: ec:1d:42:1c:4e:2c:16:47:99:c2:18:c7:87:5c:32:e7:33:94: b8:6a:ff:b6:7f:77:02:d6:3f:b7:ce:2b:c8:64:f1:41:f7:65: ce:0e:e5:41:5a:e4:ac:90:f2:f6:92:28:9e:c0:ba:96:e9:75: 98:93:aa:e7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXp6T8w6q3aaEhEKyWSSHB9GfWQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDExNTEyMTVaFw0yNjA4MzExNTE3MTVaMDMxMTAvBgNV BAMTKDI0REExMjEwRjQyOUQ5MTcxNzQ5NEM4Q0MzQkY4NTg4MjkxOEM2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjbcyK80i8jARvB14vZvPJVqL sFJA5jhRFY1Qb0JsALwMDNfETvSRp0kAimZhqpJ/Urhsu7mkeq9KvSWDtyo8kZfz DrgubgtGYgWCxOxAXdU02dcZUFijSzXJn9tYn+Up/WHEoGjEbe5LavbX8KQGTza5 oZd6SKOcoW5XcK3spjWtQmykJFuPGrDtV5FgTJQbPX0KEJwORs7BpT+fgjW6vJaE yUK8RaY9D6Aq+AO/L+6jDZ1aVQ+5dQew5WTUPizWZ51nogB0j0UIEW+T3Vf43UhG A2c8q5sF1I9ng+YHNfxr2zPRv+1H2sZw+1dWAhSFFqbTzudlYmhkOZktQ9RZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQk2hIQ9CnZFxdJ TIzDv4WIKRjGSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR005 VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVicG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dN OVVQaldTUVJHTTgxTWFjYmY2dDhxVEZlVDhSR2lSUUhSdUhtcHFlYnBuLzAvMjRE QTEyMTBGNDI5RDkxNzE3NDk0QzhDQzNCRjg1ODgyOTE4QzY0QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinYQAwQDuuLIMA0EAgACMAcDBQAoBCTAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAkjANBgkqhkiG9w0BAQsFAAOCAQEAtvulSxrp VYgz1Va/WwogNzpcdpdqf9zqTzduYnUDh6AfGBODiPHD6jG+eqka39kmsSX0HB6t cDITdag3nOUDL7lURYJWrVdfA2uWYjtflAgJyxWsOVHhXrDzB4/lRdPXzJlCIHEW H3YXzUWTf79QU5SpOSgtLTAlj049YxWeeqshLs7BYireMmgxsoyoyDLCUwOLBOMK fy41sy/cPLLXmOSf8jeDo3zEvFPNHw+8lZlc2iiUEvvodDypBo1+q0Ka9M+vrpdF 7B1CHE4sFkeZwhjHh1wy5zOUuGr/tn93AtY/t84ryGTxQfdlzg7lQVrkrJDy9pIo nsC6lul1mJOq5w== -----END CERTIFICATE-----Generated at Thu Sep 18 08:51:19 2025 by rpki-client