$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer File: 2CE7EAA613A389D3132F70754E25E343490494C5.cer (raw, json) Hash identifier: 9hTcB/mV4AmmEoTYHO+/wGKdPyasRGoSu6xtKkWgKx0= Subject key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09A69E186810D2BE3445F2D9DC79F20BE56E0102 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft caRepository: rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 16:54:56 +0000 Certificate not after: Wed 06 May 2026 16:59:56 +0000 Subordinate resources: AS: 270888 IP: 177.129.240.0/22 IP: 2804:72fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a6:9e:18:68:10:d2:be:34:45:f2:d9:dc:79:f2:0b:e5:6e:01:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 16:54:56 2025 GMT Not After : May 6 16:59:56 2026 GMT Subject: CN=2CE7EAA613A389D3132F70754E25E343490494C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:97:c8:64:56:bc:34:20:38:99:96:5e:b0: 3a:90:59:9a:d1:22:72:42:cb:01:96:a2:19:03:35: 7b:7e:22:cc:87:12:f9:f1:c5:df:82:36:70:bc:13: 34:4b:9b:ac:87:c5:a6:e4:ac:47:e8:c3:bf:64:af: 8e:6e:0e:b0:18:9a:a2:75:4a:aa:f4:27:0b:7a:11: ff:23:9d:bc:80:6d:c9:09:1a:78:92:1f:be:2e:f8: 49:ed:b9:4b:5a:22:ec:ea:bc:44:0a:03:ca:d8:4c: c1:e8:07:20:69:56:f9:b0:ee:57:43:70:bf:3a:7f: d9:57:23:05:25:ad:f2:c9:08:59:6f:f6:2a:93:e9: e4:56:06:43:aa:ee:89:49:b8:88:75:3d:98:d9:d1: dd:7d:24:0b:48:44:07:f1:d3:2b:ee:56:cf:3a:a8: 8d:e7:d9:fe:a9:d2:b5:ee:99:4d:c2:ee:20:3a:be: 23:32:2a:d3:d0:4a:39:27:1b:b9:44:5d:b1:5e:9b: 23:69:8c:af:04:a5:0c:c9:87:cb:c3:40:5f:32:aa: 4d:84:ba:73:63:3b:79:80:40:27:d8:db:37:49:e5: a4:c3:00:b0:b5:36:f4:f9:47:c3:da:bf:9f:97:6b: 76:b4:b2:78:13:63:07:8b:75:ec:e5:f9:44:4d:48: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.240.0/22 IPv6: 2804:72fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270888 Signature Algorithm: sha256WithRSAEncryption 47:b6:8b:4f:55:29:1f:2e:f2:a2:a8:30:8b:a0:98:6b:c0:08: 2e:aa:08:89:19:01:3c:ad:93:68:1d:9a:ae:ed:7d:09:7d:11: 3b:4b:76:e6:c0:50:c6:f5:6b:ca:98:53:2c:43:20:df:13:47: 66:08:4d:66:48:6f:7f:3e:18:e2:16:b0:f6:fe:5d:4f:15:9c: 1c:a3:68:d8:bc:04:15:b9:fb:a7:32:c0:78:98:ff:1f:6e:5e: 82:e4:cb:46:19:73:d6:3c:9c:a6:e8:bc:df:f8:59:ce:07:32: a3:77:a3:52:ce:0c:72:4f:10:d1:8b:bf:7e:cf:41:e6:29:7a: 74:63:29:4b:69:67:49:11:ad:64:e1:c2:44:38:1d:ea:8f:55: a6:7e:84:89:d8:0d:ac:db:e5:9d:d0:e7:95:b6:86:af:a4:fa: 12:a1:ae:cf:d1:dd:fe:7c:8f:24:5f:57:2e:a8:a4:35:76:96: d8:3a:db:bc:b2:01:ac:20:10:ed:02:94:7f:cc:21:d4:ba:a1: b6:73:bb:91:50:de:65:95:44:68:9d:7d:cb:5b:07:98:f8:8a: 5f:80:75:15:9a:b6:4a:8c:07:a3:cd:cd:5a:8e:78:c2:3a:80: 66:d7:e5:39:b5:33:9c:ea:e4:8e:ff:fe:c3:14:f6:c2:60:ba: 41:f7:dd:ad -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCaaeGGgQ0r40RfLZ3HnyC+VuAQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcxNjU0NTZaFw0yNjA1MDYxNjU5NTZaMDMxMTAvBgNV BAMTKDJDRTdFQUE2MTNBMzg5RDMxMzJGNzA3NTRFMjVFMzQzNDkwNDk0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJZfIZFa8NCA4mZZesDqQWZrR InJCywGWohkDNXt+IsyHEvnxxd+CNnC8EzRLm6yHxabkrEfow79kr45uDrAYmqJ1 Sqr0Jwt6Ef8jnbyAbckJGniSH74u+EntuUtaIuzqvEQKA8rYTMHoByBpVvmw7ldD cL86f9lXIwUlrfLJCFlv9iqT6eRWBkOq7olJuIh1PZjZ0d19JAtIRAfx0yvuVs86 qI3n2f6p0rXumU3C7iA6viMyKtPQSjknG7lEXbFemyNpjK8EpQzJh8vDQF8yqk2E unNjO3mAQCfY2zdJ5aTDALC1NvT5R8Pav5+Xa3a0sngTYweLdezl+URNSCOpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs5+qmE6OJ0xMv cHVOJeNDSQSUxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Zm aEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3ZlQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d2 ZmhBY2lFWHkyY1FqVFVqY1hnTXpvVnBuZjNBZHNjcFlZaHh1aDJyd2ZULzAvMkNF N0VBQTYxM0EzODlEMzEzMkY3MDc1NEUyNUUzNDM0OTA0OTRDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsYHwMA0EAgACMAcDBQAoBHL8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiKDANBgkqhkiG9w0BAQsFAAOCAQEAR7aLT1UpHy7yoqgw i6CYa8AILqoIiRkBPK2TaB2aru19CX0RO0t25sBQxvVryphTLEMg3xNHZghNZkhv fz4Y4haw9v5dTxWcHKNo2LwEFbn7pzLAeJj/H25eguTLRhlz1jycpui83/hZzgcy o3ejUs4Mck8Q0Yu/fs9B5il6dGMpS2lnSRGtZOHCRDgd6o9Vpn6EidgNrNvlndDn lbaGr6T6EqGuz9Hd/nyPJF9XLqikNXaW2DrbvLIBrCAQ7QKUf8wh1LqhtnO7kVDe ZZVEaJ19y1sHmPiKX4B1FZq2SowHo83NWo54wjqAZtflObUznOrkjv/+wxT2wmC6 QffdrQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:38 2025 by rpki-client