$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer File: 31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer (raw, json) Hash identifier: 5HE8qVBy4Nn+iZ/X0cV1GM5X+F8b9gTYZ8bZs5t1uos= Subject key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DD80002356E8144F9F96D533CAB311BFCE81BFA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft caRepository: rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 18:02:30 +0000 Certificate not after: Fri 17 Jul 2026 18:07:30 +0000 Subordinate resources: AS: 268829 IP: 45.173.220.0/22 IP: 45.229.200.0/22 IP: 2804:5b40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d8:00:02:35:6e:81:44:f9:f9:6d:53:3c:ab:31:1b:fc:e8:1b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 18 18:02:30 2025 GMT Not After : Jul 17 18:07:30 2026 GMT Subject: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:f8:c0:06:11:e1:1b:af:5f:f0:d8:1b:79: f7:87:df:8a:f1:3f:b4:c8:06:e6:80:33:c4:07:e0: 10:c5:91:22:ba:71:00:e3:b0:b6:84:69:12:90:d0: 49:ea:02:12:21:60:3d:10:71:6a:a3:ab:5d:83:1d: c6:06:bf:ab:15:ba:a6:c2:ab:5c:32:13:d8:6c:02: 3c:85:2e:46:27:6b:e2:ec:7f:ec:1a:b1:34:14:68: a5:5e:f4:32:ae:60:93:60:6b:a2:d6:5c:c5:fb:67: 36:09:7f:a7:43:45:7b:b0:25:30:d9:d4:92:1e:5a: ef:ff:e4:4f:a1:f0:77:c7:8c:25:a0:f9:47:e6:eb: fe:e4:52:3a:81:59:82:bd:e1:f3:d6:a3:e3:b4:4d: 29:34:1e:ac:ef:0f:e9:b5:de:69:1f:9d:76:77:04: 90:9c:9f:25:a3:38:d0:5a:da:74:be:35:c2:ad:d1: ee:c2:8a:b5:44:58:b4:a6:4a:67:bb:81:9e:d8:3b: 3a:33:da:bd:7f:72:5e:b2:42:5e:b7:37:8d:c7:bf: 64:f7:ef:3d:b0:c3:ee:81:d3:97:67:8f:4e:11:83: 32:4a:f4:cc:28:8c:88:d7:7c:89:90:f8:36:e0:7a: 8d:fa:b5:e4:78:3e:47:e0:53:b1:c3:3f:15:d2:df: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.220.0/22 45.229.200.0/22 IPv6: 2804:5b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268829 Signature Algorithm: sha256WithRSAEncryption 45:b1:51:95:03:30:c2:ba:77:93:fc:62:e9:27:9b:8a:02:a6: de:5d:8a:93:db:d0:14:d8:73:be:4a:19:7c:02:a1:61:10:42: 27:ac:d2:4d:2f:68:61:e8:80:88:0a:ad:25:c5:b7:c8:74:fe: dd:ef:9f:f5:da:6f:50:05:8d:d7:23:95:fb:5c:cd:88:6a:97: 11:32:d3:a1:e1:00:2b:29:3a:56:70:81:36:2b:cb:bc:4e:bb: df:bd:2a:8e:9e:26:50:4d:78:7d:99:db:84:a1:c0:f6:fe:7b: f0:a2:ca:cc:33:38:73:92:bd:e2:2c:a2:6d:31:8a:79:ff:fe: 9d:02:97:19:fc:1f:e4:16:bb:e2:f0:37:5d:ca:53:47:cd:90: 18:16:80:05:ab:0a:96:4a:d0:c9:6b:c5:6c:c9:1c:a2:ef:a6: 70:10:85:34:f5:7f:20:7b:57:70:45:10:95:b5:04:d3:53:69: 7f:af:2c:15:f7:1a:4d:b1:95:72:6a:ed:a6:9e:2f:98:ac:b6: dd:e1:bb:29:68:b6:ce:70:e6:5f:76:ad:01:06:79:db:b0:41: 4f:f9:e9:f3:30:f1:b3:2f:f7:62:d6:d1:76:e5:9a:dd:de:9b: 86:f0:ff:08:e3:24:b9:dd:b2:37:ab:c8:8c:08:2f:33:8f:a3: 73:0a:4b:a5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIULdgAAjVugUT5+W1TPKsxG/zoG/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTgxODAyMzBaFw0yNjA3MTcxODA3MzBaMDMxMTAvBgNV BAMTKDMxMTkxNzI5QTBDQjUyQ0Q2QUI0MjUzMUQ5RTFCNUIwNTZGNTAyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYPvjABhHhG69f8NgbefeH34rx P7TIBuaAM8QH4BDFkSK6cQDjsLaEaRKQ0EnqAhIhYD0QcWqjq12DHcYGv6sVuqbC q1wyE9hsAjyFLkYna+Lsf+wasTQUaKVe9DKuYJNga6LWXMX7ZzYJf6dDRXuwJTDZ 1JIeWu//5E+h8HfHjCWg+Ufm6/7kUjqBWYK94fPWo+O0TSk0HqzvD+m13mkfnXZ3 BJCcnyWjONBa2nS+NcKt0e7CirVEWLSmSme7gZ7YOzoz2r1/cl6yQl63N43Hv2T3 7z2ww+6B05dnj04RgzJK9MwojIjXfImQ+Dbgeo36teR4PkfgU7HDPxXS3/tXAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxGRcpoMtSzWq0 JTHZ4bWwVvUCCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkNE aHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZWnEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZD RGh4ZUh5Qms0UVB2dUpnYWJmNVJLOVV3VXZyclNKbWRLQ0hQSkE1WVpxLzAvMzEx OTE3MjlBMENCNTJDRDZBQjQyNTMxRDlFMUI1QjA1NkY1MDIwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLa3cAwQCLeXIMA0EAgACMAcDBQAoBFtAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQaHTANBgkqhkiG9w0BAQsFAAOCAQEARbFRlQMw wrp3k/xi6SebigKm3l2Kk9vQFNhzvkoZfAKhYRBCJ6zSTS9oYeiAiAqtJcW3yHT+ 3e+f9dpvUAWN1yOV+1zNiGqXETLToeEAKyk6VnCBNivLvE67370qjp4mUE14fZnb hKHA9v578KLKzDM4c5K94iyibTGKef/+nQKXGfwf5Ba74vA3XcpTR82QGBaABasK lkrQyWvFbMkcou+mcBCFNPV/IHtXcEUQlbUE01Npf68sFfcaTbGVcmrtpp4vmKy2 3eG7KWi2znDmX3atAQZ527BBT/np8zDxsy/3YtbRduWa3d6bhvD/COMkud2yN6vI jAgvM4+jcwpLpQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:19:54 2025 by rpki-client