$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.cer File: 31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.cer (raw, json) Hash identifier: k78BAcHEaehRgpsBf+2A+/L6KtRRsIe5ZFViPqDqvyo= Subject key identifier: 31:FA:0A:E7:94:58:9C:B2:73:4A:9B:6E:6D:94:B2:76:F9:A9:F9:C6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69D2D1D52DF839B3ED5468EB6F35B0B6C6DB7BD1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft caRepository: rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 17:48:12 +0000 Certificate not after: Tue 11 Aug 2026 17:53:12 +0000 Subordinate resources: AS: 272694 IP: 2804:8730::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d2:d1:d5:2d:f8:39:b3:ed:54:68:eb:6f:35:b0:b6:c6:db:7b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 12 17:48:12 2025 GMT Not After : Aug 11 17:53:12 2026 GMT Subject: CN=31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:80:d6:7c:7e:ac:41:59:60:c8:9b:b6:ff: 21:4b:29:be:aa:fe:66:ea:fa:7a:03:0b:16:90:ab: 7f:f7:90:ef:84:12:84:a2:4c:12:c5:74:6b:19:f9: 34:d7:22:b3:39:93:91:c8:f5:7c:2d:f5:d9:7e:50: 47:d0:94:5f:42:0a:bd:d0:0b:82:c3:3f:d5:32:87: 16:ee:8b:4e:16:56:16:9c:49:fb:76:25:d6:73:79: 6f:2e:f3:15:61:cd:e3:91:3b:3a:aa:ba:7b:b7:54: 27:e5:bd:a8:77:7b:71:d4:d1:a4:79:8f:81:fd:40: 7d:47:00:ed:42:01:33:50:f9:0e:a7:d2:88:6d:e5: 9f:78:bd:d0:aa:f6:88:a8:48:a9:e3:52:a6:40:3a: 8c:71:55:2c:f8:40:c3:c7:a3:6c:ad:d9:7e:28:2b: d7:64:b4:4d:78:6b:bc:91:f1:e4:da:47:ee:57:0e: a6:2b:81:08:ac:c4:21:0f:5c:f9:28:91:ff:be:60: 1c:52:c0:0e:a5:c7:a9:0f:67:bf:c6:f9:69:c8:b4: c5:b9:ad:f8:a4:58:77:11:e7:e4:75:00:67:77:d6: 25:7f:53:9f:0f:f8:f6:f4:33:42:c1:68:3d:fd:71: 5d:e1:0a:de:67:c2:46:1f:5f:3b:df:ec:b1:cd:10: f8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:FA:0A:E7:94:58:9C:B2:73:4A:9B:6E:6D:94:B2:76:F9:A9:F9:C6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8730::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272694 Signature Algorithm: sha256WithRSAEncryption ac:46:93:14:08:ce:6e:99:1b:00:39:5e:5d:7d:93:f3:11:53: ec:7c:d6:0d:8f:da:72:66:f8:24:b4:ee:20:f8:4b:80:7b:84: e5:2b:b3:f4:82:8c:85:65:da:9a:83:ec:85:88:cf:e6:3e:8e: 1f:36:7b:43:b2:9b:ce:82:d9:a4:bb:4f:dd:36:0a:45:9d:42: fa:47:25:0d:b8:8d:40:04:e5:33:da:1a:5b:35:df:8b:7e:41: f5:97:99:81:56:3a:c8:d9:56:4c:99:97:06:27:07:c2:ae:7b: a8:89:5a:20:f1:b5:f1:df:21:d6:61:8c:af:a8:90:b2:96:24: 56:65:da:09:db:a6:3e:22:46:c1:4b:d8:cd:8f:07:0b:d3:91: 2c:77:19:a1:ed:63:09:21:dd:3f:9e:1e:21:7a:aa:e6:7c:c4: 2f:3a:e1:8c:df:2a:e1:a3:57:8a:94:e6:25:60:04:21:77:0c: c3:d8:5d:28:be:19:bc:30:5b:1c:e7:d2:09:17:ce:d7:a7:20: 43:b7:9c:2c:41:dc:ef:dd:0e:78:d9:e3:96:b0:63:f2:b8:a1: ff:49:2e:b0:28:89:a3:3e:f9:23:ec:7e:29:2b:4c:f3:9c:e8: a6:a4:eb:f3:c5:31:5d:47:47:50:69:d6:93:90:34:63:27:63: 66:2a:6c:1f -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUadLR1S34ObPtVGjrbzWwtsbbe9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTIxNzQ4MTJaFw0yNjA4MTExNzUzMTJaMDMxMTAvBgNV BAMTKDMxRkEwQUU3OTQ1ODlDQjI3MzRBOUI2RTZEOTRCMjc2RjlBOUY5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+IDWfH6sQVlgyJu2/yFLKb6q /mbq+noDCxaQq3/3kO+EEoSiTBLFdGsZ+TTXIrM5k5HI9Xwt9dl+UEfQlF9CCr3Q C4LDP9Uyhxbui04WVhacSft2JdZzeW8u8xVhzeOROzqqunu3VCflvah3e3HU0aR5 j4H9QH1HAO1CATNQ+Q6n0oht5Z94vdCq9oioSKnjUqZAOoxxVSz4QMPHo2yt2X4o K9dktE14a7yR8eTaR+5XDqYrgQisxCEPXPkokf++YBxSwA6lx6kPZ7/G+WnItMW5 rfikWHcR5+R1AGd31iV/U58P+Pb0M0LBaD39cV3hCt5nwkYfXzvf7LHNEPh9AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQx+grnlFicsnNK m25tlLJ2+an5xjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE1D WGpYcnFqOHVyWUxVb0phQmJBZ3dzOVBoakpoZ1Q1UzRNblBwWEFrYW0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hN Q1hqWHJxajh1cllMVW9KYUJiQWd3czlQaGpKaGdUNVM0TW5QcFhBa2FtLzAvMzFG QTBBRTc5NDU4OUNCMjczNEE5QjZFNkQ5NEIyNzZGOUE5RjlDNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASHMDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KTYwDQYJKoZIhvcNAQELBQADggEBAKxGkxQIzm6ZGwA5Xl19k/MRU+x81g2P2nJm +CS07iD4S4B7hOUrs/SCjIVl2pqD7IWIz+Y+jh82e0Oym86C2aS7T902CkWdQvpH JQ24jUAE5TPaGls134t+QfWXmYFWOsjZVkyZlwYnB8Kue6iJWiDxtfHfIdZhjK+o kLKWJFZl2gnbpj4iRsFL2M2PBwvTkSx3GaHtYwkh3T+eHiF6quZ8xC864YzfKuGj V4qU5iVgBCF3DMPYXSi+GbwwWxzn0gkXztenIEO3nCxB3O/dDnjZ45awY/K4of9J LrAoiaM++SPsfikrTPOc6Kak6/PFMV1HR1Bp1pOQNGMnY2YqbB8= -----END CERTIFICATE-----Generated at Wed Aug 20 12:00:18 2025 by rpki-client