$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer File: 328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer (raw, json) Hash identifier: iIHw+enpUjI4HEhqsrQSsfC0w4O4W9OxDoyt006Ob8I= Subject key identifier: 32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A6A92B94DE7F0FE85ED86DF14280B3796A69879 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.mft caRepository: rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 09 Aug 2025 14:05:58 +0000 Certificate not after: Sat 08 Aug 2026 14:10:58 +0000 Subordinate resources: AS: 271695 IP: 190.8.8.0/22 IP: 2804:7f8c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6a:92:b9:4d:e7:f0:fe:85:ed:86:df:14:28:0b:37:96:a6:98:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 9 14:05:58 2025 GMT Not After : Aug 8 14:10:58 2026 GMT Subject: CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:c1:e0:64:17:e6:62:65:b5:34:33:af:37: 5f:e9:bc:47:6c:97:30:e7:58:79:2c:f3:70:64:d4: 98:b3:d2:7b:5e:11:7e:52:a3:b4:7f:72:8e:e9:d2: 9c:7d:69:1c:31:4d:ae:b4:4c:e4:27:a0:81:76:3c: d1:3f:2c:6c:be:a0:c8:48:33:cc:be:1a:67:49:a6: 1f:f4:cc:c5:14:7c:e8:46:76:06:a4:dc:14:0a:ad: 67:31:17:e0:7a:2b:6f:be:77:09:fd:7f:32:3a:29: 4b:2e:ed:de:5c:36:fa:80:84:96:35:b4:90:bf:81: d6:7c:04:0a:4a:fc:7c:f7:5d:d2:20:a6:9f:e9:06: e2:a4:39:b4:7d:aa:29:c0:ae:79:64:6f:a3:ea:53: 05:ab:a0:88:96:6d:c1:0d:10:66:3d:0e:e6:68:38: 22:0c:73:89:ee:f7:1c:0f:97:8c:1e:d4:41:67:87: fd:79:60:c4:91:d4:eb:78:0f:21:6d:16:2f:74:d0: c5:10:51:eb:bc:5a:c1:27:fd:58:35:d4:23:b9:c3: 6f:d3:20:86:f2:6a:e9:6c:b4:c9:12:e2:c4:b0:e6: 9f:08:b0:04:d9:f9:eb:6e:e3:d0:3e:67:b1:d3:20: 5f:d5:32:ed:81:6d:43:53:ac:48:ca:15:af:3a:c3: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.8.8.0/22 IPv6: 2804:7f8c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271695 Signature Algorithm: sha256WithRSAEncryption b2:0c:9c:fa:83:9d:26:94:ec:77:d1:7a:cd:96:01:92:1f:d9: 27:6e:c9:cf:2c:08:50:e0:be:8d:af:e5:86:9a:51:19:47:b5: 25:d6:f1:79:ab:30:98:60:f2:4a:a4:1f:13:d8:73:ac:5d:21: e6:44:6d:ed:a7:22:e1:ee:8e:0a:bb:2c:a0:7a:d3:c2:25:c4: bd:45:a3:f2:db:72:f7:85:09:38:61:28:01:e2:58:39:7f:af: 66:4b:e1:89:21:6a:2f:c8:46:99:d9:bd:34:60:2e:f9:3e:84: 9a:7b:33:b5:e4:35:e2:07:66:84:e4:c0:a5:06:85:e6:75:47: 7c:64:8c:83:d8:80:32:9c:60:89:56:ce:55:bd:04:c2:06:db: 42:f8:6e:d9:0c:4c:bd:21:81:e7:0a:77:39:28:7a:d3:dc:5c: e2:4c:31:3b:91:9e:40:18:b7:35:84:63:db:04:49:66:3f:07: c5:52:09:03:f1:a1:f7:61:68:a2:40:55:84:1a:0a:74:52:e6: 15:1b:27:3f:f8:3a:d5:4a:c8:d8:e1:f4:51:3f:6d:4c:96:91: e7:36:d3:0d:d7:d9:d0:21:34:8e:55:a1:a5:9f:44:a6:33:d3: 75:ba:76:34:cd:d8:3f:f8:f7:30:f1:c4:df:2f:5c:32:60:cd: 1f:46:30:c3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOmqSuU3n8P6F7YbfFCgLN5ammHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDkxNDA1NThaFw0yNjA4MDgxNDEwNThaMDMxMTAvBgNV BAMTKDMyODU3M0EwRTRBN0M5RjQ0NjZCRkYwQjZDQjlGODFGRkYzM0VBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1MHgZBfmYmW1NDOvN1/pvEds lzDnWHks83Bk1Jiz0nteEX5So7R/co7p0px9aRwxTa60TOQnoIF2PNE/LGy+oMhI M8y+GmdJph/0zMUUfOhGdgak3BQKrWcxF+B6K2++dwn9fzI6KUsu7d5cNvqAhJY1 tJC/gdZ8BApK/Hz3XdIgpp/pBuKkObR9qinArnlkb6PqUwWroIiWbcENEGY9DuZo OCIMc4nu9xwPl4we1EFnh/15YMSR1Ot4DyFtFi900MUQUeu8WsEn/Vg11CO5w2/T IIbyaulstMkS4sSw5p8IsATZ+etu49A+Z7HTIF/VMu2BbUNTrEjKFa86wyIbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyhXOg5KfJ9EZr /wtsufgf/zPqODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVBF R3NoelBCUkVKWVBKUHNHUlZnbVI5dXNWUXJBaVNFZkt1ZGY2d01aVngvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlQ RUdzaHpQQlJFSllQSlBzR1JWZ21SOXVzVlFyQWlTRWZLdWRmNndNWlZ4LzAvMzI4 NTczQTBFNEE3QzlGNDQ2NkJGRjBCNkNCOUY4MUZGRjMzRUEzOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvggIMA0EAgACMAcDBQAoBH+MMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlTzANBgkqhkiG9w0BAQsFAAOCAQEAsgyc+oOdJpTsd9F6 zZYBkh/ZJ27JzywIUOC+ja/lhppRGUe1JdbxeaswmGDySqQfE9hzrF0h5kRt7aci 4e6OCrssoHrTwiXEvUWj8tty94UJOGEoAeJYOX+vZkvhiSFqL8hGmdm9NGAu+T6E mnszteQ14gdmhOTApQaF5nVHfGSMg9iAMpxgiVbOVb0EwgbbQvhu2QxMvSGB5wp3 OSh609xc4kwxO5GeQBi3NYRj2wRJZj8HxVIJA/Gh92FookBVhBoKdFLmFRsnP/g6 1UrI2OH0UT9tTJaR5zbTDdfZ0CE0jlWhpZ9EpjPTdbp2NM3YP/j3MPHE3y9cMmDN H0Ywww== -----END CERTIFICATE-----Generated at Wed Aug 20 11:54:51 2025 by rpki-client