$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer File: 32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer (raw, json) Hash identifier: ib89xRCMR74BorRxt0xZ0S7xJZ2CH6BfIMekLHSpum8= Subject key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E992D29258FA644268551BC9F0FAE1701CCD7D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft caRepository: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 01:00:27 +0000 Certificate not after: Wed 03 Jun 2026 01:05:27 +0000 Subordinate resources: AS: 268546 IP: 45.169.12.0/22 IP: 45.187.120.0/22 IP: 138.0.148.0/22 IP: 2804:52dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:99:2d:29:25:8f:a6:44:26:85:51:bc:9f:0f:ae:17:01:cc:d7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 01:00:27 2025 GMT Not After : Jun 3 01:05:27 2026 GMT Subject: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:e6:62:be:0c:40:dd:70:50:4b:ae:6b:29: 9a:f0:ae:b2:8b:2c:e2:be:4b:16:b4:d8:6a:42:13: 36:61:fb:7d:c6:ce:7f:76:1b:4c:52:3a:c6:e0:ea: 53:6a:62:3c:50:7b:67:27:a9:8d:8e:4d:3f:1c:42: 4d:e0:74:e1:c6:e8:dd:4f:18:23:34:17:e4:9c:45: ed:ec:a5:c9:b2:7a:51:52:da:1d:00:41:ae:f5:f3: 94:76:91:ab:88:68:05:2d:6d:f9:31:2a:53:23:0f: c2:ab:b9:bf:f5:bc:d1:bd:c0:a1:89:76:21:b5:34: 95:96:54:50:26:47:91:43:16:4b:32:99:82:65:ca: 90:ce:ad:02:51:eb:46:69:98:a7:dc:38:7f:ec:56: 0d:98:0c:4c:e4:de:1c:3e:2b:d8:9d:ce:f3:4e:8c: a7:33:43:4c:d8:b3:0c:12:d7:d3:07:98:c5:f3:ed: 91:7e:5f:cb:8a:87:db:77:cf:4e:60:68:44:16:f1: 31:14:d5:21:02:25:aa:62:fc:d3:40:92:0a:0b:72: 52:13:c5:52:7c:95:85:38:ae:c9:28:04:07:2c:43: 4a:a6:88:f0:4f:1f:94:af:e7:03:e8:a9:80:df:bf: 5f:6b:76:86:51:9f:07:04:10:42:3f:2f:0c:2a:07: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.12.0/22 45.187.120.0/22 138.0.148.0/22 IPv6: 2804:52dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268546 Signature Algorithm: sha256WithRSAEncryption 65:0e:91:1b:52:1b:cd:4a:6f:ee:10:0a:12:60:7f:8a:5d:42: 9f:87:78:f8:c5:0b:bb:33:04:1d:54:4f:e2:63:cf:98:78:86: ae:b9:4a:38:45:6e:c5:d5:03:06:ea:f4:91:4f:5c:d7:7a:ab: 2c:73:e5:0a:d7:4f:82:d4:2d:78:0b:6e:85:5a:55:0c:7a:6b: 19:e1:30:76:5d:94:ae:61:69:dd:26:52:ce:d5:96:93:53:7e: 0f:02:2b:5c:3e:00:46:c2:0d:df:79:ba:4e:00:e1:88:1e:fd: 39:a0:a3:d7:27:ad:44:68:13:b2:ca:9b:3c:85:47:c3:b2:aa: 87:64:9c:4e:b4:2c:60:e5:53:2c:de:34:e9:8f:d3:6c:9c:0f: 26:9b:9f:a5:17:04:48:35:80:e2:96:a5:0b:c3:4b:8b:9f:0b: 63:ca:65:4a:d0:4a:d7:b2:6b:32:64:28:8d:89:f8:d9:19:04: d6:6e:e8:ea:a2:aa:51:90:0d:52:81:6a:aa:38:62:aa:60:ad: 03:18:95:0d:85:f5:b1:7c:fb:01:86:5e:ab:fe:20:46:d0:ac: c9:04:6d:fb:0b:ac:f2:fc:a4:a7:92:1f:86:0b:b1:30:5c:cb: 91:7a:a0:2d:f3:e3:bf:b2:85:61:c9:5c:67:ef:05:ea:e5:7f: f7:11:64:fc -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIULpktKSWPpkQmhVG8nw+uFwHM19EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQwMTAwMjdaFw0yNjA2MDMwMTA1MjdaMDMxMTAvBgNV BAMTKDMyQzNBMjBCRUJFMUFDN0E2QzNFMDk1OENDQjk3MURFQTY0REUxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmuZivgxA3XBQS65rKZrwrrKL LOK+Sxa02GpCEzZh+33Gzn92G0xSOsbg6lNqYjxQe2cnqY2OTT8cQk3gdOHG6N1P GCM0F+ScRe3spcmyelFS2h0AQa7185R2kauIaAUtbfkxKlMjD8Krub/1vNG9wKGJ diG1NJWWVFAmR5FDFksymYJlypDOrQJR60ZpmKfcOH/sVg2YDEzk3hw+K9idzvNO jKczQ0zYswwS19MHmMXz7ZF+X8uKh9t3z05gaEQW8TEU1SECJapi/NNAkgoLclIT xVJ8lYU4rskoBAcsQ0qmiPBPH5Sv5wPoqYDfv19rdoZRnwcEEEI/LwwqB2BdAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyw6IL6+Gsemw+ CVjMuXHepk3htDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkhr R1ZkQjJoUm96ZHFoSkZmZkduTmRpY0I4aG5wdDZKclJvWG1jZ0hnNTMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JI a0dWZEIyaFJvemRxaEpGZmZHbk5kaWNCOGhucHQ2SnJSb1htY2dIZzUzLzAvMzJD M0EyMEJFQkUxQUM3QTZDM0UwOTU4Q0NCOTcxREVBNjRERTFCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLakMAwQCLbt4AwQCigCUMA0EAgACMAcDBQAoBFLc MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQZAjANBgkqhkiG9w0BAQsFAAOCAQEA ZQ6RG1IbzUpv7hAKEmB/il1Cn4d4+MULuzMEHVRP4mPPmHiGrrlKOEVuxdUDBur0 kU9c13qrLHPlCtdPgtQteAtuhVpVDHprGeEwdl2UrmFp3SZSztWWk1N+DwIrXD4A RsIN33m6TgDhiB79OaCj1yetRGgTssqbPIVHw7Kqh2ScTrQsYOVTLN406Y/TbJwP JpufpRcESDWA4palC8NLi58LY8plStBK17JrMmQojYn42RkE1m7o6qKqUZANUoFq qjhiqmCtAxiVDYX1sXz7AYZeq/4gRtCsyQRt+wus8vykp5IfhguxMFzLkXqgLfPj v7KFYclcZ+8F6uV/9xFk/A== -----END CERTIFICATE-----Generated at Sun Nov 2 23:01:45 2025 by rpki-client