$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer File: 33B6EA309A04207739CA6004EC33B135FCE12550.cer (raw, json) Hash identifier: sffoqCzUUPU3+O1uJtpjfwDEOnPbY/jYjakyiYlmE5Y= Subject key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D4D6FF5A76158E0D07417A23DA9DBB32FACEFEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft caRepository: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 18:31:03 +0000 Certificate not after: Tue 30 Jun 2026 18:36:03 +0000 Subordinate resources: AS: 22133 IP: 200.160.32.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 09:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4d:6f:f5:a7:61:58:e0:d0:74:17:a2:3d:a9:db:b3:2f:ac:ef:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 18:31:03 2025 GMT Not After : Jun 30 18:36:03 2026 GMT Subject: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:89:f5:be:3c:d0:4e:6e:31:02:b3:1a:7a: 25:12:eb:09:a6:8d:2e:5e:3d:00:ca:3e:d8:05:72: ff:09:0c:8e:a0:ac:86:d9:46:b6:79:cf:43:9a:43: 27:14:26:58:dd:e1:3f:af:3b:f9:7d:e0:96:bf:50: c7:30:d5:04:0c:9a:49:4c:12:91:51:0a:11:fe:ec: 3a:57:23:8e:55:c4:c7:8b:ed:9d:2a:f0:71:03:61: 41:96:68:12:76:16:f2:46:e3:97:e2:de:ff:54:5f: 8e:f1:51:e8:54:4a:9a:99:c3:4c:db:9a:56:1f:c6: 0e:b2:ae:31:80:53:f6:7d:2c:14:24:c2:b5:be:5a: e0:5f:d5:a3:4b:4c:be:e1:b0:40:ad:ac:c2:ec:55: 9f:75:1c:5e:4c:b8:5e:fe:24:2a:41:70:e7:61:d3: 78:37:38:b6:81:8a:d4:28:7c:7f:a7:91:42:d9:5f: fb:62:0a:56:dc:f0:8f:5e:80:5a:ab:c7:3b:54:0f: 84:d6:8b:b9:cf:88:9b:c7:f9:a5:3d:19:3e:11:4e: 0f:a1:14:86:f8:04:96:42:92:ae:23:64:9a:ac:2d: 9e:ef:1f:9f:84:32:bf:fa:da:34:bb:ca:b7:93:96: 45:6d:2c:d1:42:86:ea:ed:be:3e:09:61:04:51:b4: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.160.32.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22133 Signature Algorithm: sha256WithRSAEncryption 75:fc:84:c7:22:ad:50:13:27:e2:61:1d:e6:bf:48:4b:d2:fa: cf:a4:84:31:fc:63:f1:95:0c:1d:6f:5e:5a:97:23:e4:66:e3: db:c8:37:a8:0c:86:8d:1f:bf:56:ed:4f:ce:da:c5:1c:d9:93: 44:88:25:2b:02:65:0a:26:17:e5:14:82:32:85:c7:88:bf:76: f2:e9:e9:d5:bc:69:ac:cf:ac:b7:37:5e:95:c6:07:8a:c5:d6: 4e:3f:db:fe:ba:93:b2:79:8a:cf:74:2c:05:54:78:28:0f:eb: 1c:0f:98:ff:8a:af:f1:a2:60:9a:38:a3:bc:dd:11:ec:a0:a5: b9:f5:e9:3d:e9:f0:7b:91:b3:32:de:ce:bb:ec:70:d8:74:1b: 80:3a:a4:c6:37:d3:a5:ff:e6:ee:1e:f8:bc:dc:01:58:9c:13: 79:af:58:37:a2:7b:9d:78:00:6d:fe:fb:d5:73:42:84:f9:57: 30:aa:3d:17:31:69:0f:b8:3b:cc:e4:b1:41:5a:15:70:58:d1: 6e:83:88:ca:04:b1:8a:cc:b4:5f:96:36:3c:18:eb:d2:c8:a1: 38:b1:b8:32:70:31:d2:7a:8d:c6:05:72:ba:44:60:05:c3:db: 6c:86:85:91:eb:be:06:b0:bf:8b:45:f9:2c:b0:9c:9e:fd:cb: 8f:27:77:80 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUfU1v9adhWODQdBeiPanbsy+s7+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDExODMxMDNaFw0yNjA2MzAxODM2MDNaMDMxMTAvBgNV BAMTKDMzQjZFQTMwOUEwNDIwNzczOUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+on1vjzQTm4xArMaeiUS6wmm jS5ePQDKPtgFcv8JDI6grIbZRrZ5z0OaQycUJljd4T+vO/l94Ja/UMcw1QQMmklM EpFRChH+7DpXI45VxMeL7Z0q8HEDYUGWaBJ2FvJG45fi3v9UX47xUehUSpqZw0zb mlYfxg6yrjGAU/Z9LBQkwrW+WuBf1aNLTL7hsECtrMLsVZ91HF5MuF7+JCpBcOdh 03g3OLaBitQofH+nkULZX/tiClbc8I9egFqrxztUD4TWi7nPiJvH+aU9GT4RTg+h FIb4BJZCkq4jZJqsLZ7vH5+EMr/62jS7yreTlkVtLNFChurtvj4JYQRRtM6LAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQztuowmgQgdznK YATsM7E1/OElUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEVG eUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hF RnlCVDluUWZXclluWUJkQ0prQ1VDcmhneldEV0RTQW9INWdlMVdGOTF4LzAvMzNC NkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVGQ0UxMjU1MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEyKAgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlZ1 MA0GCSqGSIb3DQEBCwUAA4IBAQB1/ITHIq1QEyfiYR3mv0hL0vrPpIQx/GPxlQwd b15alyPkZuPbyDeoDIaNH79W7U/O2sUc2ZNEiCUrAmUKJhflFIIyhceIv3by6enV vGmsz6y3N16VxgeKxdZOP9v+upOyeYrPdCwFVHgoD+scD5j/iq/xomCaOKO83RHs oKW59ek96fB7kbMy3s677HDYdBuAOqTGN9Ol/+buHvi83AFYnBN5r1g3onudeABt /vvVc0KE+Vcwqj0XMWkPuDvM5LFBWhVwWNFug4jKBLGKzLRfljY8GOvSyKE4sbgy cDHSeo3GBXK6RGAFw9tshoWR674GsL+LRfkssJye/cuPJ3eA -----END CERTIFICATE-----Generated at Fri Jul 4 08:28:53 2025 by rpki-client