$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer File: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer (raw, json) Hash identifier: KEgI4jSP/od6cez8FVgLCY/er+3dMR0LIstdv+L6CUo= Subject key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A157E73D05BCC81C5774BA261411C3C1E2EFF46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft caRepository: rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 15:38:15 +0000 Certificate not after: Wed 01 Jul 2026 15:43:15 +0000 Subordinate resources: AS: 61937 IP: 45.70.104.0/22 IP: 45.229.124.0/22 IP: 168.195.210.0/24 IP: 189.45.160.0/20 IP: 200.95.192.0/19 IP: 2804:1884::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:15:7e:73:d0:5b:cc:81:c5:77:4b:a2:61:41:1c:3c:1e:2e:ff:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 2 15:38:15 2025 GMT Not After : Jul 1 15:43:15 2026 GMT Subject: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:84:bc:ed:8f:a5:21:be:72:71:64:61:a0: 94:37:a8:06:c1:1e:d5:2a:cc:f9:f8:00:ec:4d:f4: b3:bb:9d:5a:bf:62:b5:b4:73:d2:1a:3b:75:0f:57: 1c:5e:c4:6e:dc:f4:94:87:29:55:c8:18:fa:e9:6c: 0f:ea:9d:24:b5:83:05:c5:40:b3:80:2d:2d:16:ec: cc:06:f1:05:d5:90:24:3d:a1:eb:a6:16:bb:42:5d: ff:4d:ac:2c:11:9d:c9:49:ae:d0:fc:55:ba:c6:9d: 2e:71:d7:41:8a:87:c2:bb:00:14:df:9e:d0:28:aa: 3c:ea:d0:94:57:77:b4:e9:b6:11:54:a8:0d:40:76: cc:93:2f:39:38:a7:58:65:84:f9:82:34:82:91:e0: e7:7d:83:7c:6e:70:cd:e3:db:0e:b8:a7:12:bb:fe: 37:58:53:dd:4b:c0:43:69:52:9f:56:03:aa:33:7d: 6d:41:ef:f0:b2:e9:64:e5:95:16:d6:4a:70:ae:9a: 59:6e:df:1f:ba:66:72:c0:80:7e:64:25:a6:44:27: f6:6e:72:5c:7c:39:6b:63:94:72:69:82:64:e2:32: ec:77:42:75:cd:92:55:52:60:d1:0c:cd:3c:d1:87: 05:b9:d5:03:1d:a3:2f:dd:93:ad:7c:b5:e3:51:15: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.104.0/22 45.229.124.0/22 168.195.210.0/24 189.45.160.0/20 200.95.192.0/19 IPv6: 2804:1884::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61937 Signature Algorithm: sha256WithRSAEncryption 8a:69:00:58:07:f3:4d:bb:d6:82:37:cf:d9:b9:e2:21:48:fc: ef:93:62:8e:04:5e:00:26:39:5c:32:65:3d:85:a4:4d:1c:8b: 9e:ae:8f:53:03:f6:28:83:17:94:ea:93:a3:0e:87:7b:53:70: 1c:88:f3:78:94:cd:00:00:82:08:ab:a2:57:3e:30:45:14:15: ad:ee:d8:f7:41:14:5c:01:b0:b2:37:a6:81:c0:9c:e6:30:96: ca:18:36:60:c1:71:c4:e4:7a:13:34:a7:1f:4e:6a:9a:09:4c: 53:3e:07:b3:a9:b5:15:e7:aa:6f:57:18:ff:20:3b:0a:a5:c8: 18:50:8d:df:39:19:da:88:ad:4a:4f:57:46:41:5e:37:22:38: 84:96:37:16:42:7c:d1:d7:74:2c:30:66:ca:4c:1c:92:3c:d8: aa:6f:17:38:2d:3b:b8:48:f6:2b:bb:28:de:40:2f:99:13:36: 1b:54:ae:ec:54:51:c8:9e:1a:83:12:e1:92:ad:0f:ae:45:50: ee:c3:ff:b5:84:9b:5e:3e:63:8d:06:bd:3c:94:85:5e:a7:56: d1:14:3f:a7:92:92:4f:bf:6d:5e:e8:0c:ca:64:c4:2f:33:14: b5:2f:e2:2c:c3:30:e5:79:f4:f3:92:0b:7f:55:54:f1:1f:e5: 7d:e2:9d:d1 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUahV+c9BbzIHFd0uiYUEcPB4u/0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDIxNTM4MTVaFw0yNjA3MDExNTQzMTVaMDMxMTAvBgNV BAMTKDQ0RDJDQjY0NkY0OEJBMjE0QUEyOEEyREI4OTRDNEFCNzUwMjBDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H4S87Y+lIb5ycWRhoJQ3qAbB HtUqzPn4AOxN9LO7nVq/YrW0c9IaO3UPVxxexG7c9JSHKVXIGPrpbA/qnSS1gwXF QLOALS0W7MwG8QXVkCQ9oeumFrtCXf9NrCwRnclJrtD8VbrGnS5x10GKh8K7ABTf ntAoqjzq0JRXd7TpthFUqA1AdsyTLzk4p1hlhPmCNIKR4Od9g3xucM3j2w64pxK7 /jdYU91LwENpUp9WA6ozfW1B7/Cy6WTllRbWSnCumllu3x+6ZnLAgH5kJaZEJ/Zu clx8OWtjlHJpgmTiMux3QnXNklVSYNEMzTzRhwW51QMdoy/dk618teNRFZ+/AgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE0stkb0i6IUqi ii24lMSrdQIM5zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWVy ZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRWeVovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzll cmZ3TFlLcnFrUEVpcTFpVmg0VEUzeWVXU0NnV28xNXZiZTZ6RXc0VnlaLzEvNDRE MkNCNjQ2RjQ4QkEyMTRBQTI4QTJEQjg5NEM0QUI3NTAyMENFNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCLUZoAwQCLeV8AwQAqMPSAwQEvS2gAwQFyF/AMA0E AgACMAcDBQAoBBiEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDx8TANBgkqhkiG 9w0BAQsFAAOCAQEAimkAWAfzTbvWgjfP2bniIUj875NijgReACY5XDJlPYWkTRyL nq6PUwP2KIMXlOqTow6He1NwHIjzeJTNAACCCKuiVz4wRRQVre7Y90EUXAGwsjem gcCc5jCWyhg2YMFxxOR6EzSnH05qmglMUz4Hs6m1Feeqb1cY/yA7CqXIGFCN3zkZ 2oitSk9XRkFeNyI4hJY3FkJ80dd0LDBmykwckjzYqm8XOC07uEj2K7so3kAvmRM2 G1Su7FRRyJ4agxLhkq0PrkVQ7sP/tYSbXj5jjQa9PJSFXqdW0RQ/p5KST79tXugM ymTELzMUtS/iLMMw5Xn085ILf1VU8R/lfeKd0Q== -----END CERTIFICATE-----Generated at Tue Jul 29 12:04:02 2025 by rpki-client