$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer File: 530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer (raw, json) Hash identifier: 0IcsZZGFlrN9QmfZak9VtjkFtfAd1nPz7mYG03mymj4= Subject key identifier: 53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6896025ECF73586847A750D1DB4C22BBA81DFE1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.mft caRepository: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 02 Sep 2025 20:58:18 +0000 Certificate not after: Tue 01 Sep 2026 21:03:18 +0000 Subordinate resources: AS: 28587 IP: 177.128.184.0/21 IP: 2804:da0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 15:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:96:02:5e:cf:73:58:68:47:a7:50:d1:db:4c:22:bb:a8:1d:fe:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 20:58:18 2025 GMT Not After : Sep 1 21:03:18 2026 GMT Subject: CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:4c:2a:21:4a:bf:44:f7:76:43:06:98:70: e3:86:ce:2c:b9:cd:58:e4:e8:2d:b2:77:8d:14:a2: 62:59:ab:a8:ba:4f:50:51:68:ca:7c:62:04:90:af: 5d:ba:9b:38:4c:f9:2f:33:a2:d1:11:15:06:29:2a: 64:90:1c:d7:f3:c0:7c:13:3c:1a:63:e0:af:c8:8d: f1:df:5f:a4:cd:50:c6:32:50:3a:37:34:dd:c7:4e: da:c5:c4:3f:34:32:1f:62:f2:1f:60:8e:c5:45:93: 5e:b0:34:ec:f0:d1:b2:7b:49:05:43:50:a6:8b:93: 28:1f:64:07:14:e5:8e:3d:aa:3d:ba:2e:fd:1f:25: 1f:43:c1:0f:9d:c8:b0:f8:e5:cc:92:a0:c5:1e:51: c0:bc:fb:65:6a:b5:61:1a:17:89:10:2e:2d:b7:a0: 4c:e2:a1:a7:9e:ac:fc:bd:1b:9e:0c:1e:ee:9e:b0: 06:1b:90:02:19:c2:af:97:ee:53:91:f5:37:0e:47: 88:43:e1:98:4e:7c:cb:7e:05:7e:b8:8d:08:dc:c4: 44:2e:79:d9:bf:4a:7c:68:47:b4:89:c3:d7:ac:20: be:85:a4:a3:24:45:5a:d1:dd:23:b3:eb:f0:05:38: d6:11:67:0e:fc:c8:4d:a0:a7:8f:dd:95:9a:a4:5a: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.184.0/21 IPv6: 2804:da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28587 Signature Algorithm: sha256WithRSAEncryption 1d:e1:6c:26:f7:e6:fb:6a:bb:86:25:01:a4:86:d4:37:23:7b: a5:4d:93:02:5e:e5:47:a0:64:d0:62:b5:8b:51:a8:fb:24:37: ba:55:9c:04:4e:db:d7:3c:8d:84:e2:97:b2:e0:19:1a:90:95: fd:ad:27:6f:9c:d1:9c:01:26:19:b9:56:3c:85:43:36:37:4c: d0:19:4f:2a:58:01:1e:2d:56:d5:28:d5:eb:ac:34:8e:79:0b: 79:b6:ed:17:50:fd:34:f5:97:0e:1f:48:6e:71:e6:1d:7c:9f: 6b:52:73:12:94:3b:ed:ba:94:7c:3f:df:8c:76:6d:84:89:c9: c8:7d:44:a1:18:15:7d:f8:c3:d5:67:d7:df:11:a1:d9:36:99: 71:d8:14:b1:f5:84:61:63:81:e7:7e:e5:a0:62:fb:b2:96:d5: 9f:ed:45:fd:99:e4:3a:23:03:a7:26:f0:f1:d4:88:97:d5:51: ff:db:8b:41:56:10:e1:9e:93:ee:05:2f:ee:77:3a:a2:80:f2: 0d:c8:1b:08:55:54:d1:d7:67:95:66:68:39:c4:03:3b:e3:d6: 9f:5b:ea:4f:73:c5:ae:00:c8:21:4e:c1:a1:ca:b3:3a:00:60: b2:d8:2d:6a:d6:d4:57:2d:2e:9f:9f:7c:1b:ed:68:53:2f:84: 69:46:90:26 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUaJYCXs9zWGhHp1DR20wiu6gd/h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDIyMDU4MThaFw0yNjA5MDEyMTAzMThaMDMxMTAvBgNV BAMTKDUzMEMyQUVGMjMzQUQ2Njg0QjJDNEU3MDBBNzNGNjgyN0UyODQ4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cEwqIUq/RPd2QwaYcOOGziy5 zVjk6C2yd40UomJZq6i6T1BRaMp8YgSQr126mzhM+S8zotERFQYpKmSQHNfzwHwT PBpj4K/IjfHfX6TNUMYyUDo3NN3HTtrFxD80Mh9i8h9gjsVFk16wNOzw0bJ7SQVD UKaLkygfZAcU5Y49qj26Lv0fJR9DwQ+dyLD45cySoMUeUcC8+2VqtWEaF4kQLi23 oEzioaeerPy9G54MHu6esAYbkAIZwq+X7lOR9TcOR4hD4ZhOfMt+BX64jQjcxEQu edm/SnxoR7SJw9esIL6FpKMkRVrR3SOz6/AFONYRZw78yE2gp4/dlZqkWsMdAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTDCrvIzrWaEss TnAKc/aCfihI9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0cy SkZlcFhjMzlodXFQY3RkOHlxMVJrZHdlcHVYNXBGQlpGVFlHOXhTMjUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdH MkpGZXBYYzM5aHVxUGN0ZDh5cTFSa2R3ZXB1WDVwRkJaRlRZRzl4UzI1LzAvNTMw QzJBRUYyMzNBRDY2ODRCMkM0RTcwMEE3M0Y2ODI3RTI4NDhGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsYC4MA0EAgACMAcDBQAoBA2gMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm+rMA0GCSqGSIb3DQEBCwUAA4IBAQAd4Wwm9+b7aruGJQGk htQ3I3ulTZMCXuVHoGTQYrWLUaj7JDe6VZwETtvXPI2E4pey4BkakJX9rSdvnNGc ASYZuVY8hUM2N0zQGU8qWAEeLVbVKNXrrDSOeQt5tu0XUP009ZcOH0huceYdfJ9r UnMSlDvtupR8P9+Mdm2EicnIfUShGBV9+MPVZ9ffEaHZNplx2BSx9YRhY4HnfuWg YvuyltWf7UX9meQ6IwOnJvDx1IiX1VH/24tBVhDhnpPuBS/udzqigPINyBsIVVTR 12eVZmg5xAM749afW+pPc8WuAMghTsGhyrM6AGCy2C1q1tRXLS6fn3wb7WhTL4Rp RpAm -----END CERTIFICATE-----Generated at Fri Sep 19 13:58:54 2025 by rpki-client