$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer File: 59286C095D010494BBABEA22C9AEC94874E4F3C0.cer (raw, json) Hash identifier: nJFBBdzMSaQSH108oZ2XvlvWUPRZxTP0jMZYel4zye4= Subject key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C9171675645A462AAD1E33965F4814328BD6265 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft caRepository: rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Jul 2025 17:15:07 +0000 Certificate not after: Mon 13 Jul 2026 17:20:07 +0000 Subordinate resources: AS: 267121 IP: 45.229.104.0/22 IP: 187.84.148.0/22 IP: 2804:4870::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:91:71:67:56:45:a4:62:aa:d1:e3:39:65:f4:81:43:28:bd:62:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 14 17:15:07 2025 GMT Not After : Jul 13 17:20:07 2026 GMT Subject: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:58:72:fc:36:e1:1e:c6:00:ce:56:e8:1c: 7d:10:b1:38:1c:73:0f:ad:20:ec:a2:2e:e2:fc:3d: d7:bb:40:37:32:3a:78:13:9f:48:7f:1d:fa:1b:38: bf:75:f7:62:b6:75:7a:e5:be:fc:62:5f:82:ba:9b: 58:ff:6d:dc:c7:8a:8a:85:76:e2:96:d7:9a:a7:0d: e1:b8:30:57:32:be:e8:d7:13:a9:95:7e:49:51:e9: 8d:90:47:c0:5a:16:de:6f:66:e6:5d:dc:1b:2b:d2: b9:e5:47:77:d2:08:62:cf:31:56:a8:c9:20:57:9d: b2:d1:05:14:e6:cb:5e:f4:02:1c:26:be:22:8b:43: 3b:27:25:d2:6f:81:0d:22:35:ba:90:a1:e0:91:49: a2:58:05:34:fe:df:af:2f:f0:45:fc:f4:51:a6:1c: e2:35:f0:56:fa:56:c9:95:0a:87:40:22:ef:03:ce: d3:9a:15:a2:13:ab:20:5d:0b:42:3d:b7:a5:e9:a8: 07:eb:a8:31:af:ba:d9:d8:86:ef:f8:cd:ec:60:51: 06:80:18:36:05:d8:ee:0c:10:1f:82:49:c0:7a:ba: fd:d2:42:1a:a9:35:07:b4:9b:40:00:ff:19:4c:5c: 2a:ee:9d:98:dc:25:46:4e:45:8b:9c:a8:03:f4:fc: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.104.0/22 187.84.148.0/22 IPv6: 2804:4870::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267121 Signature Algorithm: sha256WithRSAEncryption 45:ce:53:63:e9:c0:60:04:c9:76:89:c6:de:f9:1d:08:ef:59: ff:1a:2e:b5:dd:3a:0f:07:e7:f3:ec:78:2e:b0:06:1f:c9:1d: da:b2:79:e9:17:dc:3a:71:f1:1a:8c:59:60:2f:ca:9e:02:c3: 04:08:ad:b8:a6:08:ea:ca:87:00:7a:d2:d5:d7:55:df:ef:eb: 76:c5:48:26:7f:1a:d0:0d:d6:36:0f:16:fb:7b:59:63:1f:43: ca:30:a7:f8:8f:6d:d2:18:cc:9b:7a:dd:39:88:af:40:09:49: 47:8a:86:60:8b:fb:cc:f4:f1:9e:0b:a5:18:ab:ba:f3:eb:9d: ba:dc:a4:e3:3c:14:33:12:fe:e4:22:b2:ca:81:22:41:e5:a3: 13:0d:cc:57:22:31:59:05:61:10:76:7c:0c:75:16:ac:6f:f4: f7:ad:51:f2:36:03:0f:26:d1:09:81:11:81:91:27:b2:d2:53: 69:65:0d:0d:6c:03:08:87:fc:74:94:cf:76:96:7d:63:ba:0c: 97:c4:f0:f0:38:a1:65:39:ae:aa:a6:e6:aa:aa:d2:fe:01:91: 24:3b:e4:03:9c:e4:dd:06:71:2c:6a:e0:be:cd:a9:f6:47:2f: 30:8c:2f:0b:ae:6d:78:b0:c1:48:96:47:c8:56:14:be:fc:dc: fe:a6:ea:74 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUfJFxZ1ZFpGKq0eM5ZfSBQyi9YmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTQxNzE1MDdaFw0yNjA3MTMxNzIwMDdaMDMxMTAvBgNV BAMTKDU5Mjg2QzA5NUQwMTA0OTRCQkFCRUEyMkM5QUVDOTQ4NzRFNEYzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvFhy/DbhHsYAzlboHH0QsTgc cw+tIOyiLuL8Pde7QDcyOngTn0h/HfobOL9192K2dXrlvvxiX4K6m1j/bdzHioqF duKW15qnDeG4MFcyvujXE6mVfklR6Y2QR8BaFt5vZuZd3Bsr0rnlR3fSCGLPMVao ySBXnbLRBRTmy170AhwmviKLQzsnJdJvgQ0iNbqQoeCRSaJYBTT+368v8EX89FGm HOI18Fb6VsmVCodAIu8DztOaFaITqyBdC0I9t6XpqAfrqDGvutnYhu/4zexgUQaA GDYF2O4MEB+CScB6uv3SQhqpNQe0m0AA/xlMXCrunZjcJUZORYucqAP0/DT1AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZKGwJXQEElLur 6iLJrslIdOTzwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRh bXhtaUhtVmQzR2FXMkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRh bXhtaUhtVmQzR2FXMkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzU5Mjg2 QzA5NUQwMTA0OTRCQkFCRUEyMkM5QUVDOTQ4NzRFNEYzQzAubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAi3laAMEArtUlDANBAIAAjAHAwUAKARIcDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEE3EwDQYJKoZIhvcNAQELBQADggEBAEXOU2PpwGAE yXaJxt75HQjvWf8aLrXdOg8H5/PseC6wBh/JHdqyeekX3Dpx8RqMWWAvyp4CwwQI rbimCOrKhwB60tXXVd/v63bFSCZ/GtAN1jYPFvt7WWMfQ8owp/iPbdIYzJt63TmI r0AJSUeKhmCL+8z08Z4LpRiruvPrnbrcpOM8FDMS/uQissqBIkHloxMNzFciMVkF YRB2fAx1Fqxv9PetUfI2Aw8m0QmBEYGRJ7LSU2llDQ1sAwiH/HSUz3aWfWO6DJfE 8PA4oWU5rqqm5qqq0v4BkSQ75AOc5N0GcSxq4L7NqfZHLzCMLwuubXiwwUiWR8hW FL783P6m6nQ= -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:43 2025 by rpki-client