$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer File: 59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer (raw, json) Hash identifier: 8zYvOXP+UcaFDn+qBx6lfSlYlOoHfljqAdJBFW0ptNQ= Subject key identifier: 59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2AB5B96580E1934E0B1D593FA3D5D915A368D33D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.mft caRepository: rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 03:02:14 +0000 Certificate not after: Fri 06 Mar 2026 03:07:14 +0000 Subordinate resources: AS: 266449 IP: 170.82.236.0/22 IP: 2804:3800::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b5:b9:65:80:e1:93:4e:0b:1d:59:3f:a3:d5:d9:15:a3:68:d3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 03:02:14 2025 GMT Not After : Mar 6 03:07:14 2026 GMT Subject: CN=59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:58:44:9e:b1:6e:34:50:f0:b6:6d:1a:5b: 91:fe:e9:a2:1d:bb:8b:22:78:de:78:e7:76:9b:0c: 08:a3:d1:cb:48:6e:b7:87:88:12:fb:06:61:5a:9a: 9c:4e:3c:b4:0b:3b:aa:b4:77:18:95:e4:80:be:db: 30:28:2c:9a:57:42:55:db:be:dc:ab:46:5f:84:73: 64:38:02:21:68:9a:53:33:bb:2a:ac:12:c0:20:46: 21:1a:02:26:a3:dd:29:4d:b9:e0:0b:f9:70:29:94: 89:08:f9:7d:f2:cc:44:8b:8c:1b:77:30:b7:31:9e: b8:dc:f7:e2:32:75:78:39:ff:01:c8:b3:d9:97:ce: 4f:fc:1d:89:59:72:f9:18:15:29:b2:62:3c:14:f9: 05:71:2e:e6:bf:ed:ff:1a:58:29:18:f1:29:45:bb: 62:d7:d9:23:34:fd:1a:e4:27:23:5b:a4:2c:d9:ab: a4:50:da:46:8f:6b:c9:be:03:ab:83:a0:17:3f:99: 31:73:d6:47:c1:e0:62:14:d3:c0:39:48:f6:35:85: ba:52:f9:bd:c7:dd:8f:d9:3e:67:81:4d:07:d2:d2: a7:ae:ca:4f:42:d5:9d:36:1e:3d:89:72:c8:f5:d1: b9:36:3b:5f:9b:51:07:58:b9:8e:63:68:0c:99:14: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.236.0/22 IPv6: 2804:3800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266449 Signature Algorithm: sha256WithRSAEncryption 59:2e:6b:e0:a1:eb:20:2e:4e:0c:8c:ce:ff:47:cb:bb:14:bd: 04:94:30:44:84:74:39:c9:2e:12:c1:6e:9d:b2:28:64:5d:2b: 52:e5:aa:17:04:ca:5d:35:18:e7:fd:b7:7d:db:7a:b2:48:93: 5b:8f:ff:9d:bc:2b:fb:ab:85:a8:90:38:84:d7:9b:48:81:ca: 15:38:bb:20:42:5f:de:41:df:a2:5d:b9:79:7c:02:0d:a4:9e: dc:5d:25:8c:4b:d3:5d:63:28:58:ab:a5:70:a1:67:01:30:02: 65:f3:ac:c5:fb:a2:eb:40:af:70:02:77:fe:8f:f9:5c:a4:02: ca:e4:cd:87:fb:8a:05:41:04:46:cb:97:a4:4c:93:8e:ab:30: d8:61:76:9d:47:a2:02:d0:c3:cf:3d:31:37:f4:08:0b:b9:93: a1:e1:b5:4d:c3:20:85:2f:f5:de:4c:37:1a:ab:38:98:b2:19: f0:e0:8e:53:e8:d2:27:9b:63:bd:e5:3e:0e:5f:51:fa:70:f3: a8:0c:13:ff:65:e9:cb:41:46:5b:ba:80:d1:2f:be:d2:e1:73: 6e:73:21:87:c8:a2:72:96:f1:fe:04:22:44:21:2b:e4:50:01: 69:31:10:ea:7c:2f:d2:9e:7e:a5:90:6f:c0:d0:90:e6:da:3d: f1:eb:b4:86 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUKrW5ZYDhk04LHVk/o9XZFaNo0z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMzAyMTRaFw0yNjAzMDYwMzA3MTRaMDMxMTAvBgNV BAMTKDU5RTZDMjJGNUNDNURFQjM5NTY2RDhEOThFODJFMTE5QkY5QzVBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIVhEnrFuNFDwtm0aW5H+6aId u4sieN5453abDAij0ctIbreHiBL7BmFampxOPLQLO6q0dxiV5IC+2zAoLJpXQlXb vtyrRl+Ec2Q4AiFomlMzuyqsEsAgRiEaAiaj3SlNueAL+XAplIkI+X3yzESLjBt3 MLcxnrjc9+IydXg5/wHIs9mXzk/8HYlZcvkYFSmyYjwU+QVxLua/7f8aWCkY8SlF u2LX2SM0/RrkJyNbpCzZq6RQ2kaPa8m+A6uDoBc/mTFz1kfB4GIU08A5SPY1hbpS +b3H3Y/ZPmeBTQfS0qeuyk9C1Z02Hj2Jcsj10bk2O1+bUQdYuY5jaAyZFLYTAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZ5sIvXMXes5Vm 2NmOguEZv5xaSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJv b3ppbmF5YUxCVzlxYWVuRHhYbjI4MVdqQ01GZTZ1ZmFxeVBlcG5pOGEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJv b3ppbmF5YUxCVzlxYWVuRHhYbjI4MVdqQ01GZTZ1ZmFxeVBlcG5pOGEvMS81OUU2 QzIyRjVDQzVERUIzOTU2NkQ4RDk4RTgyRTExOUJGOUM1QTRBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqUuwwDQQCAAIwBwMFACgEOAAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBDRMA0GCSqGSIb3DQEBCwUAA4IBAQBZLmvgoesgLk4MjM7/ R8u7FL0ElDBEhHQ5yS4SwW6dsihkXStS5aoXBMpdNRjn/bd923qySJNbj/+dvCv7 q4WokDiE15tIgcoVOLsgQl/eQd+iXbl5fAINpJ7cXSWMS9NdYyhYq6VwoWcBMAJl 86zF+6LrQK9wAnf+j/lcpALK5M2H+4oFQQRGy5ekTJOOqzDYYXadR6IC0MPPPTE3 9AgLuZOh4bVNwyCFL/XeTDcaqziYshnw4I5T6NInm2O95T4OX1H6cPOoDBP/ZenL QUZbuoDRL77S4XNucyGHyKJylvH+BCJEISvkUAFpMRDqfC/Snn6lkG/A0JDm2j3x 67SG -----END CERTIFICATE-----Generated at Mon Nov 3 05:39:43 2025 by rpki-client