$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer File: 600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer (raw, json) Hash identifier: qPXB/N+zUkyGVwv5PX0VMNDIVCYYIjKQ1xw/F7vPumY= Subject key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A0615B5DE5ECDD77B00573D51A2AD0A5A5B6C3A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft caRepository: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 20:02:58 +0000 Certificate not after: Fri 14 Aug 2026 20:07:58 +0000 Subordinate resources: AS: 53115 IP: 187.109.192.0/20 IP: 2804:4d48::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:06:15:b5:de:5e:cd:d7:7b:00:57:3d:51:a2:ad:0a:5a:5b:6c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 15 20:02:58 2025 GMT Not After : Aug 14 20:07:58 2026 GMT Subject: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:c8:be:e2:24:be:e3:a1:1d:e1:47:b6:ed: 80:26:90:02:1a:2e:8f:59:5a:6c:b8:3d:73:9b:da: 96:4b:86:9a:a7:d1:15:04:37:e1:f9:23:ba:d0:ac: 3b:55:79:28:55:d6:15:a2:9a:62:1b:f4:0b:57:c7: 74:db:c4:0b:9d:6a:db:95:7f:d3:8c:64:28:7c:b1: 43:27:0c:cc:dc:c3:4b:23:5e:16:45:2f:1a:55:d6: cd:0e:3e:8f:45:f3:33:f8:80:c3:83:33:03:11:92: 59:dd:ff:5d:88:dc:72:49:46:bd:38:8c:27:98:b6: 98:ef:16:32:64:8e:7e:a1:b8:ef:58:11:47:24:91: e8:c9:9b:f8:4f:03:5a:8f:19:80:e2:7c:97:f3:62: d4:db:b7:02:63:49:c0:02:7d:77:df:84:c5:bf:22: 55:46:12:df:53:42:0f:15:e4:85:48:b8:88:42:f7: 10:88:e8:bd:cc:8e:2a:b6:d6:6d:78:7b:f7:b3:6f: 3f:27:5f:84:99:71:fd:ee:b3:fb:8e:b8:42:48:fb: c0:c1:bf:69:22:b7:2f:cc:40:67:15:91:0a:b7:81: e3:47:98:12:a8:ba:ed:99:cb:00:22:a3:e9:15:2e: 4c:5c:70:6d:31:99:b0:38:db:4a:a9:f6:3a:4e:ee: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.109.192.0/20 IPv6: 2804:4d48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53115 Signature Algorithm: sha256WithRSAEncryption 1a:21:05:93:04:40:c4:e3:e6:a2:53:2e:24:f0:15:71:b4:0a: 99:dc:17:81:dd:cc:64:69:02:18:e9:fd:7d:16:98:ed:98:51: 94:68:7d:0e:33:d0:67:f0:1b:6f:e9:09:d6:1d:48:53:5b:b8: 53:20:b6:03:84:a0:ea:fc:e7:40:56:30:0f:6a:70:df:ef:ff: 7a:cf:30:a2:f6:79:75:f5:b9:7f:cf:c3:89:49:ca:63:f2:51: d5:e1:57:76:6b:8f:3c:6d:65:39:f0:e1:50:f8:74:be:5a:de: f3:cf:d2:33:7a:50:11:a6:77:cf:97:db:b6:b9:be:c0:56:5f: 43:c8:65:15:4d:e5:7b:7b:6d:2b:bc:a3:a5:94:58:6d:2c:6c: 6e:1e:1f:f5:24:20:a9:fd:16:b8:55:41:69:f8:60:03:dd:52: 3e:47:d2:d6:f7:6d:66:43:4b:b0:d5:3e:af:2f:ce:18:08:5a: 0a:75:2f:29:36:54:eb:83:b4:e2:b2:f8:e2:6b:c6:97:8d:65: 48:20:3b:fb:1a:0b:5e:34:5e:eb:9e:4d:94:9a:c0:00:db:30: 03:d5:51:ef:66:74:95:05:d3:2f:c6:32:a7:2f:e1:31:18:63: df:c0:82:f2:5d:7e:73:55:b8:f8:9e:cf:76:7a:32:9c:b4:42: 0d:22:ad:f3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGgYVtd5ezdd7AFc9UaKtClpbbDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTUyMDAyNThaFw0yNjA4MTQyMDA3NThaMDMxMTAvBgNV BAMTKDYwMDkyMTkzN0U4QzgyQ0NCQjM1N0ZFODEwM0U3RDMzNTZBNEM2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHsi+4iS+46Ed4Ue27YAmkAIa Lo9ZWmy4PXOb2pZLhpqn0RUEN+H5I7rQrDtVeShV1hWimmIb9AtXx3TbxAudatuV f9OMZCh8sUMnDMzcw0sjXhZFLxpV1s0OPo9F8zP4gMODMwMRklnd/12I3HJJRr04 jCeYtpjvFjJkjn6huO9YEUckkejJm/hPA1qPGYDifJfzYtTbtwJjScACfXffhMW/ IlVGEt9TQg8V5IVIuIhC9xCI6L3Mjiq21m14e/ezbz8nX4SZcf3us/uOuEJI+8DB v2kity/MQGcVkQq3geNHmBKouu2ZywAio+kVLkxccG0xmbA420qp9jpO7jZtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgCSGTfoyCzLs1 f+gQPn0zVqTGvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVE5 U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2RUQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VR OVNoWWlGSDV5a3NmUVZlbWlxTThURVFVazh1anVndnhMTmJ3Q3VDdkVELzEvNjAw OTIxOTM3RThDODJDQ0JCMzU3RkU4MTAzRTdEMzM1NkE0QzZCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEu23AMA0EAgACMAcDBQAoBE1IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDPezANBgkqhkiG9w0BAQsFAAOCAQEAGiEFkwRAxOPmolMu JPAVcbQKmdwXgd3MZGkCGOn9fRaY7ZhRlGh9DjPQZ/Abb+kJ1h1IU1u4UyC2A4Sg 6vznQFYwD2pw3+//es8wovZ5dfW5f8/DiUnKY/JR1eFXdmuPPG1lOfDhUPh0vlre 88/SM3pQEaZ3z5fbtrm+wFZfQ8hlFU3le3ttK7yjpZRYbSxsbh4f9SQgqf0WuFVB afhgA91SPkfS1vdtZkNLsNU+ry/OGAhaCnUvKTZU64O04rL44mvGl41lSCA7+xoL XjRe655NlJrAANswA9VR72Z0lQXTL8Yypy/hMRhj38CC8l1+c1W4+J7PdnoynLRC DSKt8w== -----END CERTIFICATE-----Generated at Wed Aug 20 12:01:01 2025 by rpki-client