$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer File: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer (raw, json) Hash identifier: gqdfGrA6kxIhJng8+BvZb/tYgmfIP/ZTZINcvyelVds= Subject key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D45F4DFB76C114394382AF6DEDD71E31D8FFC60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft caRepository: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 12:21:58 +0000 Certificate not after: Mon 06 Jul 2026 12:26:58 +0000 Subordinate resources: AS: 269053 IP: 45.179.52.0/23 IP: 2804:5ebc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 04:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:45:f4:df:b7:6c:11:43:94:38:2a:f6:de:dd:71:e3:1d:8f:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 12:21:58 2025 GMT Not After : Jul 6 12:26:58 2026 GMT Subject: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:ff:e1:d9:0c:b2:af:9b:36:a2:84:37:fd: fd:fd:39:e2:fa:62:08:ee:3a:f5:6d:fb:57:0b:e4: 6a:99:2a:88:12:78:1a:ab:70:1a:16:5f:a6:c5:58: 9c:44:93:17:5b:4a:d3:f4:da:9d:b7:26:49:3c:35: 88:fc:fd:75:73:05:ed:94:71:70:e0:c2:aa:02:0c: 9b:99:87:c2:fb:03:bf:d2:7e:58:5d:cd:cc:46:59: 2e:db:74:fa:b3:7f:cc:16:7f:96:a4:11:90:b0:62: 75:d3:09:63:43:fb:fb:f6:2a:4a:7d:51:60:56:f4: a9:c0:57:58:6c:22:d7:3e:0e:1f:f3:b5:1b:70:c5: 9c:17:c1:45:f8:70:de:ef:81:83:b4:13:73:32:f4: 7e:80:12:ed:98:78:90:4a:82:16:7a:15:31:9e:17: 17:64:15:f2:75:fa:a9:f9:4b:ef:c8:06:71:db:97: 1e:5c:91:99:35:e0:71:68:cf:8f:b5:3c:84:a1:a7: 98:a9:60:72:88:7c:24:65:80:f0:ae:b2:a6:95:50: 87:bf:c1:2b:96:17:ca:33:b0:30:e9:89:4d:a1:0a: 8f:57:5d:a6:32:99:53:7b:bf:cb:2e:8d:90:a0:01: 6b:f6:f6:c8:2d:c5:c7:39:b9:a6:e9:5a:44:ca:c3: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.52.0/23 IPv6: 2804:5ebc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269053 Signature Algorithm: sha256WithRSAEncryption ad:e6:41:ca:d1:92:30:a1:2b:2a:da:03:05:c3:81:b8:5a:76: 78:12:27:a2:d3:c0:d1:0a:2b:b4:da:8a:98:77:7c:4e:4e:fd: 81:18:f8:7d:c2:e1:dd:f8:69:b5:9d:d1:e4:5d:5c:27:ad:4f: 51:4f:3b:4d:a7:e6:cb:be:8e:69:2f:8c:c5:f1:4b:b9:ed:62: 2d:aa:a9:e7:4d:ed:ed:71:35:4c:14:dd:9e:b8:9e:de:c5:06: d3:f2:c3:59:c5:65:17:e6:2b:75:31:54:00:bb:72:d8:96:b8: f1:5d:0a:3a:4b:bf:b0:e5:0e:4a:78:ff:0a:ee:b0:b5:c4:f0: 01:30:18:ba:c9:4a:95:73:ad:69:21:09:2d:f0:cd:e4:02:23: 4a:5b:15:3c:0e:29:30:24:b4:94:0e:31:4e:a8:96:6f:40:99: 18:0d:d4:72:39:b1:01:3a:d7:3f:84:9e:f5:3f:3c:5e:cb:28: 0f:d5:3c:13:49:f7:cd:33:62:eb:b6:76:8c:d6:b8:95:f1:96: 23:b5:7e:06:68:27:8a:1c:61:01:cc:6b:b0:bf:c0:ae:0d:7f: 27:9b:37:6f:aa:b0:a2:9e:e6:4a:a0:08:3b:3d:8d:f4:91:38: 85:d3:64:16:21:ed:ad:18:ec:d9:28:c8:8c:5b:75:17:64:c2: 72:07:5d:92 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULUX037dsEUOUOCr23t1x4x2P/GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDcxMjIxNThaFw0yNjA3MDYxMjI2NThaMDMxMTAvBgNV BAMTKDYzM0JERDM0NzU0NzVEOUM4RDYyMzJDQjFGRDkwRkQ1MkNEOENGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CP/h2Qyyr5s2ooQ3/f39OeL6 YgjuOvVt+1cL5GqZKogSeBqrcBoWX6bFWJxEkxdbStP02p23Jkk8NYj8/XVzBe2U cXDgwqoCDJuZh8L7A7/SflhdzcxGWS7bdPqzf8wWf5akEZCwYnXTCWND+/v2Kkp9 UWBW9KnAV1hsItc+Dh/ztRtwxZwXwUX4cN7vgYO0E3My9H6AEu2YeJBKghZ6FTGe FxdkFfJ1+qn5S+/IBnHblx5ckZk14HFoz4+1PIShp5ipYHKIfCRlgPCusqaVUIe/ wSuWF8ozsDDpiU2hCo9XXaYymVN7v8sujZCgAWv29sgtxcc5uabpWkTKwxpXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjO900dUddnI1i Mssf2Q/VLNjP0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGR3 aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4Mk4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hk d2hWUWdjRFA2eUw2THZxdFdKMXZhMXM5UktSSzJZWE1NeGdUVUZ6eDJOLzAvNjMz QkREMzQ3NTQ3NUQ5QzhENjIzMkNCMUZEOTBGRDUyQ0Q4Q0ZEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBLbM0MA0EAgACMAcDBQAoBF68MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQa/TANBgkqhkiG9w0BAQsFAAOCAQEAreZBytGSMKErKtoD BcOBuFp2eBInotPA0QortNqKmHd8Tk79gRj4fcLh3fhptZ3R5F1cJ61PUU87Tafm y76OaS+MxfFLue1iLaqp503t7XE1TBTdnrie3sUG0/LDWcVlF+YrdTFUALty2Ja4 8V0KOku/sOUOSnj/Cu6wtcTwATAYuslKlXOtaSEJLfDN5AIjSlsVPA4pMCS0lA4x TqiWb0CZGA3UcjmxATrXP4Se9T88XssoD9U8E0n3zTNi67Z2jNa4lfGWI7V+Bmgn ihxhAcxrsL/Arg1/J5s3b6qwop7mSqAIOz2N9JE4hdNkFiHtrRjs2SjIjFt1F2TC cgddkg== -----END CERTIFICATE-----Generated at Sun Jul 27 09:54:58 2025 by rpki-client