$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer File: 7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer (raw, json) Hash identifier: ++IwgTIL3mXib0EMNL0ECVoom/maqBUJgzmSnaTAhbI= Subject key identifier: 7A:F2:51:28:E8:7A:F7:9D:E2:10:4B:62:1E:ED:A3:FB:A5:B3:9E:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A451D0BC250703C49783DA1B2C4B54955BE7865 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.mft caRepository: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 15:30:19 +0000 Certificate not after: Fri 31 Jul 2026 15:35:19 +0000 Subordinate resources: AS: 273728 IP: 2804:8b5c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:45:1d:0b:c2:50:70:3c:49:78:3d:a1:b2:c4:b5:49:55:be:78:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 1 15:30:19 2025 GMT Not After : Jul 31 15:35:19 2026 GMT Subject: CN=7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:29:e9:97:db:75:7f:2b:bc:e5:7c:13:c8: e2:3e:0e:df:51:a1:15:18:d7:7b:7b:24:f7:60:c1: fe:04:5a:1b:55:20:82:05:99:24:26:ad:bc:0a:95: d8:34:d9:f8:27:7a:d9:34:f6:f9:22:28:d0:7b:c4: 13:93:a4:3e:89:80:b7:5a:77:51:c9:09:d6:4d:e0: b4:6f:48:78:40:d1:72:1b:58:84:d2:f5:11:95:ef: 1a:7c:8b:ce:91:3a:07:06:6d:f8:95:c7:79:c7:0b: f1:99:97:17:62:aa:ad:8a:38:3e:62:ed:7b:98:be: 11:d2:1c:85:ae:c8:bf:6e:f8:6b:75:4e:cb:e4:15: 51:5f:d5:92:bc:26:19:d1:6c:6f:bc:bb:fb:03:03: 34:12:9c:18:3b:d7:da:51:07:a1:57:8c:66:d7:c4: 77:fd:23:80:66:99:0c:8e:4b:40:ac:4d:35:6f:b6: e4:dd:28:60:a1:fd:20:ae:cc:58:85:e5:c2:a9:f5: 0f:17:14:05:a0:9b:a9:87:d9:a0:8f:55:f8:72:6f: 21:22:48:55:66:34:8e:d1:12:28:fd:0b:33:3a:2a: 9d:09:42:ee:9f:37:da:15:05:aa:9c:59:70:8e:bd: 6c:4a:05:c1:41:a2:16:79:b5:24:d7:a7:c6:24:72: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:F2:51:28:E8:7A:F7:9D:E2:10:4B:62:1E:ED:A3:FB:A5:B3:9E:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b5c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273728 Signature Algorithm: sha256WithRSAEncryption b7:03:b1:01:27:bb:82:9b:25:a8:e0:b1:4f:ac:17:78:38:db: 71:c1:e9:b2:42:ae:e6:a1:03:ec:89:fd:e6:8a:b3:64:ec:6e: 8e:04:f1:45:61:fa:99:cc:02:f5:cb:a2:af:b4:73:ca:30:24: 07:2a:c0:a1:13:80:f7:c3:2a:8c:54:2b:bb:30:40:51:21:ee: c4:d6:38:d1:4f:4e:fe:9f:15:68:00:46:5d:c1:bf:bf:c8:26: 68:41:5d:14:a7:e5:eb:11:40:3f:1b:e8:d5:f6:e6:fd:59:58: 27:97:53:b1:33:ad:3f:c9:0f:b3:f4:a3:5e:c5:8b:0c:0b:6b: 2c:f3:38:9e:66:1c:e9:90:13:06:b7:f7:a1:c7:20:e9:85:75: 8c:a3:4a:f1:e4:82:c0:0f:90:96:fc:4d:33:50:6e:fe:78:97: 78:6a:e7:bd:d7:a6:fa:0d:11:55:27:37:4b:c8:d1:34:65:ac: 13:e4:83:75:fe:7d:83:a0:1b:bd:d6:c5:74:a2:da:0f:e2:cf: 29:c5:43:73:e7:c1:b4:75:cc:10:e2:d4:e1:55:e3:81:3c:ad: d3:72:0a:42:9d:67:69:09:cd:64:f6:44:a0:99:bd:97:e2:0a: 51:f6:b9:2b:cd:01:f6:e3:de:67:89:28:ce:bf:5c:31:30:4f: 45:26:c5:a6 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUWkUdC8JQcDxJeD2hssS1SVW+eGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDExNTMwMTlaFw0yNjA3MzExNTM1MTlaMDMxMTAvBgNV BAMTKDdBRjI1MTI4RTg3QUY3OURFMjEwNEI2MjFFRURBM0ZCQTVCMzlFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Einpl9t1fyu85XwTyOI+Dt9R oRUY13t7JPdgwf4EWhtVIIIFmSQmrbwKldg02fgnetk09vkiKNB7xBOTpD6JgLda d1HJCdZN4LRvSHhA0XIbWITS9RGV7xp8i86ROgcGbfiVx3nHC/GZlxdiqq2KOD5i 7XuYvhHSHIWuyL9u+Gt1TsvkFVFf1ZK8JhnRbG+8u/sDAzQSnBg719pRB6FXjGbX xHf9I4BmmQyOS0CsTTVvtuTdKGCh/SCuzFiF5cKp9Q8XFAWgm6mH2aCPVfhybyEi SFVmNI7REij9CzM6Kp0JQu6fN9oVBaqcWXCOvWxKBcFBohZ5tSTXp8YkchIpAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR68lEo6Hr3neIQ S2Ie7aP7pbOe+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkNn b2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpRWm8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pD Z29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAvN0FG MjUxMjhFODdBRjc5REUyMTA0QjYyMUVFREEzRkJBNUIzOUVGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLXDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LUAwDQYJKoZIhvcNAQELBQADggEBALcDsQEnu4KbJajgsU+sF3g423HB6bJCruah A+yJ/eaKs2Tsbo4E8UVh+pnMAvXLoq+0c8owJAcqwKETgPfDKoxUK7swQFEh7sTW ONFPTv6fFWgARl3Bv7/IJmhBXRSn5esRQD8b6NX25v1ZWCeXU7EzrT/JD7P0o17F iwwLayzzOJ5mHOmQEwa396HHIOmFdYyjSvHkgsAPkJb8TTNQbv54l3hq573XpvoN EVUnN0vI0TRlrBPkg3X+fYOgG73WxXSi2g/izynFQ3PnwbR1zBDi1OFV44E8rdNy CkKdZ2kJzWT2RKCZvZfiClH2uSvNAfbj3meJKM6/XDEwT0UmxaY= -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:35 2025 by rpki-client