$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer File: 7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer (raw, json) Hash identifier: iU8pBWFA8Y9LH1HZGcHAcjbPhuEhJjh0C23MdiiuZZE= Subject key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 301C3846FE66F1DAD58E0FA1DBCC52B4ABFECE66 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft caRepository: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Aug 2025 17:00:35 +0000 Certificate not after: Tue 25 Aug 2026 17:05:35 +0000 Subordinate resources: AS: 268738 IP: 45.71.28.0/22 IP: 45.171.44.0/22 IP: 2804:59fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 08:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1c:38:46:fe:66:f1:da:d5:8e:0f:a1:db:cc:52:b4:ab:fe:ce:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 17:00:35 2025 GMT Not After : Aug 25 17:05:35 2026 GMT Subject: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:6f:69:3e:86:68:30:4c:bd:aa:51:29:b7: b1:60:d6:fb:16:48:d3:61:4f:6f:e1:64:94:17:72: 2f:d4:2a:56:2a:15:50:87:b8:9b:af:72:7d:ea:12: 8e:7c:40:0e:38:60:8a:9a:00:54:f4:b0:43:71:ef: 68:23:47:3d:d4:5d:05:dc:54:09:fa:8b:1b:36:7b: d9:17:9c:11:cc:42:60:b0:8c:42:a7:e8:02:1e:b5: e4:99:24:8e:29:e7:b9:b7:6a:f7:5f:c6:f1:3d:77: b0:df:9e:0a:54:7f:67:17:0e:51:82:e1:d2:81:e8: 29:3b:f5:be:f6:31:d1:50:f1:97:36:9d:90:e2:56: ed:d6:a4:79:8d:b7:38:74:fc:a8:21:11:8e:bf:09: 70:21:68:4b:e9:92:49:d1:d1:ee:5a:0d:89:df:36: fd:b5:da:5c:47:8a:2d:9f:73:d2:f9:0b:05:9d:10: d4:5b:a7:1a:d2:cc:76:00:b7:85:a1:cb:89:1c:95: 3b:30:d0:f9:03:4a:51:79:fb:5d:da:ee:09:04:65: 34:f8:2b:62:6b:73:de:11:c3:a1:c6:74:2e:eb:87: e3:8c:d8:e8:b4:5e:30:7c:21:5e:6c:eb:e6:d5:60: 3a:c7:8f:18:e5:1d:5a:1c:c0:3f:dd:48:69:ce:1b: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.28.0/22 45.171.44.0/22 IPv6: 2804:59fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268738 Signature Algorithm: sha256WithRSAEncryption ac:08:db:74:ef:a1:0e:19:d4:db:cb:30:32:8c:60:f0:ad:10: 49:ba:91:6f:4a:ae:c0:7f:b1:ca:d5:8e:3e:b1:0e:9f:dd:ca: e1:05:99:0e:5b:ee:21:03:84:ac:44:fb:cc:b0:3f:40:b5:79: 99:cd:fc:10:cf:0f:90:1d:2c:45:2f:d5:b0:8b:b0:d1:c0:d7: 9b:eb:af:a2:8a:50:db:6d:e9:e5:34:57:30:e7:70:9f:37:00: 4c:da:e3:c4:48:a7:d4:56:47:f6:a1:49:e1:21:1f:60:39:86: 49:cf:e4:17:86:18:ac:ae:f0:b8:a3:e0:12:f7:df:b4:a4:cc: e6:25:83:f4:51:e1:91:13:6c:0f:38:24:dc:4e:9f:47:86:fb: 21:51:a8:a2:6a:d5:b1:3b:6e:d3:e9:90:60:9b:37:df:3e:02: 92:76:31:65:a4:17:06:7f:77:1e:ed:32:b4:44:c5:b3:22:3b: e4:3b:c5:51:25:60:a1:60:cd:0d:eb:c9:e1:ac:81:b9:88:8f: 6d:41:b5:02:eb:14:e6:74:d4:0a:8e:e1:ec:94:f0:71:6a:ed: 84:6e:8d:b9:c7:d2:ef:d9:70:ed:19:74:07:6b:4a:51:bb:1e: 25:cf:54:2a:df:e1:a9:f4:45:da:d7:e3:0e:3d:0f:92:94:26: 38:eb:4d:9e -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUMBw4Rv5m8drVjg+h28xStKv+zmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjYxNzAwMzVaFw0yNjA4MjUxNzA1MzVaMDMxMTAvBgNV BAMTKDdCRTdCMTAyMDZCNUI1NkMwRjUwMEExQTcxRTgyQTVDRDkxQkNGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65G9pPoZoMEy9qlEpt7Fg1vsW SNNhT2/hZJQXci/UKlYqFVCHuJuvcn3qEo58QA44YIqaAFT0sENx72gjRz3UXQXc VAn6ixs2e9kXnBHMQmCwjEKn6AIeteSZJI4p57m3avdfxvE9d7DfngpUf2cXDlGC 4dKB6Ck79b72MdFQ8Zc2nZDiVu3WpHmNtzh0/KghEY6/CXAhaEvpkknR0e5aDYnf Nv212lxHii2fc9L5CwWdENRbpxrSzHYAt4Why4kclTsw0PkDSlF5+13a7gkEZTT4 K2Jrc94Rw6HGdC7rh+OM2Oi0XjB8IV5s6+bVYDrHjxjlHVocwD/dSGnOG1eFAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR757ECBrW1bA9Q Chpx6Cpc2RvPWTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzdCRTdC MTAyMDZCNUI1NkMwRjUwMEExQTcxRTgyQTVDRDkxQkNGNTkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAi1HHAMEAi2rLDANBAIAAjAHAwUAKARZ/DAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEGcIwDQYJKoZIhvcNAQELBQADggEBAKwI23TvoQ4Z 1NvLMDKMYPCtEEm6kW9KrsB/scrVjj6xDp/dyuEFmQ5b7iEDhKxE+8ywP0C1eZnN /BDPD5AdLEUv1bCLsNHA15vrr6KKUNtt6eU0VzDncJ83AEza48RIp9RWR/ahSeEh H2A5hknP5BeGGKyu8Lij4BL337SkzOYlg/RR4ZETbA84JNxOn0eG+yFRqKJq1bE7 btPpkGCbN98+ApJ2MWWkFwZ/dx7tMrRExbMiO+Q7xVElYKFgzQ3ryeGsgbmIj21B tQLrFOZ01AqO4eyU8HFq7YRujbnH0u/ZcO0ZdAdrSlG7HiXPVCrf4an0RdrX4w49 D5KUJjjrTZ4= -----END CERTIFICATE-----Generated at Thu Sep 18 09:05:06 2025 by rpki-client