$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer File: 7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer (raw, json) Hash identifier: iB1BGUiP5e3t+drjIn1eejDTbeKqQNk6HfN+Lj2JvBU= Subject key identifier: 7E:35:4B:C2:75:8A:5E:71:36:C8:BE:9E:C6:A5:11:9D:DB:3A:9E:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A5282CF5F6DF0BEB2B2C8E98C7FD7A7203C3B82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.mft caRepository: rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 30 Jun 2025 14:34:11 +0000 Certificate not after: Mon 29 Jun 2026 14:39:11 +0000 Subordinate resources: AS: 263987 IP: 138.255.180.0/22 IP: 2804:28ec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 09:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:52:82:cf:5f:6d:f0:be:b2:b2:c8:e9:8c:7f:d7:a7:20:3c:3b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 30 14:34:11 2025 GMT Not After : Jun 29 14:39:11 2026 GMT Subject: CN=7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:1c:f6:15:0c:82:3d:b6:4c:2e:fd:41:b4: c8:78:4e:e8:a2:65:61:50:eb:2e:f1:da:82:a7:18: fc:bc:24:5f:2b:77:e3:da:a2:5d:a9:29:9a:45:bd: 8e:7a:85:1a:5e:ec:83:45:7d:0a:d1:51:36:e0:23: 4b:d1:61:3d:ba:24:d7:23:4d:21:8d:58:c7:ab:3c: 0f:bd:9f:8f:d3:d3:f9:b0:c6:70:a7:04:95:79:9b: 70:7e:a1:f4:ab:6d:9a:2d:4d:d6:2e:1d:21:5c:13: a4:03:55:b2:ef:8a:4b:0a:2a:e4:e7:03:9c:9a:89: 17:8c:35:8a:6c:f9:65:59:48:ae:ae:13:00:47:b8: 24:f5:be:c0:cd:a3:4c:96:7e:7b:af:05:92:1b:db: 9a:62:19:10:f0:4a:57:41:01:02:13:45:32:31:64: a0:03:f0:95:1d:6a:99:14:ec:9b:99:f8:ec:bc:a8: 95:bc:b0:df:26:2f:8f:18:d1:58:cf:90:1c:95:a3: 47:33:85:85:d0:70:1a:a9:f7:41:82:47:46:e9:b6: 02:3b:a0:55:13:1c:d3:6a:44:11:4f:83:96:e0:0e: f8:38:77:92:12:2c:70:2e:ab:ad:00:4f:fd:54:16: 54:52:9f:e0:03:5f:12:3a:6d:26:38:68:d0:75:a5: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:35:4B:C2:75:8A:5E:71:36:C8:BE:9E:C6:A5:11:9D:DB:3A:9E:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.180.0/22 IPv6: 2804:28ec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263987 Signature Algorithm: sha256WithRSAEncryption 10:af:d0:cc:80:40:ea:24:5d:1d:c6:6e:2c:7c:ef:e4:bf:1d: 42:ba:fd:bd:9a:6d:40:a5:ac:96:e9:92:47:d7:85:fb:7f:28: 27:e8:b5:e0:f2:ad:71:32:6b:52:1c:61:3b:a2:b1:4e:ec:80: 60:b2:0d:97:3a:9e:41:77:2a:a3:62:5b:1b:00:2c:da:6d:53: fd:fd:18:c2:49:bd:7b:6c:20:4d:ca:92:e3:fe:7e:be:69:96: 48:32:5c:2c:d9:5b:a8:00:83:92:d6:13:a3:37:39:4a:0c:6e: d2:42:c6:d6:1c:f2:fe:df:2a:1b:06:1d:f3:0e:2e:2b:d6:e3: 02:ec:de:f8:1f:f6:d8:4b:09:4c:ef:71:4c:e6:79:73:6a:30: aa:00:69:84:4e:e6:cd:f7:45:0b:99:3a:47:72:d5:d2:53:b2: 38:fe:b9:ad:35:f4:07:40:69:d2:04:eb:1a:af:17:27:50:32: 3e:66:e7:dc:3d:87:dc:fb:02:2c:24:f1:e1:ef:0a:15:b3:26: 3e:16:e3:76:ea:cc:6d:64:90:5f:ff:cb:7e:d8:10:ed:c2:50: 5a:50:e3:c2:4c:bd:02:97:0b:66:2d:b3:1a:7e:ec:1c:ff:19: 0e:4f:2c:ad:99:a9:fa:ae:12:ac:5f:15:da:8c:f6:9a:67:01: 97:70:54:e7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUClKCz19t8L6yssjpjH/XpyA8O4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MzAxNDM0MTFaFw0yNjA2MjkxNDM5MTFaMDMxMTAvBgNV BAMTKDdFMzU0QkMyNzU4QTVFNzEzNkM4QkU5RUM2QTUxMTlEREIzQTlFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HRz2FQyCPbZMLv1BtMh4Tuii ZWFQ6y7x2oKnGPy8JF8rd+Paol2pKZpFvY56hRpe7INFfQrRUTbgI0vRYT26JNcj TSGNWMerPA+9n4/T0/mwxnCnBJV5m3B+ofSrbZotTdYuHSFcE6QDVbLviksKKuTn A5yaiReMNYps+WVZSK6uEwBHuCT1vsDNo0yWfnuvBZIb25piGRDwSldBAQITRTIx ZKAD8JUdapkU7JuZ+Oy8qJW8sN8mL48Y0VjPkByVo0czhYXQcBqp90GCR0bptgI7 oFUTHNNqRBFPg5bgDvg4d5ISLHAuq60AT/1UFlRSn+ADXxI6bSY4aNB1pQFRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+NUvCdYpecTbI vp7GpRGd2zqedTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3ht WW5xNWJScXFTVzZXTXJhekdDQkF1b2JldkxOQ1BOZjRBamM3c3ZxcHIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd4 bVlucTViUnFxU1c2V01yYXpHQ0JBdW9iZXZMTkNQTmY0QWpjN3N2cXByLzAvN0Uz NTRCQzI3NThBNUU3MTM2QzhCRTlFQzZBNTExOUREQjNBOUU3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCiv+0MA0EAgACMAcDBQAoBCjsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHMzANBgkqhkiG9w0BAQsFAAOCAQEAEK/QzIBA6iRdHcZu LHzv5L8dQrr9vZptQKWslumSR9eF+38oJ+i14PKtcTJrUhxhO6KxTuyAYLINlzqe QXcqo2JbGwAs2m1T/f0Ywkm9e2wgTcqS4/5+vmmWSDJcLNlbqACDktYTozc5Sgxu 0kLG1hzy/t8qGwYd8w4uK9bjAuze+B/22EsJTO9xTOZ5c2owqgBphE7mzfdFC5k6 R3LV0lOyOP65rTX0B0Bp0gTrGq8XJ1AyPmbn3D2H3PsCLCTx4e8KFbMmPhbjdurM bWSQX//LftgQ7cJQWlDjwky9ApcLZi2zGn7sHP8ZDk8srZmp+q4SrF8V2oz2mmcB l3BU5w== -----END CERTIFICATE-----Generated at Fri Jul 4 08:13:42 2025 by rpki-client