$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer File: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer (raw, json) Hash identifier: l87FewrB0HFHbgNuJYQVaidWv+NSvwebiu6S6K10lsY= Subject key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 327349CC215D745DDD25C8B7ED3BF22F8E38AC73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft caRepository: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 18:59:44 +0000 Certificate not after: Thu 30 Jul 2026 19:04:44 +0000 Subordinate resources: AS: 271516 IP: 181.232.176.0/22 IP: 191.242.42.0 -- 191.242.47.255 IP: 2804:7cc0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:73:49:cc:21:5d:74:5d:dd:25:c8:b7:ed:3b:f2:2f:8e:38:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 31 18:59:44 2025 GMT Not After : Jul 30 19:04:44 2026 GMT Subject: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:3a:f7:f7:6f:6f:ae:17:12:af:92:80:6b: 59:98:e0:00:ce:d3:46:4e:d4:96:b7:9f:ae:5d:18: f6:2a:a7:b6:fc:47:66:18:29:cd:7b:0d:11:40:4e: 1e:4e:e8:72:65:82:b2:18:80:0c:80:a8:dd:af:7a: 71:9c:e3:99:0d:d0:45:a9:e1:f7:6d:dc:ad:9d:fe: 3e:7e:12:02:92:09:b0:23:6a:b7:8b:c2:42:a8:d9: d0:86:2c:d0:e1:e6:26:6c:0c:f2:12:06:d1:70:89: 2a:4a:8f:98:ba:24:09:13:c1:3b:11:74:0a:8d:59: 9f:38:a3:a0:e1:09:34:bd:57:f0:88:15:c9:bd:0f: 85:5b:04:f1:72:85:9b:2a:4c:03:25:a9:81:30:e1: 6f:c7:5f:4c:5c:e7:8a:1d:f8:ac:96:74:a3:80:ad: 3d:14:3b:b3:99:72:3d:16:a2:27:c2:18:b5:5e:ad: aa:08:ca:fe:79:37:b3:5a:e2:d3:68:9e:b5:a9:49: 4e:68:c8:4c:38:f2:01:69:35:4b:28:c7:d6:5e:22: 58:b2:7e:09:64:93:4a:83:2b:18:83:a2:1e:d4:34: ec:e4:71:d0:b2:cb:71:a2:ca:ba:08:ef:9e:49:b8: 9e:ec:5c:10:5c:f7:a7:9f:ed:48:94:b7:c0:d1:99: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.176.0/22 191.242.42.0-191.242.47.255 IPv6: 2804:7cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271516 Signature Algorithm: sha256WithRSAEncryption d3:4f:50:0f:84:f6:85:32:7f:3c:75:64:c3:32:06:37:11:20: 8b:9d:35:ed:3c:79:ec:cb:3a:bd:4a:5b:fa:35:97:3f:02:a1: 39:ab:75:0e:a4:d7:5e:6a:07:33:56:2f:ff:9c:0c:b0:8f:10: 8b:fb:f1:1f:ea:d2:08:24:d5:aa:da:63:9a:76:b9:fe:23:e1: a9:61:09:aa:72:0c:09:af:8a:97:4f:c2:06:dd:aa:7e:d9:5c: 6a:ae:46:d6:d3:e3:38:3a:0b:2e:ea:95:20:86:d4:dc:28:62: 32:34:11:f3:79:ba:d8:16:cf:a2:f6:bb:b1:9e:95:9a:8e:8d: 0f:ee:bd:68:01:e7:ed:85:de:a7:41:26:de:ef:c9:97:6b:f9: 6d:08:51:2a:6a:d7:4a:d3:f5:04:19:59:cc:71:27:52:c8:87: 4c:ef:1d:f5:89:b5:a9:85:67:e8:20:d9:93:4e:25:5a:7d:62: 15:0c:dc:7e:2c:77:12:4f:5a:3b:04:6d:59:8b:e4:dc:0d:ae: 01:bb:28:84:2a:fe:70:27:68:0a:a4:93:9b:71:d4:43:4f:82: 52:ec:2a:7b:c7:b9:47:f1:bc:5f:30:03:a2:d4:89:85:07:b8: fc:47:d2:b9:a5:aa:79:16:15:df:2b:67:2a:7a:f5:51:4c:15: 50:59:27:31 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIUMnNJzCFddF3dJci37TvyL444rHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzExODU5NDRaFw0yNjA3MzAxOTA0NDRaMDMxMTAvBgNV BAMTKDhBRjAzMDQ1RjlDQjdCNjEyOUZGRDhENkEyNEYyRTlFMDY3MkQxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQjr3929vrhcSr5KAa1mY4ADO 00ZO1Ja3n65dGPYqp7b8R2YYKc17DRFATh5O6HJlgrIYgAyAqN2venGc45kN0EWp 4fdt3K2d/j5+EgKSCbAjareLwkKo2dCGLNDh5iZsDPISBtFwiSpKj5i6JAkTwTsR dAqNWZ84o6DhCTS9V/CIFcm9D4VbBPFyhZsqTAMlqYEw4W/HX0xc54od+KyWdKOA rT0UO7OZcj0WoifCGLVeraoIyv55N7Na4tNonrWpSU5oyEw48gFpNUsox9ZeIliy fglkk0qDKxiDoh7UNOzkcdCyy3GiyroI755JuJ7sXBBc96ef7UiUt8DRmQdFAgMB AAGjggNIMIIDRDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSK8DBF+ct7YSn/ 2NaiTy6eBnLRADAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWtK cm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3RxbmIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlr SnJvWVBacmpCWXVya0IxTEs4REpOTUJrSjJSaHQ2VHRuUmNUeGt0cW5iLzAvOEFG MDMwNDVGOUNCN0I2MTI5RkZEOEQ2QTI0RjJFOUUwNjcyRDEwMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEH AQH/BC0wKzAaBAIAATAUAwQCteiwMAwDBAG/8ioDBAS/8iAwDQQCAAIwBwMFACgE fMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCScMA0GCSqGSIb3DQEBCwUAA4IB AQDTT1APhPaFMn88dWTDMgY3ESCLnTXtPHnsyzq9Slv6NZc/AqE5q3UOpNdeagcz Vi//nAywjxCL+/Ef6tIIJNWq2mOadrn+I+GpYQmqcgwJr4qXT8IG3ap+2VxqrkbW 0+M4Ogsu6pUghtTcKGIyNBHzebrYFs+i9ruxnpWajo0P7r1oAefthd6nQSbe78mX a/ltCFEqatdK0/UEGVnMcSdSyIdM7x31ibWphWfoINmTTiVafWIVDNx+LHcST1o7 BG1Zi+TcDa4BuyiEKv5wJ2gKpJObcdRDT4JS7Cp7x7lH8bxfMAOi1ImFB7j8R9K5 pap5FhXfK2cqevVRTBVQWScx -----END CERTIFICATE-----Generated at Mon Nov 3 05:33:13 2025 by rpki-client