$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer File: 958953A4AA375C5503E39C46573EE52C1795B779.cer (raw, json) Hash identifier: 56KX7HzkzFmr+URtHmEN4Fg83GKUOmyAZcrGc3hFwpo= Subject key identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 50312E4535853D319DA95D37E8D89BF17E2A50BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.mft caRepository: rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 01:04:13 +0000 Certificate not after: Thu 06 Aug 2026 01:09:13 +0000 Subordinate resources: AS: 52596 IP: 179.191.48.0/21 IP: 2804:d14::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:31:2e:45:35:85:3d:31:9d:a9:5d:37:e8:d8:9b:f1:7e:2a:50:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 7 01:04:13 2025 GMT Not After : Aug 6 01:09:13 2026 GMT Subject: CN=958953A4AA375C5503E39C46573EE52C1795B779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:3f:54:7b:3e:56:93:84:8e:2f:bb:95:c1: 6e:77:e9:3b:fc:15:25:79:09:af:13:7f:e5:77:b8: 67:47:37:f2:70:f6:4e:1e:b7:95:0a:1b:08:95:e0: 82:ad:dd:eb:33:a2:52:0c:95:ae:51:1a:91:02:95: 42:3a:52:14:28:8e:92:89:b9:79:73:18:33:70:4d: 33:ca:51:20:7e:27:97:ba:5c:d1:18:3a:8f:36:62: b7:56:52:c1:d8:ca:44:9e:bb:ab:cd:ce:9b:b3:11: 33:67:86:06:67:a7:6a:f3:fc:f7:a5:b7:8b:7a:f8: f4:47:ac:71:c9:54:40:69:1f:38:b8:62:34:08:ce: b0:43:7f:db:e5:5e:6b:4d:27:f6:06:98:c5:a2:26: 65:5a:e9:57:fb:12:e5:20:7f:bf:68:6b:e5:b3:89: d2:1f:31:e4:b1:bc:2b:75:10:92:a6:ea:02:28:9f: dc:dc:a1:fc:27:5c:27:41:2e:e4:43:a7:3e:6e:42: 65:90:8f:1b:29:e7:fd:7c:3a:c8:08:87:18:5e:9f: aa:86:cd:eb:e3:23:48:f7:80:21:c6:99:f7:18:85: b1:bb:9c:10:f5:5c:37:27:d0:36:ad:9c:2d:28:bb: 4b:61:a4:3a:6f:19:f0:10:5f:70:7c:38:03:01:0e: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.191.48.0/21 IPv6: 2804:d14::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52596 Signature Algorithm: sha256WithRSAEncryption 4f:78:3c:d7:ef:b0:a2:be:72:f1:33:eb:16:5a:68:c6:d5:b5: 9f:30:b2:1c:a3:fa:22:21:2a:f9:c6:88:98:ea:c3:6c:09:f9: db:a4:47:c4:1c:1d:59:98:8f:ac:86:93:af:53:fc:82:66:fb: e5:2e:8e:02:32:c4:ad:e4:65:d3:7f:73:6e:bd:9f:cd:79:c2: 78:1e:28:e8:09:8c:d4:2f:fc:d3:a1:5e:17:77:11:e3:26:34: c3:24:e1:e5:55:fd:b1:90:bc:59:75:f5:e9:46:15:c0:94:a8: 1e:29:13:cc:71:59:58:22:7b:cf:64:11:3b:16:ca:fc:6c:1d: 4f:35:7a:7b:49:be:22:b7:6b:ce:ef:be:ed:e8:f7:52:e5:92: 67:66:fe:78:c7:fd:88:ad:26:3c:3d:61:98:bf:ef:8a:35:50: ee:dd:cd:3e:af:d7:9a:4b:91:92:bf:94:a6:89:da:86:b5:c6: 4b:1a:a2:87:3e:0c:53:a5:9b:7a:2f:98:ba:9c:f8:cd:db:33: 5d:19:e0:cb:fd:ff:cc:43:c1:4a:e9:58:5b:ad:62:67:2d:07: ec:30:55:82:d7:d2:b4:7b:15:c1:bf:3d:52:fa:26:4f:08:95: 8a:52:c7:9a:7e:b2:05:a7:3e:ed:29:7c:c8:5b:77:8a:0b:ec: b2:cf:74:c3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUDEuRTWFPTGdqV036Nib8X4qULswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDcwMTA0MTNaFw0yNjA4MDYwMTA5MTNaMDMxMTAvBgNV BAMTKDk1ODk1M0E0QUEzNzVDNTUwM0UzOUM0NjU3M0VFNTJDMTc5NUI3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ST9Uez5Wk4SOL7uVwW536Tv8 FSV5Ca8Tf+V3uGdHN/Jw9k4et5UKGwiV4IKt3eszolIMla5RGpEClUI6UhQojpKJ uXlzGDNwTTPKUSB+J5e6XNEYOo82YrdWUsHYykSeu6vNzpuzETNnhgZnp2rz/Pel t4t6+PRHrHHJVEBpHzi4YjQIzrBDf9vlXmtNJ/YGmMWiJmVa6Vf7EuUgf79oa+Wz idIfMeSxvCt1EJKm6gIon9zcofwnXCdBLuRDpz5uQmWQjxsp5/18OsgIhxhen6qG zevjI0j3gCHGmfcYhbG7nBD1XDcn0DatnC0ou0thpDpvGfAQX3B8OAMBDuKvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSViVOkqjdcVQPj nEZXPuUsF5W3eTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmli Tllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJmV3gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zp Yk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAvOTU4 OTUzQTRBQTM3NUM1NTAzRTM5QzQ2NTczRUU1MkMxNzk1Qjc3OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDs78wMA0EAgACMAcDBQAoBA0UMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDNdDANBgkqhkiG9w0BAQsFAAOCAQEAT3g81++wor5y8TPr FlpoxtW1nzCyHKP6IiEq+caImOrDbAn526RHxBwdWZiPrIaTr1P8gmb75S6OAjLE reRl039zbr2fzXnCeB4o6AmM1C/806FeF3cR4yY0wyTh5VX9sZC8WXX16UYVwJSo HikTzHFZWCJ7z2QROxbK/GwdTzV6e0m+Irdrzu++7ej3UuWSZ2b+eMf9iK0mPD1h mL/vijVQ7t3NPq/XmkuRkr+UponahrXGSxqihz4MU6Wbei+Yupz4zdszXRngy/3/ zEPBSulYW61iZy0H7DBVgtfStHsVwb89UvomTwiVilLHmn6yBac+7Sl8yFt3igvs ss90ww== -----END CERTIFICATE-----Generated at Wed Aug 20 11:57:26 2025 by rpki-client