$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.cer File: A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.cer (raw, json) Hash identifier: wSftKzW/aVkw5sL/QearFAx6+O+e8oyW2OkeJe+D0FM= Subject key identifier: A1:65:F2:78:E6:91:4C:F9:E7:8A:CC:D4:21:F0:FE:B1:06:E8:DE:F1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C17279DFDA4C9B799EB2CCFA366D0A6B4B2EC6D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.mft caRepository: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 27 Jun 2025 16:46:26 +0000 Certificate not after: Fri 26 Jun 2026 16:51:26 +0000 Subordinate resources: AS: 271640 IP: 200.235.128.0/17 IP: 2801:80:3e80::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:17:27:9d:fd:a4:c9:b7:99:eb:2c:cf:a3:66:d0:a6:b4:b2:ec:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 27 16:46:26 2025 GMT Not After : Jun 26 16:51:26 2026 GMT Subject: CN=A165F278E6914CF9E78ACCD421F0FEB106E8DEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:3d:d8:ba:b5:7c:13:a7:9e:68:66:c2:4b: ce:9e:2e:a0:5f:c2:5f:75:9b:e5:56:0a:af:bc:bb: 88:59:57:6c:74:4d:bb:42:f4:11:aa:cc:d7:c2:51: 36:46:b0:bc:42:05:28:85:68:40:76:97:ca:6a:ea: 55:01:30:27:de:07:cf:7d:29:c5:67:f0:77:8f:88: e4:67:b8:c0:66:1d:2c:b7:8c:3f:a0:c7:5f:9f:08: 2d:3f:f3:f3:d8:90:be:10:8e:b7:6a:db:5f:08:af: 47:96:b9:35:3e:72:40:bd:82:37:c9:d5:59:40:23: 50:84:e6:ee:20:f1:ba:d7:2d:7c:ea:a8:72:3d:5a: b7:7f:8c:58:5f:1c:8b:ac:2a:3f:a2:48:13:c5:fa: 5f:96:40:2c:2c:bb:87:57:bf:ce:b5:6a:c8:19:ea: 49:5d:cf:41:8b:30:65:fa:94:c3:16:20:58:ad:23: e2:69:85:b2:b1:e0:68:9c:ce:88:6a:8a:d2:a9:aa: 8d:c1:92:b8:f3:eb:90:39:a7:c0:8d:89:33:2b:b5: ab:ce:52:61:f9:78:9d:b4:90:df:33:51:43:13:0c: ee:fc:5c:02:86:de:34:47:7d:41:02:06:64:37:41: 8c:ee:d1:a5:6e:47:e2:04:f8:8c:b7:61:6a:b1:42: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:65:F2:78:E6:91:4C:F9:E7:8A:CC:D4:21:F0:FE:B1:06:E8:DE:F1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.235.128.0/17 IPv6: 2801:80:3e80::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271640 Signature Algorithm: sha256WithRSAEncryption 80:7a:65:b8:aa:b5:f4:a7:08:db:ec:fb:64:f9:3c:46:1a:04: 0d:c7:50:f1:69:36:f8:a8:80:2e:eb:83:3e:ab:91:01:14:00: 3a:a2:08:f2:43:d0:84:a1:aa:0f:52:24:b6:22:0c:be:93:9b: 3f:95:c3:b3:9a:06:65:78:9e:25:96:0d:ab:49:7e:b8:07:1c: 09:ab:36:6e:db:6c:b8:8c:00:65:53:e1:9c:a4:24:7e:c3:1f: 9f:21:d4:03:f4:1a:2c:a2:5f:d1:5a:4d:ad:86:cf:e3:a1:50: 5f:cf:03:78:27:48:4a:46:99:49:8a:9f:82:46:2a:6e:9b:db: 91:a0:15:cc:a3:eb:80:09:27:ee:6d:a2:d2:d2:5c:83:4c:4e: d2:b7:94:a9:38:c1:ef:f0:e8:63:e4:78:7d:3c:6a:6f:dd:cc: 31:cb:35:0c:6a:ba:3a:5a:37:1b:1b:5c:fc:25:9f:12:b4:07: 4d:e3:7c:6f:1d:5b:54:03:bb:a7:f3:1e:27:a5:72:8c:d1:f7: 70:9b:40:ae:c2:4e:c6:b1:20:ba:f8:64:4f:08:7d:58:38:ff: 55:6d:ea:bc:99:59:b2:d6:df:0b:a7:d4:99:e1:1d:09:af:5c: 64:fe:8a:cf:fd:ea:fa:68:76:28:19:c4:fc:6a:95:03:a6:6d: 2b:f7:31:d5 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUTBcnnf2kybeZ6yzPo2bQprSy7G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjcxNjQ2MjZaFw0yNjA2MjYxNjUxMjZaMDMxMTAvBgNV BAMTKEExNjVGMjc4RTY5MTRDRjlFNzhBQ0NENDIxRjBGRUIxMDZFOERFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbT3YurV8E6eeaGbCS86eLqBf wl91m+VWCq+8u4hZV2x0TbtC9BGqzNfCUTZGsLxCBSiFaEB2l8pq6lUBMCfeB899 KcVn8HePiORnuMBmHSy3jD+gx1+fCC0/8/PYkL4Qjrdq218Ir0eWuTU+ckC9gjfJ 1VlAI1CE5u4g8brXLXzqqHI9Wrd/jFhfHIusKj+iSBPF+l+WQCwsu4dXv861asgZ 6kldz0GLMGX6lMMWIFitI+JphbKx4GiczohqitKpqo3Bkrjz65A5p8CNiTMrtavO UmH5eJ20kN8zUUMTDO78XAKG3jRHfUECBmQ3QYzu0aVuR+IE+Iy3YWqxQkqLAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShZfJ45pFM+eeK zNQh8P6xBuje8TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmtw Y1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdUUDgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr cGNUN21kc2JibXM2bkx1Y3JKRE1Yb05pa2IyYkV0Vm0ycFV5d1JnVFA4LzAvQTE2 NUYyNzhFNjkxNENGOUU3OEFDQ0Q0MjFGMEZFQjEwNkU4REVGMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQHyOuAMA8EAgACMAkDBwAoAQCAPoAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCUYMA0GCSqGSIb3DQEBCwUAA4IBAQCAemW4qrX0pwjb 7Ptk+TxGGgQNx1DxaTb4qIAu64M+q5EBFAA6ogjyQ9CEoaoPUiS2Igy+k5s/lcOz mgZleJ4llg2rSX64BxwJqzZu22y4jABlU+GcpCR+wx+fIdQD9Bosol/RWk2ths/j oVBfzwN4J0hKRplJip+CRipum9uRoBXMo+uACSfubaLS0lyDTE7St5SpOMHv8Ohj 5Hh9PGpv3cwxyzUMaro6WjcbG1z8JZ8StAdN43xvHVtUA7un8x4npXKM0fdwm0Cu wk7GsSC6+GRPCH1YOP9Vbeq8mVmy1t8Lp9SZ4R0Jr1xk/orP/er6aHYoGcT8apUD pm0r9zHV -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:25 2025 by rpki-client