$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.cer File: A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.cer (raw, json) Hash identifier: ZIjybY05WchkKAwhm83kujYLZ4xUvpCSgsIJ8jpoe5I= Subject key identifier: A1:F7:A6:E0:0C:F1:13:37:DD:A4:47:B5:C0:FC:18:5F:D9:25:3F:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 62A9514F5656163A16B59852D4B7ABE69B201CA8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.mft caRepository: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 00:23:56 +0000 Certificate not after: Thu 17 Sep 2026 00:28:56 +0000 Subordinate resources: AS: 263444 IP: 138.36.164.0/22 IP: 177.91.160.0/22 IP: 2804:11dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a9:51:4f:56:56:16:3a:16:b5:98:52:d4:b7:ab:e6:9b:20:1c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 00:23:56 2025 GMT Not After : Sep 17 00:28:56 2026 GMT Subject: CN=A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:34:06:6c:bd:88:23:01:38:f5:8b:9c:43: 1f:75:c0:e7:72:3e:44:5a:14:01:18:ff:16:b7:82: 90:f9:39:c0:d7:64:9e:b4:f4:13:ff:48:28:e2:79: 5d:6d:b6:c8:6e:ad:f3:6d:45:cc:9c:ca:ca:13:27: 12:4b:de:6c:06:cb:c7:61:4a:d4:27:e2:8d:dd:2b: 34:4e:d8:fa:c9:66:11:f7:66:61:53:ee:b6:1b:63: ae:ac:12:fe:1f:a7:c0:68:e6:17:7f:c3:84:d2:2d: 63:71:99:bc:33:33:0c:d5:4a:5e:b4:c6:fd:34:6b: b4:3a:8b:ef:ba:66:c5:27:d6:04:3a:e9:3c:13:ba: 9f:db:d7:d6:59:b6:8b:58:66:ac:c8:2f:dd:81:b8: 8e:43:f9:b3:b1:8e:43:f6:5e:86:13:b8:d9:08:8c: 8e:61:5e:ef:1a:eb:26:e8:79:30:5e:c7:80:ef:c8: ad:4a:e9:31:24:e8:42:ab:b9:98:b7:7e:09:b3:fa: e6:05:c3:9d:1e:1b:ad:95:dd:37:06:5c:5c:6f:6b: 59:31:47:0b:de:0a:38:20:ec:7c:95:5b:51:2d:f4: ec:73:36:09:06:43:5d:df:c8:e1:36:2c:43:da:74: cc:0a:5b:07:fb:74:a0:fc:5c:33:6c:67:d7:88:bd: ec:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:F7:A6:E0:0C:F1:13:37:DD:A4:47:B5:C0:FC:18:5F:D9:25:3F:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/A1F7A6E00CF11337DDA447B5C0FC185FD9253FDF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.164.0/22 177.91.160.0/22 IPv6: 2804:11dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263444 Signature Algorithm: sha256WithRSAEncryption 5f:75:b5:33:0e:70:e2:73:c6:ca:97:66:fd:da:84:d8:cd:a7: 75:6f:59:f9:79:5f:5d:e5:0a:a4:f2:83:a9:7f:70:70:e1:56: 88:06:74:a5:47:2d:d1:04:0c:d6:ab:1c:4b:7d:95:71:b5:c2: 28:f9:fd:b7:90:67:0a:60:c9:a0:e5:07:8c:b2:11:d6:0b:5c: 7a:9c:44:7f:71:78:b5:58:e1:a0:fe:21:6d:35:b5:cb:43:26: ef:da:36:a8:c6:d5:11:c6:7b:1f:a8:84:5a:6f:4e:49:f7:7c: 01:16:4e:51:15:fc:cb:c6:93:92:5e:6a:7f:ac:3a:8e:14:5d: ab:4c:09:a5:dd:82:89:c3:2e:e2:b0:b6:66:55:e1:dc:4a:f4: 19:e4:39:c9:e9:76:17:75:3b:22:be:4a:21:78:e1:c8:73:b3: 77:ac:36:52:52:1c:a0:56:ff:96:54:7a:a5:dd:fe:85:15:19: 54:f8:3f:7b:ee:2f:10:bb:89:14:40:62:ab:33:ac:88:1c:cd: a3:96:7d:dd:d2:43:54:0f:50:22:61:26:a1:b9:cb:e4:88:79: 2d:2d:e5:97:78:1c:6d:11:05:99:7e:f1:a0:e2:40:b5:7c:bb: 9b:83:c1:05:15:4f:b2:7e:f0:43:4b:cf:31:36:80:72:13:a3: 7a:bc:35:93 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYqlRT1ZWFjoWtZhS1Ler5psgHKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgwMDIzNTZaFw0yNjA5MTcwMDI4NTZaMDMxMTAvBgNV BAMTKEExRjdBNkUwMENGMTEzMzdEREE0NDdCNUMwRkMxODVGRDkyNTNGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqTQGbL2IIwE49YucQx91wOdy PkRaFAEY/xa3gpD5OcDXZJ609BP/SCjieV1ttshurfNtRcycysoTJxJL3mwGy8dh StQn4o3dKzRO2PrJZhH3ZmFT7rYbY66sEv4fp8Bo5hd/w4TSLWNxmbwzMwzVSl60 xv00a7Q6i++6ZsUn1gQ66TwTup/b19ZZtotYZqzIL92BuI5D+bOxjkP2XoYTuNkI jI5hXu8a6yboeTBex4DvyK1K6TEk6EKruZi3fgmz+uYFw50eG62V3TcGXFxva1kx RwveCjgg7HyVW1Et9OxzNgkGQ13fyOE2LEPadMwKWwf7dKD8XDNsZ9eIvexbAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh96bgDPETN92k R7XA/Bhf2SU/3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXpN OXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtOdUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl6 TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAvQTFG N0E2RTAwQ0YxMTMzN0REQTQ0N0I1QzBGQzE4NUZEOTI1M0ZERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiiSkAwQCsVugMA0EAgACMAcDBQAoBBHcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFFDANBgkqhkiG9w0BAQsFAAOCAQEAX3W1Mw5w 4nPGypdm/dqE2M2ndW9Z+XlfXeUKpPKDqX9wcOFWiAZ0pUct0QQM1qscS32VcbXC KPn9t5BnCmDJoOUHjLIR1gtcepxEf3F4tVjhoP4hbTW1y0Mm79o2qMbVEcZ7H6iE Wm9OSfd8ARZOURX8y8aTkl5qf6w6jhRdq0wJpd2CicMu4rC2ZlXh3Er0GeQ5yel2 F3U7Ir5KIXjhyHOzd6w2UlIcoFb/llR6pd3+hRUZVPg/e+4vELuJFEBiqzOsiBzN o5Z93dJDVA9QImEmobnL5Ih5LS3ll3gcbREFmX7xoOJAtXy7m4PBBRVPsn7wQ0vP MTaAchOjerw1kw== -----END CERTIFICATE-----Generated at Thu Sep 18 10:02:18 2025 by rpki-client