$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer (raw, json) Hash identifier: +57sLQ6YO1cVxRqR1zupX8GrXM0t1HcK5i1bIxN3yoM= Subject key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B5FA4B08980EBC1EAA42F0244495C2444031FD4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft caRepository: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 06 May 2025 02:24:38 +0000 Certificate not after: Tue 05 May 2026 02:29:38 +0000 Subordinate resources: AS: 266387 IP: 170.81.20.0/22 IP: 191.37.140.0/22 IP: 2804:3710::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5f:a4:b0:89:80:eb:c1:ea:a4:2f:02:44:49:5c:24:44:03:1f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 6 02:24:38 2025 GMT Not After : May 5 02:29:38 2026 GMT Subject: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:f0:66:21:d7:63:40:b4:8e:20:ce:4d:62: 3e:60:45:76:22:5a:09:07:bb:b9:dc:ac:a3:1e:f8: 4b:36:b3:0f:88:07:3d:e6:c4:ac:23:4c:4a:29:97: bf:7a:4e:a5:a3:ad:af:d7:03:0c:e6:61:ba:ae:ff: 51:04:87:23:a8:58:81:d3:2e:2e:c7:5a:a5:bb:d9: c1:7d:25:24:45:ee:64:a9:4a:5c:66:c1:59:e5:9f: 25:ef:8b:09:8e:cb:9a:fb:72:7c:be:23:9b:18:12: 52:06:6c:b4:25:b9:a0:37:d0:cb:51:c2:6a:27:d6: be:0f:07:b9:e0:bf:f1:7d:d3:31:aa:8e:d9:8a:d0: 58:e2:05:66:61:89:27:91:ac:bd:12:c9:d4:b9:2c: 58:63:8e:3a:27:bc:27:e7:47:d9:8d:ee:0c:ba:2a: 28:a0:5e:c4:2b:e7:fe:03:37:91:f0:39:24:81:8e: 39:f9:5a:a6:ef:46:14:92:d7:7e:5b:4e:7e:e9:0e: 36:ef:db:05:e5:23:2a:22:c4:b9:c9:27:27:3d:1b: 93:9c:a1:a1:ad:b0:1e:af:bf:74:ee:20:a3:c7:d8: 85:35:59:85:3c:ca:94:c3:e7:62:bc:8e:da:7b:f2: 66:04:82:4c:b6:f6:14:7b:2a:7c:07:49:de:5d:1b: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.20.0/22 191.37.140.0/22 IPv6: 2804:3710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266387 Signature Algorithm: sha256WithRSAEncryption 2e:f5:06:b3:0a:5d:6b:8a:ec:23:ea:f2:b3:2c:3e:29:4f:5c: 13:6c:7b:a7:9a:21:9a:66:de:21:4c:4f:92:f6:5e:44:69:d9: 19:d7:24:90:1d:74:6c:c8:86:ac:a7:14:28:63:34:0d:56:29: ef:52:e4:6d:97:9e:cc:96:a9:2d:48:26:62:33:cf:a2:57:56: f9:16:db:f3:a1:66:de:e5:cb:b9:dc:8c:78:14:c9:46:e0:88: 9f:e0:14:ca:04:8d:5a:3b:7e:7f:5d:22:9f:e7:d3:b3:d8:bd: b2:2a:25:51:6f:23:3c:5c:27:75:0c:1b:c0:2e:5b:a6:d2:e3: 28:ab:fc:4d:0d:32:ec:f0:19:fd:ed:0d:fd:f0:d3:b9:34:11: 44:88:45:e7:bd:11:7d:77:01:1c:d1:44:17:22:14:4e:9a:7b: db:4f:48:40:63:1a:2f:49:eb:f2:85:69:96:cf:ea:4d:ba:b3: 89:a2:c7:c3:3a:6c:0e:a9:7a:87:04:be:90:e0:c5:c8:4b:ea: b0:26:67:7e:0d:26:08:02:97:73:48:82:d9:07:89:0e:c2:93: cd:82:d8:8f:23:37:51:d3:3b:04:70:b5:35:8a:4e:0e:66:bd: 10:d1:dd:68:97:a8:d8:93:a6:72:1d:e4:4d:15:91:d8:68:79: 7f:31:b4:d0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUO1+ksImA68HqpC8CRElcJEQDH9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDYwMjI0MzhaFw0yNjA1MDUwMjI5MzhaMDMxMTAvBgNV BAMTKEEyOEYwQzFFRDE4RjQ4QTY2OUM3NkJBMzRDRDcyRjJBMTQ1NkE0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8PBmIddjQLSOIM5NYj5gRXYi WgkHu7ncrKMe+Es2sw+IBz3mxKwjTEopl796TqWjra/XAwzmYbqu/1EEhyOoWIHT Li7HWqW72cF9JSRF7mSpSlxmwVnlnyXviwmOy5r7cny+I5sYElIGbLQluaA30MtR wmon1r4PB7ngv/F90zGqjtmK0FjiBWZhiSeRrL0SydS5LFhjjjonvCfnR9mN7gy6 KiigXsQr5/4DN5HwOSSBjjn5WqbvRhSS135bTn7pDjbv2wXlIyoixLnJJyc9G5Oc oaGtsB6vv3TuIKPH2IU1WYU8ypTD52K8jtp78mYEgky29hR7KnwHSd5dG3BBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSijwwe0Y9IpmnH a6NM1y8qFFakGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZH alJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2SDkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2 R2pSWHJtYTdqTkdhanM2bUFDU2I1a0JmWXM2a3VHdDVyVFYzZXhqdkg5LzEvQTI4 RjBDMUVEMThGNDhBNjY5Qzc2QkEzNENENzJGMkExNDU2QTQxOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlEUAwQCvyWMMA0EAgACMAcDBQAoBDcQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQkzANBgkqhkiG9w0BAQsFAAOCAQEALvUGswpd a4rsI+rysyw+KU9cE2x7p5ohmmbeIUxPkvZeRGnZGdckkB10bMiGrKcUKGM0DVYp 71LkbZeezJapLUgmYjPPoldW+Rbb86Fm3uXLudyMeBTJRuCIn+AUygSNWjt+f10i n+fTs9i9siolUW8jPFwndQwbwC5bptLjKKv8TQ0y7PAZ/e0N/fDTuTQRRIhF570R fXcBHNFEFyIUTpp7209IQGMaL0nr8oVpls/qTbqziaLHwzpsDql6hwS+kODFyEvq sCZnfg0mCAKXc0iC2QeJDsKTzYLYjyM3UdM7BHC1NYpODma9ENHdaJeo2JOmch3k TRWR2Gh5fzG00A== -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:41 2025 by rpki-client