$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer File: A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer (raw, json) Hash identifier: oxjyd81qkuocAqbyLNmZ6YpQ4AygOTRPtj/T3AwacKc= Subject key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 630D4432F6B7C59A6E7A3C7638E83B416D07058F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft caRepository: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 16:44:57 +0000 Certificate not after: Fri 17 Jul 2026 16:49:57 +0000 Subordinate resources: AS: 264293 IP: 45.232.160.0/22 IP: 138.121.120.0/22 IP: 2804:25a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 15:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0d:44:32:f6:b7:c5:9a:6e:7a:3c:76:38:e8:3b:41:6d:07:05:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 18 16:44:57 2025 GMT Not After : Jul 17 16:49:57 2026 GMT Subject: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:7a:d4:0b:cb:f9:19:a3:97:ae:d0:8a:eb: e1:9c:06:7d:fe:f5:3b:7c:18:35:3f:4b:a0:a6:7e: 83:c2:c1:48:15:90:68:2d:f0:b3:8a:fd:ae:bc:ec: 62:07:ec:ee:fd:a5:16:48:0e:a4:46:e2:09:fd:ad: 47:9c:2d:c3:07:6c:3f:4d:fe:b5:77:c3:7d:b5:f7: 27:67:b9:af:d1:f8:09:ab:99:3c:e1:1f:18:ac:69: b9:44:d5:6b:2a:87:eb:dd:75:3f:c7:19:a7:d2:5b: d9:a3:03:85:88:e1:f9:fe:64:d3:c5:83:08:35:d8: 02:46:90:e3:1e:2f:0a:f5:02:65:1e:94:5b:07:c6: 2e:83:86:f4:77:76:b0:41:61:01:a8:4c:69:9b:83: 14:35:e6:55:08:4f:69:3c:e2:96:f2:af:6c:72:c7: 8c:ef:c2:b6:6d:c6:7c:b3:bc:47:46:45:83:90:ab: a0:74:7f:25:d0:b8:06:b3:7f:4c:17:c5:48:5b:18: cd:9c:72:5a:ec:ab:cb:0c:b7:51:86:1d:33:58:aa: 2e:47:83:80:e7:ce:64:4c:b4:00:30:8e:ce:6b:ac: 2c:46:98:57:16:e7:54:f9:41:69:d9:66:92:05:32: 32:e7:d2:81:69:bc:0f:57:01:ed:6f:3a:14:08:25: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.160.0/22 138.121.120.0/22 IPv6: 2804:25a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264293 Signature Algorithm: sha256WithRSAEncryption 28:38:db:7d:a5:0c:e8:9e:2f:6d:97:5e:17:b0:05:5b:80:dc: 88:ed:e5:cb:3b:0a:84:a5:b9:a9:8e:43:e4:0c:ca:f2:1b:cf: fb:bf:59:de:44:65:52:5b:d5:0a:6a:58:7b:40:18:31:93:91: f5:f2:04:b1:b0:3d:05:64:87:16:35:08:24:9d:10:31:1b:5d: 66:21:58:34:49:26:c0:1b:f6:65:cb:70:e8:fe:27:a7:89:24: b5:9a:39:47:bf:ab:66:6a:44:8c:b9:d9:84:2b:d8:71:e9:bc: 1e:e2:3a:4e:96:ec:13:28:11:5d:5c:aa:ae:f9:f1:85:57:3e: 13:71:91:6b:11:a7:69:d9:33:40:bd:1d:d1:1e:e4:5f:58:da: e9:be:0c:f6:a4:7d:2b:63:ef:d2:09:72:25:4d:f7:42:88:b3: 2c:32:8f:e7:ee:f8:ed:c3:e5:5e:e9:89:23:83:74:a6:fb:25: b4:c7:36:f4:1a:7d:1f:f4:5a:c3:0c:94:46:32:a2:c3:09:de: 45:a2:80:08:36:a8:b5:37:81:9a:16:9d:2d:05:e3:f7:13:43: d2:ce:d6:61:b7:05:2a:32:64:45:b8:ee:46:02:c2:5e:14:fa: 9d:53:e8:83:45:67:65:c4:e4:1e:49:07:04:37:ad:e6:27:5e: 96:ae:53:b8 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYw1EMva3xZpuejx2OOg7QW0HBY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTgxNjQ0NTdaFw0yNjA3MTcxNjQ5NTdaMDMxMTAvBgNV BAMTKEEyQTNGMzRBRDM3N0REOEIxODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2HrUC8v5GaOXrtCK6+GcBn3+ 9Tt8GDU/S6CmfoPCwUgVkGgt8LOK/a687GIH7O79pRZIDqRG4gn9rUecLcMHbD9N /rV3w3219ydnua/R+AmrmTzhHxisablE1Wsqh+vddT/HGafSW9mjA4WI4fn+ZNPF gwg12AJGkOMeLwr1AmUelFsHxi6DhvR3drBBYQGoTGmbgxQ15lUIT2k84pbyr2xy x4zvwrZtxnyzvEdGRYOQq6B0fyXQuAazf0wXxUhbGM2cclrsq8sMt1GGHTNYqi5H g4DnzmRMtAAwjs5rrCxGmFcW51T5QWnZZpIFMjLn0oFpvA9XAe1vOhQIJbAVAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSio/NK03fdixhf ti8pRHmklT6inzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Fr dHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhWRmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh a3R0Q2syaktDMnlxU2d6aXpySnJyWTVhZ3pzWjJ3N0JRcXZrWEZYVkZoLzAvQTJB M0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5NTNFQTI5Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeigAwQCinl4MA0EAgACMAcDBQAoBCWoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIZTANBgkqhkiG9w0BAQsFAAOCAQEAKDjbfaUM 6J4vbZdeF7AFW4DciO3lyzsKhKW5qY5D5AzK8hvP+79Z3kRlUlvVCmpYe0AYMZOR 9fIEsbA9BWSHFjUIJJ0QMRtdZiFYNEkmwBv2Zctw6P4np4kktZo5R7+rZmpEjLnZ hCvYcem8HuI6TpbsEygRXVyqrvnxhVc+E3GRaxGnadkzQL0d0R7kX1ja6b4M9qR9 K2Pv0glyJU33QoizLDKP5+747cPlXumJI4N0pvsltMc29Bp9H/RawwyURjKiwwne RaKACDaotTeBmhadLQXj9xND0s7WYbcFKjJkRbjuRgLCXhT6nVPog0VnZcTkHkkH BDet5idelq5TuA== -----END CERTIFICATE-----Generated at Sat Jul 26 15:19:02 2025 by rpki-client