$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer File: A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer (raw, json) Hash identifier: 9E92+/OOEebfRdEDsoUtXRyMWim2ULoqZzBcAKcPhho= Subject key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C01E5DD68AE758072F384D7BDF8335E3B49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft caRepository: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 08 Aug 2025 13:22:23 +0000 Certificate not after: Fri 07 Aug 2026 13:27:23 +0000 Subordinate resources: AS: 270440 IP: 200.13.84.0/22 IP: 2804:6c04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:01:e5:dd:68:ae:75:80:72:f3:84:d7:bd:f8:33:5e:3b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 8 13:22:23 2025 GMT Not After : Aug 7 13:27:23 2026 GMT Subject: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:33:48:44:e3:c4:66:03:e1:f3:63:55:41: b3:5f:90:a5:ff:ca:ec:90:f6:5a:a1:cc:d0:b4:2d: 15:c4:da:18:5c:11:26:f3:e8:39:af:d3:82:16:42: 55:70:4e:f0:c8:12:40:cf:86:14:6e:7f:b1:b2:4c: 41:73:40:f4:be:32:2f:88:18:22:d3:22:33:8e:e7: 8b:1e:c2:29:a4:2e:16:d7:d6:f0:27:b3:7d:db:99: b2:ee:0f:bd:61:ed:6b:6c:62:5c:49:2c:d6:c2:a8: 40:e4:6c:1d:2e:24:ef:5e:ac:6f:23:06:68:b7:40: 99:7e:98:1d:58:cc:34:de:c0:fa:ba:d3:ab:d7:e3: 0a:72:c6:77:cb:08:2a:36:36:66:d3:ca:d5:3e:ed: db:dc:19:fd:d8:47:23:a3:83:f8:f2:fe:67:d3:1b: b3:02:4a:b2:9b:00:91:fc:15:c3:59:3c:28:2a:f0: fa:3d:d2:05:eb:ff:ab:3d:4e:65:ed:11:55:c0:78: a9:c3:d4:b3:5e:52:ac:2c:2c:f4:94:77:d1:20:40: fe:c4:a3:b0:06:c0:98:9a:d3:ba:ed:b7:16:40:70: 19:5a:45:2d:df:a1:86:ab:bf:25:cf:25:83:36:0e: ed:56:8b:b7:5a:8a:cc:29:be:ed:e3:6a:e4:53:d9: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.13.84.0/22 IPv6: 2804:6c04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270440 Signature Algorithm: sha256WithRSAEncryption c2:20:d3:55:f1:e6:8e:f6:ee:5e:fa:f1:4a:50:c5:d5:04:7a: b9:b8:ec:41:13:b0:3f:c0:3a:17:1d:f3:d6:e2:12:c8:33:69: ab:bc:d9:c9:8d:18:6b:2a:72:4b:dd:82:82:84:48:c1:ef:2b: ca:4e:32:34:35:d5:9f:61:72:a4:0a:ba:78:b1:87:b3:65:39: 6d:77:59:3b:68:8a:ac:bc:9b:91:d3:6b:c0:ed:d1:5e:5d:ef: d4:c1:c6:47:10:5b:95:26:e3:46:34:cd:26:38:aa:46:59:92: 2b:13:32:3e:58:16:34:d2:37:25:cb:ca:7e:7a:6c:b7:42:34: 0e:8f:38:5c:51:1b:37:1b:66:93:8b:56:aa:6a:0f:a7:c9:da: 0d:2e:06:f5:f6:01:66:52:0b:c8:31:95:2e:fc:87:01:92:ee: 67:0c:1c:1b:23:01:0c:64:d9:c8:9e:e9:83:82:03:c6:d7:c3: c9:51:a3:9c:e7:52:42:d5:4b:f0:0d:c0:39:66:43:fb:0f:26: 65:2e:c9:06:b9:75:07:a3:ae:8c:cc:fa:89:fc:dc:0b:9f:c0: 29:91:67:81:11:77:fb:a5:c8:26:7a:ce:0f:e7:57:c5:23:09: 9d:67:15:7a:bb:cc:77:33:df:d9:46:64:ec:a6:57:0a:92:9a: 50:8f:ec:13 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgISTAHl3WiudYBy84TXvfgzXjtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTQzMkU5RTFCMDVBN0U2QzIwOEIyOTQ2RkRDOUM5NjdD QThBNEIwHhcNMjUwODA4MTMyMjIzWhcNMjYwODA3MTMyNzIzWjAzMTEwLwYDVQQD EyhBMzVCODhDRjU3NzlCMDA2NUVEQjc3Qjk0OTlCMjFDNDNBM0Y3QzhBMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqAzSETjxGYD4fNjVUGzX5Cl/8rs kPZaoczQtC0VxNoYXBEm8+g5r9OCFkJVcE7wyBJAz4YUbn+xskxBc0D0vjIviBgi 0yIzjueLHsIppC4W19bwJ7N925my7g+9Ye1rbGJcSSzWwqhA5GwdLiTvXqxvIwZo t0CZfpgdWMw03sD6utOr1+MKcsZ3ywgqNjZm08rVPu3b3Bn92Ecjo4P48v5n0xuz AkqymwCR/BXDWTwoKvD6PdIF6/+rPU5l7RFVwHipw9SzXlKsLCz0lHfRIED+xKOw BsCYmtO67bcWQHAZWkUt36GGq78lzyWDNg7tVou3WorMKb7t42rkU9m1MQIDAQAB o4IDOjCCAzYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUo1uIz1d5sAZe23e5 SZshxDo/fIowHwYDVR0jBBgwFoAUYFQy6eGwWn5sIIspRv3JyWfKikswDgYDVR0P AQH/BAQDAgEGMG0GA1UdHwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS1yZXBvLnJl Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNTQzMkU5RTFCMDVBN0U2QzIw OEIyOTQ2RkRDOUM5NjdDQThBNEIuY3JsMIG5BggrBgEFBQcBAQSBrDCBqTCBpgYI KwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMTUzMUIyNEJGNTBDNDYxQzdGNTc0Q0Q2NTI2N0E4QjBEQzMyNURBQUEx MDA3NUY2NzE2NUI5OEM0RjRFRkMzLzAvNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5 NDZGREM5Qzk2N0NBOEE0Qi5jZXIwggFABggrBgEFBQcBCwSCATIwggEuMF4GCCsG AQUFBzAFhlJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRm V29qTkJYYWltY0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzAvMIGKBggr BgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0U0 Zldvak5CWGFpbWNMV1ZMUnF2NGo1OWh2Z2M5ODY2UHRvVFB0R2tKMi8wL0EzNUI4 OENGNTc3OUIwMDY1RURCNzdCOTQ5OUIyMUM0M0EzRjdDOEEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAsgNVDANBAIAAjAHAwUAKARsBDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEIGgwDQYJKoZIhvcNAQELBQADggEBAMIg01Xx5o727l768UpQ xdUEerm47EETsD/AOhcd89biEsgzaau82cmNGGsqckvdgoKESMHvK8pOMjQ11Z9h cqQKunixh7NlOW13WTtoiqy8m5HTa8Dt0V5d79TBxkcQW5Um40Y0zSY4qkZZkisT Mj5YFjTSNyXLyn56bLdCNA6POFxRGzcbZpOLVqpqD6fJ2g0uBvX2AWZSC8gxlS78 hwGS7mcMHBsjAQxk2cie6YOCA8bXw8lRo5znUkLVS/ANwDlmQ/sPJmUuyQa5dQej rozM+on83AufwCmRZ4ERd/ulyCZ6zg/nV8UjCZ1nFXq7zHcz39lGZOymVwqSmlCP 7BM= -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:14 2025 by rpki-client