$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer File: AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer (raw, json) Hash identifier: 81BFaV9oflrasuDRZdba3yCG4S+bOJ9nGXPjHaRlu7c= Subject key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 456A563B1840435A57FAF2276B492B6ED39A6756 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft caRepository: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 15 Jul 2025 23:39:53 +0000 Certificate not after: Tue 14 Jul 2026 23:44:53 +0000 Subordinate resources: AS: 1916 AS: 6125 IP: 132.255.96.0/22 IP: 138.121.68.0/22 IP: 150.165.0.0/16 IP: 170.79.212.0/22 IP: 200.17.0.0/20 IP: 200.17.32.0 -- 200.17.79.255 IP: 200.17.112.0 -- 200.17.159.255 IP: 200.17.176.0/20 IP: 200.18.20.0 -- 200.18.31.255 IP: 200.18.80.0/20 IP: 200.18.128.0 -- 200.18.239.255 IP: 200.19.8.0 -- 200.19.47.255 IP: 200.19.112.0 -- 200.19.191.255 IP: 200.128.128.0 -- 200.128.239.255 IP: 200.129.0.0 -- 200.131.255.255 IP: 200.133.0.0 -- 200.133.223.255 IP: 200.133.240.0/20 IP: 200.137.0.0/16 IP: 200.139.0.0/18 IP: 200.143.192.0/18 IP: 200.159.240.0/20 IP: 200.235.0.0/17 IP: 200.237.0.0/18 IP: 200.239.128.0/18 IP: 2001:12f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 06:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6a:56:3b:18:40:43:5a:57:fa:f2:27:6b:49:2b:6e:d3:9a:67:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 15 23:39:53 2025 GMT Not After : Jul 14 23:44:53 2026 GMT Subject: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:2f:24:c0:dc:9f:16:67:7b:06:c1:4f:07: 04:8f:f4:a3:76:54:c7:bd:08:b9:cc:5d:ef:4d:7e: 59:15:41:4d:45:cc:d9:c8:86:c8:c7:d3:92:1b:bd: 32:95:9b:22:6c:3a:0a:60:fd:d5:d0:2c:da:0a:0f: 61:26:91:b4:35:65:55:7a:c4:b8:b7:cc:90:2c:c7: 50:04:fd:2b:b2:7b:d0:5c:a1:fc:7d:2b:68:ad:4b: 91:95:5b:e7:c5:f3:98:e7:5d:e9:5a:69:08:36:ca: 86:dc:3e:13:b5:73:e4:7b:f4:e7:27:a4:43:6b:ed: f8:35:d5:23:84:f6:a4:52:4f:58:6f:b1:7e:d6:71: ed:b5:1c:7d:2e:bc:49:10:fb:9f:28:5c:ed:6a:83: 24:57:2b:98:40:11:9c:60:a7:06:38:48:47:88:3e: 2b:f7:54:bc:c2:5c:3c:b9:92:bb:dc:20:d4:9c:20: c5:d9:f3:eb:31:b3:3a:b5:9f:32:2c:22:46:3f:01: 81:00:b2:3a:07:34:de:11:ac:9f:c0:17:90:f9:b4: 1a:aa:b5:48:09:a2:b2:fd:68:a7:b0:1b:88:fc:6d: 08:e4:38:57:73:09:41:9b:a3:74:16:94:bc:aa:3f: 08:2f:7b:53:33:c2:12:95:b6:37:29:28:ed:63:6f: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.96.0/22 138.121.68.0/22 150.165.0.0/16 170.79.212.0/22 200.17.0.0/20 200.17.32.0-200.17.79.255 200.17.112.0-200.17.159.255 200.17.176.0/20 200.18.20.0-200.18.31.255 200.18.80.0/20 200.18.128.0-200.18.239.255 200.19.8.0-200.19.47.255 200.19.112.0-200.19.191.255 200.128.128.0-200.128.239.255 200.129.0.0-200.131.255.255 200.133.0.0-200.133.223.255 200.133.240.0/20 200.137.0.0/16 200.139.0.0/18 200.143.192.0/18 200.159.240.0/20 200.235.0.0/17 200.237.0.0/18 200.239.128.0/18 IPv6: 2001:12f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1916 6125 Signature Algorithm: sha256WithRSAEncryption 6f:6c:ff:64:69:f5:1b:4d:86:bd:bf:d1:e0:b1:ba:6b:9d:93: c1:14:b2:42:83:0b:5b:ac:9f:22:96:a7:e0:07:1d:2c:73:6d: 76:da:ba:d2:99:27:4e:d8:27:10:82:ad:53:5f:b6:05:7a:1c: 5d:e9:4a:e8:57:3f:b2:60:92:72:7f:9c:d3:fa:00:e0:fe:35: 33:38:20:b6:af:87:da:e7:b8:c7:94:9e:5e:46:c2:cc:8d:d1: eb:cb:11:5d:01:30:32:23:cc:7d:12:ae:46:e0:4e:0f:96:1a: 14:05:e5:d9:bf:db:c4:e6:7f:eb:d0:b8:dd:4c:bd:4c:9e:5b: 40:27:57:05:e3:e3:67:c8:fd:22:31:b2:e6:92:72:a3:19:79: c9:9f:9b:f7:98:e6:73:95:3a:5e:72:37:77:8a:b5:26:81:67: 15:c0:c0:09:21:d8:ce:bc:55:0e:6c:4a:83:64:ed:fe:fd:f0: 01:8e:4b:f0:03:15:7d:1b:2b:f1:45:27:4e:16:78:5a:a4:54: 3f:4f:04:ac:64:25:b6:80:f1:fb:0c:6b:b8:cf:60:c8:73:a2: f5:7e:f8:3b:aa:4f:58:95:86:bf:03:4d:a8:f9:13:d4:cb:1b: e5:e6:54:3b:19:5e:21:6c:8f:90:2a:3a:76:53:41:0c:09:10: 62:f7:91:2f -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIURWpWOxhAQ1pX+vIna0krbtOaZ1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTUyMzM5NTNaFw0yNjA3MTQyMzQ0NTNaMDMxMTAvBgNV BAMTKEFFRTQ2RTMyQ0IxNDYyNDE5Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCS8kwNyfFmd7BsFPBwSP9KN2 VMe9CLnMXe9NflkVQU1FzNnIhsjH05IbvTKVmyJsOgpg/dXQLNoKD2EmkbQ1ZVV6 xLi3zJAsx1AE/Suye9Bcofx9K2itS5GVW+fF85jnXelaaQg2yobcPhO1c+R79Ocn pENr7fg11SOE9qRST1hvsX7Wce21HH0uvEkQ+58oXO1qgyRXK5hAEZxgpwY4SEeI Piv3VLzCXDy5krvcINScIMXZ8+sxszq1nzIsIkY/AYEAsjoHNN4RrJ/AF5D5tBqq tUgJorL9aKewG4j8bQjkOFdzCUGbo3QWlLyqPwgve1MzwhKVtjcpKO1jb9bdAgMB AAGjggQPMIIECzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu5G4yyxRiQZzM uJtcSYSV6Rm1zzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkgy YW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1VdWQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJI MmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAvQUVF NDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVFOTE5QjVDRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH/BggrBgEFBQcB BwEB/wSB7zCB7DCB2gQCAAEwgdMDBAKE/2ADBAKKeUQDAwCWpQMEAqpP1AMEBMgR ADAMAwQFyBEgAwQEyBFAMAwDBATIEXADBAXIEYADBATIEbAwDAMEAsgSFAMEBcgS AAMEBMgSUDAMAwQHyBKAAwQEyBLgMAwDBAPIEwgDBATIEyAwDAMEBMgTcAMEBsgT gDAMAwQHyICAAwQEyIDgMAoDAwDIgQMDAsiAMAsDAwDIhQMEBciFwAMEBMiF8AMD AMiJAwQGyIsAAwQGyI/AAwQEyJ/wAwQHyOsAAwQGyO0AAwQGyO+AMA0EAgACMAcD BQAgARLwMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAgd8AgIX7TANBgkqhkiG9w0B AQsFAAOCAQEAb2z/ZGn1G02Gvb/R4LG6a52TwRSyQoMLW6yfIpan4AcdLHNtdtq6 0pknTtgnEIKtU1+2BXocXelK6Fc/smCScn+c0/oA4P41Mzggtq+H2ue4x5SeXkbC zI3R68sRXQEwMiPMfRKuRuBOD5YaFAXl2b/bxOZ/69C43Uy9TJ5bQCdXBePjZ8j9 IjGy5pJyoxl5yZ+b95jmc5U6XnI3d4q1JoFnFcDACSHYzrxVDmxKg2Tt/v3wAY5L 8AMVfRsr8UUnThZ4WqRUP08ErGQltoDx+wxruM9gyHOi9X74O6pPWJWGvwNNqPkT 1Msb5eZUOxleIWyPkCo6dlNBDAkQYveRLw== -----END CERTIFICATE-----Generated at Mon Jul 28 11:50:59 2025 by rpki-client