$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer File: B3CF569D82F323353BF019FCC8DA23146D666EF5.cer (raw, json) Hash identifier: G6FMasLptwOfpR3I+tyDg0PZwpLWgbiCG0BjUiv8uM0= Subject key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3344588A39813FFA46F37BDCF2066E661E7E0471 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft caRepository: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 28 Aug 2025 14:42:33 +0000 Certificate not after: Thu 27 Aug 2026 14:47:33 +0000 Subordinate resources: AS: 262589 IP: 177.84.160.0/21 IP: 177.136.80.0/22 IP: 186.219.0.0 -- 186.219.47.255 IP: 187.108.128.0/18 IP: 189.36.160.0/19 IP: 189.51.224.0/19 IP: 189.91.96.0/19 IP: 189.127.64.0/18 IP: 200.220.192.0/19 IP: 201.23.192.0/19 IP: 201.33.176.0/20 IP: 201.87.208.0/20 IP: 2804:3f8::/32 IP: 2804:680::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Sep 2025 15:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:44:58:8a:39:81:3f:fa:46:f3:7b:dc:f2:06:6e:66:1e:7e:04:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 28 14:42:33 2025 GMT Not After : Aug 27 14:47:33 2026 GMT Subject: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c8:28:d4:3b:89:17:ec:0e:ed:93:12:c0:c1: 69:92:a1:7b:0b:7a:fa:f6:38:dc:78:ce:d9:6a:15: 64:81:81:a2:92:60:73:0a:cb:fb:73:a0:cc:c7:12: 41:b8:1e:94:85:65:01:e6:d9:14:1f:13:f9:d5:5a: 14:ac:e8:b8:e2:37:73:15:f8:d4:5c:67:d9:64:41: 9d:79:c9:d8:67:5d:4c:83:99:fb:cd:9f:77:83:b8: ab:0f:fa:47:79:bd:28:d7:fd:e1:52:55:7a:cc:70: 06:11:40:68:6c:3d:0b:f3:7d:03:88:56:55:be:d7: 6b:a9:02:03:69:f1:d5:2e:10:a1:a6:27:99:39:66: 8e:46:73:d0:76:c7:5d:59:6f:47:42:78:df:fe:bf: 4e:34:40:9f:0a:33:32:d8:a5:d1:32:b8:40:90:fe: 4d:44:1b:26:71:93:79:1d:ae:75:82:a7:1c:2b:f9: 48:19:84:cf:20:53:18:b7:58:1c:68:83:f2:83:0f: 8e:0e:6c:59:36:f6:52:10:21:29:76:71:9c:60:b2: 7d:7b:bb:b7:87:bf:35:dd:90:46:5a:47:3f:95:eb: 5b:30:35:a2:2f:5d:a0:49:c7:4d:37:c8:4f:28:c0: 80:e8:1e:d0:cf:c5:52:31:86:cb:23:5d:eb:f0:e0: 6b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.84.160.0/21 177.136.80.0/22 186.219.0.0-186.219.47.255 187.108.128.0/18 189.36.160.0/19 189.51.224.0/19 189.91.96.0/19 189.127.64.0/18 200.220.192.0/19 201.23.192.0/19 201.33.176.0/20 201.87.208.0/20 IPv6: 2804:3f8::/32 2804:680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262589 Signature Algorithm: sha256WithRSAEncryption da:36:d2:33:17:b1:70:fc:a4:26:6d:a1:d4:dd:33:ad:d5:f6: 5c:f5:02:90:c1:d4:10:94:10:5a:fb:89:f4:d8:01:c7:44:76: c5:de:f2:65:ef:65:64:68:65:66:bb:c8:c6:5c:74:2e:f4:7d: 76:32:da:6b:f4:cf:be:f0:df:7f:ce:ec:96:b3:36:06:61:f1: 02:9a:90:d1:37:17:25:e1:ed:4e:9e:a4:c4:2c:10:a6:8e:87: df:ed:88:06:e1:cd:27:34:53:3e:87:21:ff:79:64:29:03:6c: d5:31:a5:11:c0:9f:45:af:8f:54:9f:70:79:e3:24:c9:17:cc: e8:e3:0e:b4:71:d6:11:8f:ae:ec:cb:bb:03:e0:75:24:37:4a: e7:c5:93:21:07:10:f7:14:0a:eb:22:7e:93:2b:e9:b5:28:d9: ed:a0:6c:ec:1b:78:5a:45:fe:5f:98:78:29:3c:6a:d5:38:49: 3b:82:89:ac:f4:c6:58:c7:1e:04:bd:99:68:fa:d5:13:67:a2: 8a:ed:1b:8a:10:6f:34:74:4a:65:9a:23:b5:a7:19:c5:eb:61: 3f:7f:b2:a0:67:7e:dd:31:84:c7:62:99:ec:43:20:6d:26:db: e0:55:66:c1:63:c7:0f:1b:c5:79:28:15:d9:a9:d2:2c:b8:86: 33:53:1e:49 -----BEGIN CERTIFICATE----- MIIGgDCCBWigAwIBAgIUM0RYijmBP/pG83vc8gZuZh5+BHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjgxNDQyMzNaFw0yNjA4MjcxNDQ3MzNaMDMxMTAvBgNV BAMTKEIzQ0Y1NjlEODJGMzIzMzUzQkYwMTlGQ0M4REEyMzE0NkQ2NjZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqyCjUO4kX7A7tkxLAwWmSoXsL evr2ONx4ztlqFWSBgaKSYHMKy/tzoMzHEkG4HpSFZQHm2RQfE/nVWhSs6LjiN3MV +NRcZ9lkQZ15ydhnXUyDmfvNn3eDuKsP+kd5vSjX/eFSVXrMcAYRQGhsPQvzfQOI VlW+12upAgNp8dUuEKGmJ5k5Zo5Gc9B2x11Zb0dCeN/+v040QJ8KMzLYpdEyuECQ /k1EGyZxk3kdrnWCpxwr+UgZhM8gUxi3WBxog/KDD44ObFk29lIQISl2cZxgsn17 u7eHvzXdkEZaRz+V61swNaIvXaBJx003yE8owIDoHtDPxVIxhssjXevw4GutAgMB AAGjggOKMIIDhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzz1adgvMjNTvw GfzI2iMUbWZu9TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTJO dXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZVbXcvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Uy TnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzIvQjND RjU2OUQ4MkYzMjMzNTNCRjAxOUZDQzhEQTIzMTQ2RDY2NkVGNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEH AQH/BG8wbTBVBAIAATBPAwQDsVSgAwQCsYhQMAsDAwC62wMEBLrbIAMEBrtsgAME Bb0koAMEBb0z4AMEBb1bYAMEBr1/QAMEBcjcwAMEBckXwAMEBMkhsAMEBMlX0DAU BAIAAjAOAwUAKAQD+AMFACgEBoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAG9 MA0GCSqGSIb3DQEBCwUAA4IBAQDaNtIzF7Fw/KQmbaHU3TOt1fZc9QKQwdQQlBBa +4n02AHHRHbF3vJl72VkaGVmu8jGXHQu9H12Mtpr9M++8N9/zuyWszYGYfECmpDR Nxcl4e1OnqTELBCmjoff7YgG4c0nNFM+hyH/eWQpA2zVMaURwJ9Fr49Un3B54yTJ F8zo4w60cdYRj67sy7sD4HUkN0rnxZMhBxD3FArrIn6TK+m1KNntoGzsG3haRf5f mHgpPGrVOEk7goms9MZYxx4EvZlo+tUTZ6KK7RuKEG80dEplmiO1pxnF62E/f7Kg Z37dMYTHYpnsQyBtJtvgVWbBY8cPG8V5KBXZqdIsuIYzUx5J -----END CERTIFICATE-----Generated at Mon Sep 15 14:28:57 2025 by rpki-client