$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer File: CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer (raw, json) Hash identifier: pMMDfKEPAsxw5csPZqaAPGauMMdzyxtE+zsKyNNuFTE= Subject key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 233BDFAD0C4FCDDF4656E7CDD0F9DE6D09285243 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft caRepository: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 22:58:33 +0000 Certificate not after: Tue 07 Jul 2026 23:03:33 +0000 Subordinate resources: AS: 53052 IP: 187.84.32.0/20 IP: 2804:2f48::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 04:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3b:df:ad:0c:4f:cd:df:46:56:e7:cd:d0:f9:de:6d:09:28:52:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 22:58:33 2025 GMT Not After : Jul 7 23:03:33 2026 GMT Subject: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:1a:fe:b2:73:4a:b2:55:6a:5f:27:d4:18: 85:51:e6:0e:97:6b:9d:38:50:c8:d1:e0:e4:02:32: 36:80:c6:c0:ce:16:e8:82:41:d2:d1:e2:3a:81:d1: 13:e5:2f:96:ac:81:c9:8c:aa:a7:25:ec:c2:4e:be: 28:f5:37:61:63:46:08:e4:75:b8:7b:19:b7:74:64: da:58:a6:6c:29:7c:0e:0b:ae:81:a6:da:6e:5b:a7: f5:db:06:78:bf:e9:dc:6f:e3:90:73:11:0b:81:4e: 4c:a2:8f:ad:28:a7:5c:cb:63:ef:04:f3:56:9d:3f: d0:92:bf:a8:8d:1e:3c:42:26:d6:be:f9:43:b6:65: 74:36:49:de:7d:a2:87:32:1f:e8:af:ff:43:89:44: 12:17:26:1d:4e:78:c9:87:64:95:7b:ec:ca:c1:dc: 07:17:0b:78:b2:87:e9:02:a1:91:25:81:b4:b7:85: c8:98:fc:14:60:67:25:bc:7f:6a:8c:eb:bb:10:ad: 99:cc:8a:84:cd:67:c3:d2:2a:9d:fc:60:0c:1f:7e: e9:b0:bf:82:de:25:00:a8:3c:43:c3:aa:87:c8:bf: bf:14:de:92:a2:23:fd:a9:aa:68:5a:c5:e2:e2:70: bc:92:d0:31:bd:29:cf:af:ae:c1:3e:ae:e5:f1:59: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.84.32.0/20 IPv6: 2804:2f48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53052 Signature Algorithm: sha256WithRSAEncryption 15:3d:6e:00:8d:11:aa:ba:65:83:d2:01:e2:b1:bc:31:2e:90: 60:6e:f9:f7:f6:a7:f1:9c:c3:67:6b:a9:49:59:de:4b:79:f1: 67:8f:93:70:b0:37:b2:40:ef:14:31:e3:18:c9:c8:31:33:48: c0:9e:b7:87:04:0a:4b:cd:02:e7:72:af:26:c7:c4:cb:37:fd: d3:2b:8a:e7:b6:ea:02:53:6e:c9:eb:a0:14:3e:af:86:7c:8b: aa:6a:1b:70:49:59:05:51:b1:90:1c:03:52:41:6c:c0:de:77: fa:82:d3:ad:e5:d5:bc:3d:48:df:e2:bd:b1:df:e3:ca:18:e2: 39:ab:b4:d7:af:aa:92:2a:84:74:f9:db:3b:d9:d8:b1:44:d3: 1d:14:67:e8:07:3f:78:1e:aa:c5:7d:f9:4b:c8:93:35:c2:b7: 6d:f5:51:75:d3:03:fe:0d:f1:25:df:19:c3:fc:aa:43:88:94: 08:51:a8:ed:37:aa:ed:82:97:d5:c6:f6:47:93:6d:4e:27:61: aa:bc:63:95:19:fe:58:74:55:15:70:57:13:01:d5:94:68:12: cf:2b:02:c9:c3:bb:25:a7:c7:e7:b6:97:62:cb:91:3f:57:c6: bb:5f:f6:3d:0d:94:ab:a7:f8:a0:b3:d6:ba:93:d3:4d:f0:a3: 46:a3:8d:ce -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIzvfrQxPzd9GVufN0PnebQkoUkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDgyMjU4MzNaFw0yNjA3MDcyMzAzMzNaMDMxMTAvBgNV BAMTKENBQTY1MTREMkREMUFGNDZFNzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FRr+snNKslVqXyfUGIVR5g6X a504UMjR4OQCMjaAxsDOFuiCQdLR4jqB0RPlL5asgcmMqqcl7MJOvij1N2FjRgjk dbh7Gbd0ZNpYpmwpfA4LroGm2m5bp/XbBni/6dxv45BzEQuBTkyij60op1zLY+8E 81adP9CSv6iNHjxCJta++UO2ZXQ2Sd59oocyH+iv/0OJRBIXJh1OeMmHZJV77MrB 3AcXC3iyh+kCoZElgbS3hciY/BRgZyW8f2qM67sQrZnMioTNZ8PSKp38YAwffumw v4LeJQCoPEPDqofIv78U3pKiI/2pqmhaxeLicLyS0DG9Kc+vrsE+ruXxWcYXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKplFNLdGvRueX 2RwzTHikSbdAPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVlV M3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVMRFUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlZ VTN1TFFnVVh1NUViUms3dVdNYVpkZkxDS0JnalFtWDlGZzJ0Q3c1TERVLzAvQ0FB NjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0OUI3NDAzRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEu1QgMA0EAgACMAcDBQAoBC9IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDPPDANBgkqhkiG9w0BAQsFAAOCAQEAFT1uAI0Rqrplg9IB 4rG8MS6QYG759/an8ZzDZ2upSVneS3nxZ4+TcLA3skDvFDHjGMnIMTNIwJ63hwQK S80C53KvJsfEyzf90yuK57bqAlNuyeugFD6vhnyLqmobcElZBVGxkBwDUkFswN53 +oLTreXVvD1I3+K9sd/jyhjiOau016+qkiqEdPnbO9nYsUTTHRRn6Ac/eB6qxX35 S8iTNcK3bfVRddMD/g3xJd8Zw/yqQ4iUCFGo7Teq7YKX1cb2R5NtTidhqrxjlRn+ WHRVFXBXEwHVlGgSzysCycO7JafH57aXYsuRP1fGu1/2PQ2Uq6f4oLPWupPTTfCj RqONzg== -----END CERTIFICATE-----Generated at Sun Jul 27 04:36:18 2025 by rpki-client