$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer File: CBB8A038671DF77F8F9579424916B82CCF45F66A.cer (raw, json) Hash identifier: zIsO6i+h7RNvl5cfKZIh9kb8QC9vBhWYg3f1VBkdG8c= Subject key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35365C7C0CB083C126E6A798E0B7F0588D989F11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft caRepository: rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 10 Jun 2025 17:44:44 +0000 Certificate not after: Tue 09 Jun 2026 17:49:44 +0000 Subordinate resources: AS: 263861 IP: 138.186.24.0/22 IP: 2804:26dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:36:5c:7c:0c:b0:83:c1:26:e6:a7:98:e0:b7:f0:58:8d:98:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 10 17:44:44 2025 GMT Not After : Jun 9 17:49:44 2026 GMT Subject: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:2e:31:c3:ac:21:11:f6:32:7c:57:5b:90: 71:c1:f9:cb:11:ef:4d:ea:65:06:a8:23:dc:dd:ae: 1a:a0:5d:ac:b6:46:16:72:85:78:c6:57:f3:62:14: 2e:c9:03:86:bc:8c:12:d2:9b:1f:90:eb:f8:b3:db: e6:b7:3d:a4:a3:4b:d9:79:48:58:0f:53:24:de:9a: 53:c2:57:16:d4:2d:30:5a:b9:ac:fc:c2:10:c8:3c: 89:95:c3:85:9c:07:bf:93:89:ed:94:40:8c:3c:98: 16:43:76:ab:58:b6:3f:3b:b6:05:de:55:8c:b2:ae: 47:c8:7a:d1:ce:b4:30:2b:da:63:bb:fe:e4:3b:6f: e8:f4:85:a2:4a:18:bd:97:6b:ed:09:be:df:fa:a4: 4d:ef:0f:5a:25:30:bc:99:15:79:16:65:02:d0:89: 1c:f3:cd:db:f1:55:ca:88:96:21:12:2d:3a:a1:0d: f2:81:11:6a:45:da:61:5c:e9:f2:9f:61:0c:7e:f5: 2e:bb:5d:ad:b0:71:7f:9f:ce:30:7d:fb:34:b0:85: 93:0b:74:1f:73:ad:ef:f5:95:54:dd:16:de:b1:5e: 77:5e:2b:ce:37:8a:2f:bd:87:cc:30:eb:a6:9c:d9: 06:2f:41:2a:1e:e7:2b:72:43:d1:a5:a8:e5:71:f4: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.24.0/22 IPv6: 2804:26dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263861 Signature Algorithm: sha256WithRSAEncryption ba:85:bb:0c:7d:a5:fc:a7:27:ff:cc:e6:e3:26:ae:34:0e:f2: 4c:ba:9a:c7:78:39:86:ce:b1:7f:c5:b2:09:cf:dc:8c:ab:51: dd:f9:cf:f8:7e:26:4a:31:37:f7:8f:33:7a:1e:b2:14:11:d1: e9:d2:ae:90:0e:cb:26:53:66:32:93:e3:1a:d9:27:e9:0d:35: 67:f6:4f:94:f6:2d:14:7d:97:0b:a5:17:53:b5:7a:13:ea:e4: 31:6e:a1:e4:bb:29:5d:42:dd:d7:d1:74:f1:ec:95:0e:f4:c0: 1b:73:e0:a6:99:93:2e:b9:45:0e:45:57:fa:3d:e6:8a:9b:8c: 80:d6:be:9b:07:d6:a7:33:d5:b7:ee:26:c9:72:e3:ed:58:08: c0:7b:59:45:d3:0c:5f:72:a9:b9:c6:75:c9:b6:ec:77:d5:7d: 0a:63:b3:7d:5c:91:56:ba:c1:95:27:e0:35:52:16:f0:7a:49: 95:b6:72:7a:99:73:82:17:32:c4:43:55:f3:3d:d2:68:46:37: 5c:d3:a6:1f:ef:be:52:17:5a:85:80:14:a8:0a:4a:f2:13:68: 35:77:8a:5b:53:0e:4e:83:d8:b2:86:29:84:db:6a:1b:10:b1: ee:60:c7:db:03:aa:af:b0:d1:47:4e:a6:7e:b5:6b:bf:07:76: c0:c9:fb:70 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNTZcfAywg8Em5qeY4LfwWI2YnxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTAxNzQ0NDRaFw0yNjA2MDkxNzQ5NDRaMDMxMTAvBgNV BAMTKENCQjhBMDM4NjcxREY3N0Y4Rjk1Nzk0MjQ5MTZCODJDQ0Y0NUY2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMS4xw6whEfYyfFdbkHHB+csR 703qZQaoI9zdrhqgXay2RhZyhXjGV/NiFC7JA4a8jBLSmx+Q6/iz2+a3PaSjS9l5 SFgPUyTemlPCVxbULTBauaz8whDIPImVw4WcB7+Tie2UQIw8mBZDdqtYtj87tgXe VYyyrkfIetHOtDAr2mO7/uQ7b+j0haJKGL2Xa+0Jvt/6pE3vD1olMLyZFXkWZQLQ iRzzzdvxVcqIliESLTqhDfKBEWpF2mFc6fKfYQx+9S67Xa2wcX+fzjB9+zSwhZML dB9zre/1lVTdFt6xXndeK843ii+9h8ww66ac2QYvQSoe5ytyQ9GlqOVx9JmXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLuKA4Zx33f4+V eUJJFrgsz0X2ajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFJw SDFUQ0pFckxpMkY1YWdOTHRCS0ZpaEpLZ0tyamRjQnNIdnFUS2s1RG8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRS cEgxVENKRXJMaTJGNWFnTkx0QktGaWhKS2dLcmpkY0JzSHZxVEtrNURvLzAvQ0JC OEEwMzg2NzFERjc3RjhGOTU3OTQyNDkxNkI4MkNDRjQ1RjY2QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCiroYMA0EAgACMAcDBQAoBCbcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQGtTANBgkqhkiG9w0BAQsFAAOCAQEAuoW7DH2l/Kcn/8zm 4yauNA7yTLqax3g5hs6xf8WyCc/cjKtR3fnP+H4mSjE3948zeh6yFBHR6dKukA7L JlNmMpPjGtkn6Q01Z/ZPlPYtFH2XC6UXU7V6E+rkMW6h5LspXULd19F08eyVDvTA G3PgppmTLrlFDkVX+j3mipuMgNa+mwfWpzPVt+4myXLj7VgIwHtZRdMMX3KpucZ1 ybbsd9V9CmOzfVyRVrrBlSfgNVIW8HpJlbZyeplzghcyxENV8z3SaEY3XNOmH+++ UhdahYAUqApK8hNoNXeKW1MOToPYsoYphNtqGxCx7mDH2wOqr7DRR06mfrVrvwd2 wMn7cA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:19:51 2025 by rpki-client