$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer File: CC038C42F33B3D558931769A27D97E3412751117.cer (raw, json) Hash identifier: jYHUKBW5Xfhp8tI+7snEVLDahEweTirgKWCz/XKNAq4= Subject key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F9EE84A9A2C37A96A18B0206E4D19B2C929E62D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft caRepository: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 09 Jul 2025 05:18:50 +0000 Certificate not after: Wed 08 Jul 2026 05:23:50 +0000 Subordinate resources: AS: 264386 IP: 45.6.240.0/23 IP: 131.108.172.0/22 IP: 168.197.80.0/22 IP: 2804:1db0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9e:e8:4a:9a:2c:37:a9:6a:18:b0:20:6e:4d:19:b2:c9:29:e6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 9 05:18:50 2025 GMT Not After : Jul 8 05:23:50 2026 GMT Subject: CN=CC038C42F33B3D558931769A27D97E3412751117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:22:a6:57:56:14:48:b5:29:d7:ab:fe:70: aa:6e:e0:ba:4c:5e:e4:d2:c9:f1:a2:bf:e2:82:d3: c7:b8:e1:83:d4:2d:35:96:2c:eb:eb:b7:b9:72:2b: 7c:a5:66:8f:4c:18:da:1b:45:87:e1:2f:df:72:cb: 3b:f4:79:bf:64:8c:a9:af:f0:e6:51:24:74:75:d5: d9:7e:8e:64:3a:6a:b7:2b:78:91:25:7d:e7:a0:17: 19:51:e0:b7:73:4b:70:c4:c3:96:69:ce:d9:ac:a5: 6e:19:f7:bf:ea:aa:de:dd:f8:3d:70:cb:08:7f:35: c6:72:7a:a3:f6:51:bd:9f:b4:0a:a0:80:3d:03:91: fa:24:c6:fd:f3:b2:c8:37:9d:ed:54:83:8d:06:33: 62:39:b3:68:29:3f:7a:ed:fe:5b:c9:ca:d6:0e:2a: 06:83:6a:e9:99:97:19:66:62:50:b1:72:60:73:84: 35:87:0a:02:1e:d8:2c:0b:f0:2c:1a:14:11:c0:bc: 8d:96:6e:5e:de:5b:e6:69:d5:6e:d6:94:fa:6b:65: 5a:a0:04:61:1f:a9:f7:5f:b8:e8:1f:3e:72:3e:31: a8:7e:df:9a:fd:09:b7:23:7f:fd:86:a8:1c:1b:91: b0:43:7c:6a:28:db:ae:b9:e5:32:c3:1e:9d:da:a6: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.240.0/23 131.108.172.0/22 168.197.80.0/22 IPv6: 2804:1db0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264386 Signature Algorithm: sha256WithRSAEncryption 58:b6:fd:7b:a6:46:49:bf:a7:72:d3:ac:cc:35:6b:be:d3:98: a6:3f:14:6d:95:9a:4c:8f:96:74:aa:e5:50:b9:cf:90:36:c3: d8:85:b6:d6:ef:bb:0a:97:2b:d7:40:2c:0e:96:ab:e4:0d:7f: 12:f8:4c:23:0a:c7:7e:39:f8:4c:1b:d7:74:82:a7:6a:d5:21: 19:b5:ee:9b:27:e5:7b:bd:e8:52:c1:f9:18:aa:ef:a0:3e:4d: 14:c9:22:da:95:d3:9c:ac:00:55:96:eb:7c:3b:83:5c:32:3d: 19:f2:a2:0a:65:98:e8:73:28:9d:15:24:14:b3:63:3d:54:e4: 90:8c:02:58:6c:6a:48:f0:0c:c7:1d:07:8e:a2:da:da:12:db: ea:b1:0f:2c:be:26:77:cf:54:01:9d:10:57:a9:04:6e:43:e5: 74:b6:bd:dd:d2:00:86:47:50:42:9d:67:20:81:99:0d:75:d7: e0:13:73:d8:64:e5:23:5d:af:79:2a:2f:21:69:49:d0:47:a9: 19:16:c4:48:4e:87:42:e2:80:e9:1c:cd:5a:2d:ad:58:88:4f: 52:03:4d:b7:2a:e3:cb:31:dd:1d:e8:db:cd:07:34:c5:75:4a: 8b:b2:ff:c7:56:ac:ae:48:56:20:16:3e:62:44:fc:ec:15:84: 02:a7:5a:e1 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUD57oSposN6lqGLAgbk0Zsskp5i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDkwNTE4NTBaFw0yNjA3MDgwNTIzNTBaMDMxMTAvBgNV BAMTKENDMDM4QzQyRjMzQjNENTU4OTMxNzY5QTI3RDk3RTM0MTI3NTExMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVyKmV1YUSLUp16v+cKpu4LpM XuTSyfGiv+KC08e44YPULTWWLOvrt7lyK3ylZo9MGNobRYfhL99yyzv0eb9kjKmv 8OZRJHR11dl+jmQ6arcreJElfeegFxlR4LdzS3DEw5ZpztmspW4Z97/qqt7d+D1w ywh/NcZyeqP2Ub2ftAqggD0Dkfokxv3zssg3ne1Ug40GM2I5s2gpP3rt/lvJytYO KgaDaumZlxlmYlCxcmBzhDWHCgIe2CwL8CwaFBHAvI2Wbl7eW+Zp1W7WlPprZVqg BGEfqfdfuOgfPnI+Mah+35r9Cbcjf/2GqBwbkbBDfGoo26655TLDHp3apgvDAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMA4xC8zs9VYkx dpon2X40EnURFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREMy SGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6amIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RD MkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzEvQ0Mw MzhDNDJGMzNCM0Q1NTg5MzE3NjlBMjdEOTdFMzQxMjc1MTExNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQBLQbwAwQCg2ysAwQCqMVQMA0EAgACMAcDBQAoBB2w MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQIwjANBgkqhkiG9w0BAQsFAAOCAQEA WLb9e6ZGSb+nctOszDVrvtOYpj8UbZWaTI+WdKrlULnPkDbD2IW21u+7Cpcr10As Dpar5A1/EvhMIwrHfjn4TBvXdIKnatUhGbXumyfle73oUsH5GKrvoD5NFMki2pXT nKwAVZbrfDuDXDI9GfKiCmWY6HMonRUkFLNjPVTkkIwCWGxqSPAMxx0HjqLa2hLb 6rEPLL4md89UAZ0QV6kEbkPldLa93dIAhkdQQp1nIIGZDXXX4BNz2GTlI12veSov IWlJ0EepGRbESE6HQuKA6RzNWi2tWIhPUgNNtyrjyzHdHejbzQc0xXVKi7L/x1as rkhWIBY+YkT87BWEAqda4Q== -----END CERTIFICATE-----Generated at Tue Jul 29 11:14:50 2025 by rpki-client