$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer File: E30CAFF45780AC90434C232E196752E3283B9BD2.cer (raw, json) Hash identifier: 12Qed5nDsn9zcdaJEJzTL7X1JIbDy+0nhO3RQTc14qo= Subject key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3CBA8D64E696D134F5E9331F1072D851C41AF158 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft caRepository: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:26 +0000 Certificate not after: Fri 06 Mar 2026 14:42:26 +0000 Subordinate resources: AS: 262301 IP: 170.0.248.0/22 IP: 177.87.112.0/21 IP: 2804:1824::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ba:8d:64:e6:96:d1:34:f5:e9:33:1f:10:72:d8:51:c4:1a:f1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:26 2025 GMT Not After : Mar 6 14:42:26 2026 GMT Subject: CN=E30CAFF45780AC90434C232E196752E3283B9BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:af:81:49:24:6f:59:c6:42:89:c0:04:77: 1b:b8:2e:75:db:17:ab:7f:92:26:94:79:ef:07:96: a1:a0:c7:a2:03:f9:27:46:22:6e:20:f4:07:a8:4f: 63:36:1a:b6:c6:07:dd:37:1d:b3:9f:46:19:30:14: 0a:13:17:83:47:81:31:97:e2:67:6b:82:92:9e:3d: ae:87:db:4a:7e:8a:90:c8:78:3f:59:39:73:1c:b0: 8d:63:d0:55:8a:cd:fb:b9:74:30:c4:88:86:9f:a6: 4a:55:99:b7:77:13:11:e3:23:9f:e9:3f:00:e0:8c: a1:cb:1b:d2:94:a8:1c:57:c8:9a:6f:f5:7e:84:d7: 8b:27:a4:76:3a:9e:9d:b0:bd:d3:48:be:d1:8e:e2: 62:0d:2d:76:8d:ac:f5:a8:de:c9:2e:a2:4e:bb:d2: 74:2f:5d:47:c3:6c:44:c9:01:9c:ca:46:c9:bf:15: 32:04:2d:35:f7:52:8d:73:1f:e0:93:ed:a5:6a:38: 3a:00:2f:a2:99:3a:29:82:02:f9:e6:a4:00:0e:50: 08:c3:19:01:14:8b:18:6d:b0:ae:b6:d2:d3:7e:5d: 9b:21:5b:ef:11:5e:a1:30:f8:e8:b2:f3:44:ea:6f: 7e:03:f5:b3:3d:c3:72:cc:79:e9:b7:92:1f:6a:c8: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.0.248.0/22 177.87.112.0/21 IPv6: 2804:1824::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262301 Signature Algorithm: sha256WithRSAEncryption 83:a7:25:7d:ff:e1:0f:ac:bc:29:16:87:8a:c2:1d:af:b4:d1: 2b:72:70:8a:af:21:25:68:ce:25:a9:08:0d:aa:d2:fa:23:54: 1f:f8:54:4f:cd:56:07:7d:73:f5:73:9d:16:df:4c:7b:00:15: bb:7d:44:ed:f0:1c:d3:2b:30:06:1a:c8:b3:42:1f:52:21:01: b3:36:34:56:d5:8a:7e:ba:0a:07:b6:7b:c8:7b:39:5b:45:4d: c7:89:33:f6:a7:32:84:99:04:80:6b:ca:cc:0f:cf:fc:9a:30: b0:aa:67:7a:4c:ae:03:86:5a:94:8e:19:d6:63:22:1e:d2:8e: 97:7f:70:f4:1f:25:ee:79:47:65:98:19:d3:1f:78:8d:4a:33: 3e:8a:a9:9e:e3:8c:e9:54:41:ba:c5:5a:81:b5:75:49:4e:2c: ec:a5:36:82:91:48:e3:19:f8:32:bf:63:d9:59:57:c3:ab:b6: 2b:ce:4f:5d:e2:1f:0e:40:31:17:bf:e4:f2:1b:46:a7:7b:2f: ad:41:07:7f:d7:bf:64:33:34:b3:59:e6:e9:19:3f:86:31:7d: f6:29:73:0e:b0:1b:a9:8b:e3:dd:eb:b9:cd:2c:94:da:e6:a7: 72:f2:24:c6:4a:a7:34:ae:da:fc:5b:d4:80:f0:18:40:ab:be: d1:16:e8:91 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPLqNZOaW0TT16TMfEHLYUcQa8VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MjZaFw0yNjAzMDYxNDQyMjZaMDMxMTAvBgNV BAMTKEUzMENBRkY0NTc4MEFDOTA0MzRDMjMyRTE5Njc1MkUzMjgzQjlCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CK+BSSRvWcZCicAEdxu4LnXb F6t/kiaUee8HlqGgx6ID+SdGIm4g9AeoT2M2GrbGB903HbOfRhkwFAoTF4NHgTGX 4mdrgpKePa6H20p+ipDIeD9ZOXMcsI1j0FWKzfu5dDDEiIafpkpVmbd3ExHjI5/p PwDgjKHLG9KUqBxXyJpv9X6E14snpHY6np2wvdNIvtGO4mINLXaNrPWo3skuok67 0nQvXUfDbETJAZzKRsm/FTIELTX3Uo1zH+CT7aVqODoAL6KZOimCAvnmpAAOUAjD GQEUixhtsK620tN+XZshW+8RXqEw+Oiy80Tqb34D9bM9w3LMeem3kh9qyFI9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjDK/0V4CskENM Iy4ZZ1LjKDub0jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVhj UzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFIeUgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VY Y1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzEvRTMw Q0FGRjQ1NzgwQUM5MDQzNEMyMzJFMTk2NzUyRTMyODNCOUJEMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqgD4AwQDsVdwMA0EAgACMAcDBQAoBBgkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAnTANBgkqhkiG9w0BAQsFAAOCAQEAg6clff/h D6y8KRaHisIdr7TRK3Jwiq8hJWjOJakIDarS+iNUH/hUT81WB31z9XOdFt9MewAV u31E7fAc0yswBhrIs0IfUiEBszY0VtWKfroKB7Z7yHs5W0VNx4kz9qcyhJkEgGvK zA/P/JowsKpnekyuA4ZalI4Z1mMiHtKOl39w9B8l7nlHZZgZ0x94jUozPoqpnuOM 6VRBusVagbV1SU4s7KU2gpFI4xn4Mr9j2VlXw6u2K85PXeIfDkAxF7/k8htGp3sv rUEHf9e/ZDM0s1nm6Rk/hjF99ilzDrAbqYvj3eu5zSyU2uancvIkxkqnNK7a/FvU gPAYQKu+0RbokQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:20 2025 by rpki-client