$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer File: E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer (raw, json) Hash identifier: 3GU5Fmk+UKrhyB4XBxsu8KvXTLnsJKIVXez9sGimr+Q= Subject key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2ACC206C479389102A99158B25F9506ECCF809B0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft caRepository: rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 07 Sep 2025 15:34:19 +0000 Certificate not after: Sun 06 Sep 2026 15:39:19 +0000 Subordinate resources: AS: 273514 IP: 170.80.204.0/22 IP: 2804:8fd0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Sep 2025 22:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cc:20:6c:47:93:89:10:2a:99:15:8b:25:f9:50:6e:cc:f8:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 7 15:34:19 2025 GMT Not After : Sep 6 15:39:19 2026 GMT Subject: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:6a:2c:fd:02:1c:d5:b5:71:21:e3:2f:2f: c8:4f:5d:37:a0:02:c9:41:e0:de:a1:d9:42:72:fa: 8b:4f:b4:ea:62:c1:0b:54:9b:9b:c9:76:52:ba:2e: 33:8f:3b:6a:77:2c:dd:c6:d0:fe:bb:c0:b5:67:16: d4:7b:b6:6a:92:67:b5:01:0c:d8:85:38:88:b4:ee: 1b:23:b1:a0:61:72:9f:9b:57:c4:bf:4c:bb:9d:83: b6:f3:6b:a3:2f:35:f2:21:95:76:a1:29:b3:1e:f6: f0:cb:1f:fd:56:46:dc:08:40:f7:6a:66:02:7b:ab: ae:d6:6c:d1:fe:9c:f5:ef:4d:9e:41:ca:db:1c:41: 76:35:3e:9d:d6:1a:b0:86:16:14:b7:3e:54:a5:17: a9:11:75:44:36:0b:b5:dd:d2:f3:00:f2:18:9c:09: bf:00:a2:59:c6:bd:56:85:12:3d:f6:d8:be:08:07: 8d:c8:ef:53:e1:18:c7:75:df:c7:9e:2b:55:3d:aa: 03:12:9d:39:d1:b1:21:d3:f4:c0:f9:4d:34:28:41: b9:8f:a0:ab:cf:22:c0:ec:d0:e1:e0:64:d9:5d:71: 68:17:98:71:9d:c7:f4:e7:52:7b:ba:4e:fd:fb:47: 1c:77:4a:d5:03:af:57:41:73:63:2c:8b:14:f7:d7: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.204.0/22 IPv6: 2804:8fd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273514 Signature Algorithm: sha256WithRSAEncryption 89:ef:f7:8e:98:8f:44:e6:7d:78:e1:ab:a9:2a:4c:72:39:96: 4e:8d:11:aa:35:01:a2:1b:67:85:59:3d:73:1f:9b:bc:5c:6c: 9b:c9:a0:9a:ec:ce:f7:eb:83:e5:5a:9a:84:c4:af:f9:bb:f1: 4d:25:45:b2:d9:d7:0e:f7:bf:ef:2e:52:72:a0:ee:61:52:26: 4e:6a:ae:35:22:35:08:61:2e:e0:0c:cc:45:b1:8f:74:f9:bc: 14:e6:1d:06:01:ea:73:4d:98:18:95:41:e7:e0:d0:90:83:db: 9e:74:d3:5b:57:26:39:02:af:2f:51:72:78:e1:93:02:06:4b: 8b:0e:90:6e:9b:66:50:33:f1:7e:f4:e9:b5:d2:5a:04:cf:c0: b6:d7:8a:32:e7:91:d0:dc:50:19:ff:ce:7a:00:0b:a8:77:7e: 39:fd:f5:19:d5:5d:b9:bb:66:82:bc:45:77:fb:d6:78:86:10: ef:3c:22:bd:de:f8:01:2d:a4:89:b2:30:2b:fe:b7:f0:6a:49: 31:e1:43:d8:83:e1:78:69:ce:48:43:30:53:db:e8:a4:52:34: 2a:de:8f:06:ac:29:92:32:ee:52:02:2f:56:e9:94:1d:b1:9d: 30:ab:49:4c:9e:f8:5f:37:51:64:4d:91:62:4d:0d:d0:e5:7a: 78:f1:f7:d4 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUKswgbEeTiRAqmRWLJflQbsz4CbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDcxNTM0MTlaFw0yNjA5MDYxNTM5MTlaMDMxMTAvBgNV BAMTKEU0M0ZDMjJGNTNGMTAxMUQ4RDIxM0Y2RUIwMEM1QTQ3MkU5MjM1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EWos/QIc1bVxIeMvL8hPXTeg AslB4N6h2UJy+otPtOpiwQtUm5vJdlK6LjOPO2p3LN3G0P67wLVnFtR7tmqSZ7UB DNiFOIi07hsjsaBhcp+bV8S/TLudg7bza6MvNfIhlXahKbMe9vDLH/1WRtwIQPdq ZgJ7q67WbNH+nPXvTZ5BytscQXY1Pp3WGrCGFhS3PlSlF6kRdUQ2C7Xd0vMA8hic Cb8AolnGvVaFEj322L4IB43I71PhGMd138eeK1U9qgMSnTnRsSHT9MD5TTQoQbmP oKvPIsDs0OHgZNldcWgXmHGdx/TnUnu6Tv37Rxx3StUDr1dBc2MsixT31zn5AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkP8IvU/EBHY0h P26wDFpHLpI12TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFH SlpvUU5CVkdaRXNjbzc2TEdpOU1rcGpNQjlEVmlTUWZ2RzRmcFJpZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFH SlpvUU5CVkdaRXNjbzc2TEdpOU1rcGpNQjlEVmlTUWZ2RzRmcFJpZC8wL0U0M0ZD MjJGNTNGMTAxMUQ4RDIxM0Y2RUIwMEM1QTQ3MkU5MjM1RDkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqpQzDANBAIAAjAHAwUAKASP0DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMELGowDQYJKoZIhvcNAQELBQADggEBAInv946Yj0TmfXjhq6kq THI5lk6NEao1AaIbZ4VZPXMfm7xcbJvJoJrszvfrg+VamoTEr/m78U0lRbLZ1w73 v+8uUnKg7mFSJk5qrjUiNQhhLuAMzEWxj3T5vBTmHQYB6nNNmBiVQefg0JCD2550 01tXJjkCry9RcnjhkwIGS4sOkG6bZlAz8X706bXSWgTPwLbXijLnkdDcUBn/znoA C6h3fjn99RnVXbm7ZoK8RXf71niGEO88Ir3e+AEtpImyMCv+t/BqSTHhQ9iD4Xhp zkhDMFPb6KRSNCrejwasKZIy7lICL1bplB2xnTCrSUye+F83UWRNkWJNDdDlenjx 99Q= -----END CERTIFICATE-----Generated at Mon Sep 15 19:29:24 2025 by rpki-client