$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer File: E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer (raw, json) Hash identifier: 1Tfp54RfNMLPqavtRQz4NXswATLdxTbLBgZ95vMo/MA= Subject key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F6D6E9C988DD780D85C5B8A6DD41D88543A1D12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft caRepository: rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 26 Apr 2025 13:38:55 +0000 Certificate not after: Sat 25 Apr 2026 13:43:55 +0000 Subordinate resources: AS: 273467 IP: 168.194.179.0/24 IP: 170.245.172.0/22 IP: 2804:8f18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6d:6e:9c:98:8d:d7:80:d8:5c:5b:8a:6d:d4:1d:88:54:3a:1d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 26 13:38:55 2025 GMT Not After : Apr 25 13:43:55 2026 GMT Subject: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:d8:72:c2:f6:11:9e:88:72:33:7f:9d:0e: a0:c1:13:9a:04:d8:02:19:83:92:20:49:ca:c3:e3: 95:bd:db:4b:1c:2b:e9:0a:5c:e3:52:d6:44:57:55: 89:6a:e0:85:dd:59:bd:0e:8f:cf:29:da:18:71:be: a8:5a:35:d0:cf:2c:04:6c:30:62:f6:1f:69:59:0b: 4a:70:f1:de:a9:6d:f6:90:b7:c1:ec:ca:6d:a6:89: f1:c5:99:52:d9:a1:4c:ee:ff:88:27:2d:7c:52:76: 4c:48:70:16:37:f9:2f:37:7f:1a:d2:8e:fe:4a:24: 7a:f9:ee:a2:2a:7d:f4:dc:f5:88:83:5d:c0:19:67: 8b:32:26:d5:40:fb:dc:52:37:f9:6b:82:e0:47:55: ef:a4:1e:5b:e6:db:9a:c5:01:fa:17:32:7c:3d:4a: a9:a5:d2:fc:d3:94:cd:c8:ca:e0:16:21:9a:a1:23: 3e:21:ad:bc:04:df:c0:16:c6:09:61:4a:82:c3:82: b3:76:91:16:4e:8f:dc:ee:7b:15:7c:53:f3:8f:90: 11:b1:91:8b:6e:07:d8:ff:42:50:21:8b:44:96:96: 6b:e8:39:a4:75:d1:89:7f:dc:83:2f:be:9b:9a:8f: 48:e8:71:6f:cb:13:f7:81:8e:62:53:3d:73:72:4c: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.179.0/24 170.245.172.0/22 IPv6: 2804:8f18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273467 Signature Algorithm: sha256WithRSAEncryption 4b:b9:f9:50:31:8d:c2:0f:76:7a:07:9e:4f:6b:60:88:97:6e: ea:d2:3d:07:04:10:0b:eb:22:c3:4d:9e:74:b6:96:be:58:e5: e4:92:43:cc:91:54:2e:5c:e3:11:b5:50:5b:5c:fd:0f:6a:47: 7a:7a:d2:8c:db:9e:5f:b4:89:23:8c:64:5f:ee:f6:46:6c:98: c4:f3:c8:83:2e:1c:b8:bd:12:55:09:24:6b:c6:38:4b:fb:09: e7:e7:2b:5b:18:47:e3:79:ff:0b:1d:d9:85:48:90:bb:93:2f: a0:14:69:fa:ee:3c:f9:3c:80:40:82:df:8f:89:55:40:7e:63: 05:59:95:88:b9:51:5e:0f:7e:a2:d0:6e:24:c9:ed:a1:6e:6b: 53:5a:9f:f3:ae:37:44:2d:0f:e2:53:2d:d6:b6:8e:a4:52:4e: e2:69:7e:bd:99:a8:eb:56:8f:f3:64:43:5f:13:07:da:0a:1b: 4a:f5:27:9f:e8:a0:94:1f:b3:a0:17:67:b9:98:73:97:64:5b: d3:61:d5:ca:78:08:8d:75:1c:e0:5f:74:71:c1:5e:68:89:2a: a4:2f:1d:50:0e:c4:4f:86:76:5f:21:0b:53:d8:71:42:6c:e2: 3f:79:cb:f4:e3:d9:b0:a1:f5:c6:5c:34:38:56:5d:eb:47:4d: 5f:63:48:6f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUP21unJiN14DYXFuKbdQdiFQ6HRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjYxMzM4NTVaFw0yNjA0MjUxMzQzNTVaMDMxMTAvBgNV BAMTKEU3QUM2QkM4RDE5Q0QzNThEQTA3RDcwODNDRTY0QjM3QUQ5NUQyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo19hywvYRnohyM3+dDqDBE5oE 2AIZg5IgScrD45W920scK+kKXONS1kRXVYlq4IXdWb0Oj88p2hhxvqhaNdDPLARs MGL2H2lZC0pw8d6pbfaQt8Hsym2mifHFmVLZoUzu/4gnLXxSdkxIcBY3+S83fxrS jv5KJHr57qIqffTc9YiDXcAZZ4syJtVA+9xSN/lrguBHVe+kHlvm25rFAfoXMnw9 Sqml0vzTlM3IyuAWIZqhIz4hrbwE38AWxglhSoLDgrN2kRZOj9zuexV8U/OPkBGx kYtuB9j/QlAhi0SWlmvoOaR10Yl/3IMvvpuaj0jocW/LE/eBjmJTPXNyTOslAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnrGvI0ZzTWNoH 1wg85ks3rZXSjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkNF dkVCd05hOHBzNkNhb0hWYmozSGJjdzYyaVFlejJUTnJ1N3M2OHZLR1AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZD RXZFQndOYThwczZDYW9IVmJqM0hiY3c2MmlRZXoyVE5ydTdzNjh2S0dQLzAvRTdB QzZCQzhEMTlDRDM1OERBMDdENzA4M0NFNjRCMzdBRDk1RDI4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQAqMKzAwQCqvWsMA0EAgACMAcDBQAoBI8YMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQsOzANBgkqhkiG9w0BAQsFAAOCAQEAS7n5UDGN wg92egeeT2tgiJdu6tI9BwQQC+siw02edLaWvljl5JJDzJFULlzjEbVQW1z9D2pH enrSjNueX7SJI4xkX+72RmyYxPPIgy4cuL0SVQkka8Y4S/sJ5+crWxhH43n/Cx3Z hUiQu5MvoBRp+u48+TyAQILfj4lVQH5jBVmViLlRXg9+otBuJMntoW5rU1qf8643 RC0P4lMt1raOpFJO4ml+vZmo61aP82RDXxMH2gobSvUnn+iglB+zoBdnuZhzl2Rb 02HVyngIjXUc4F90ccFeaIkqpC8dUA7ET4Z2XyELU9hxQmziP3nL9OPZsKH1xlw0 OFZd60dNX2NIbw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:25:13 2025 by rpki-client