$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer File: E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer (raw, json) Hash identifier: noR+SeqtXCZ06HEUZjR3jvvRAAmKDD4buCdCkabNImU= Subject key identifier: E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6C7222EBFCF5EA07369C72A90C822C9D0E193CB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.mft caRepository: rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 21:25:47 +0000 Certificate not after: Tue 11 Aug 2026 21:30:47 +0000 Subordinate resources: AS: 264054 IP: 143.137.224.0/22 IP: 2804:2a10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:72:22:eb:fc:f5:ea:07:36:9c:72:a9:0c:82:2c:9d:0e:19:3c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 12 21:25:47 2025 GMT Not After : Aug 11 21:30:47 2026 GMT Subject: CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:e5:02:70:7c:04:0f:5e:08:da:6e:b7:8c: 48:35:09:87:34:bd:d2:7d:a9:c1:75:3b:0f:11:73: 11:77:94:54:e1:0b:d5:4d:75:3f:1d:44:7c:26:c6: a6:00:81:fc:98:24:c2:cf:7e:6d:c4:7b:25:f3:41: 8e:ec:6c:e3:63:cd:e7:99:cf:b3:b9:8b:ef:4b:d9: ff:88:39:0f:d4:c2:eb:80:16:3c:b0:aa:fb:83:34: 01:ec:5e:d6:24:f7:9f:cc:bf:77:4e:d1:5a:6a:19: ed:1d:88:9f:36:c7:1c:4b:d3:3d:83:2a:70:4c:15: d7:97:f2:c5:3e:ba:14:38:89:bd:e3:52:7e:71:21: 24:6b:b3:7c:52:7c:45:bb:08:57:de:07:90:ea:74: 1b:d2:22:12:24:84:b5:33:8d:be:a6:8c:7a:5c:a3: 18:78:28:b2:59:0d:e0:54:19:e7:54:bd:69:6b:89: 2c:3c:ea:8f:90:8e:b4:ec:03:27:af:20:d1:14:57: d4:86:50:09:52:ef:51:0d:28:86:c7:b9:7c:bd:f8: 4f:3c:38:24:97:16:c2:43:7f:de:20:aa:90:66:37: 7d:ff:e3:de:30:2a:72:ab:31:4c:8a:aa:d6:e5:b3: d8:2e:67:ce:ae:9e:ae:b8:9e:1f:5a:da:81:1f:a3: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.224.0/22 IPv6: 2804:2a10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264054 Signature Algorithm: sha256WithRSAEncryption 12:94:71:5e:3d:10:a0:2f:e0:70:4a:00:19:4d:94:15:65:de: f7:01:45:87:55:f8:8f:e3:cb:8e:e6:75:7d:af:c6:e0:ad:64: 92:f9:1b:7f:2b:26:d6:72:4c:f9:cf:a6:0f:25:c1:18:0e:45: 32:83:75:b7:05:7a:56:6f:1b:4f:4f:34:c6:10:da:62:93:bf: 25:7a:e1:50:61:5b:cf:22:29:3a:22:93:80:71:bd:2d:d1:0d: c3:83:68:87:10:af:6e:79:ee:9f:53:9a:36:07:74:0c:8d:1a: 7b:a4:39:e4:7a:7d:c5:76:da:5b:f8:1d:e6:21:02:1f:64:aa: b6:1e:d5:e6:8e:8e:1e:d0:8b:d1:7c:21:d0:a6:a4:e9:ba:c3: 75:11:22:ec:6b:ea:bc:61:e5:58:95:bc:f6:46:df:a0:04:f2: ad:cb:97:61:6c:a3:59:2f:f4:ff:52:38:7d:6e:c1:ca:b2:40: 26:23:c7:2a:01:99:e5:f8:49:64:b3:8a:8e:61:e4:ab:61:f1: e0:5b:70:3e:96:76:09:50:73:5c:1e:ce:a3:36:66:c3:98:b6: 8a:49:55:65:c9:23:7a:df:b9:e8:aa:b3:94:ea:02:f4:de:c5: 5c:ce:c9:90:42:da:1a:79:35:bb:22:9b:69:d8:01:e9:99:bf: a3:df:d0:38 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbHIi6/z16gc2nHKpDIIsnQ4ZPLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTIyMTI1NDdaFw0yNjA4MTEyMTMwNDdaMDMxMTAvBgNV BAMTKEU4ODcwRTI4NjU5NUUzMkJEOUM0NzVGNTFDREQ2RTM2RUY4MUE2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufOUCcHwED14I2m63jEg1CYc0 vdJ9qcF1Ow8RcxF3lFThC9VNdT8dRHwmxqYAgfyYJMLPfm3EeyXzQY7sbONjzeeZ z7O5i+9L2f+IOQ/UwuuAFjywqvuDNAHsXtYk95/Mv3dO0VpqGe0diJ82xxxL0z2D KnBMFdeX8sU+uhQ4ib3jUn5xISRrs3xSfEW7CFfeB5DqdBvSIhIkhLUzjb6mjHpc oxh4KLJZDeBUGedUvWlriSw86o+QjrTsAyevINEUV9SGUAlS71ENKIbHuXy9+E88 OCSXFsJDf94gqpBmN33/494wKnKrMUyKqtbls9guZ86unq64nh9a2oEfo/RzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTohw4oZZXjK9nE dfUc3W4274Gm+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXlV Z003V2tGZ0F3OXB0TkRuc3FvNW5kSFZTcFdDdVhUQW81QlJ6MzdIakIvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F5 VWdNN1drRmdBdzlwdE5EbnNxbzVuZEhWU3BXQ3VYVEFvNUJSejM3SGpCLzIvRTg4 NzBFMjg2NTk1RTMyQkQ5QzQ3NUY1MUNERDZFMzZFRjgxQTZGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj4ngMA0EAgACMAcDBQAoBCoQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHdjANBgkqhkiG9w0BAQsFAAOCAQEAEpRxXj0QoC/gcEoA GU2UFWXe9wFFh1X4j+PLjuZ1fa/G4K1kkvkbfysm1nJM+c+mDyXBGA5FMoN1twV6 Vm8bT080xhDaYpO/JXrhUGFbzyIpOiKTgHG9LdENw4NohxCvbnnun1OaNgd0DI0a e6Q55Hp9xXbaW/gd5iECH2Sqth7V5o6OHtCL0Xwh0Kak6brDdREi7GvqvGHlWJW8 9kbfoATyrcuXYWyjWS/0/1I4fW7ByrJAJiPHKgGZ5fhJZLOKjmHkq2Hx4FtwPpZ2 CVBzXB7OozZmw5i2iklVZckjet+56KqzlOoC9N7FXM7JkELaGnk1uyKbadgB6Zm/ o9/QOA== -----END CERTIFICATE-----Generated at Wed Aug 20 11:58:14 2025 by rpki-client