$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer File: ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer (raw, json) Hash identifier: s8UPF31Fw+wL+oyMY/OQg+PUZ71bchKvY7B+PsuvMY4= Subject key identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 402133682412F8305D4DDF63617826E92ADB90BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft caRepository: rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 13:31:55 +0000 Certificate not after: Thu 30 Jul 2026 13:36:55 +0000 Subordinate resources: AS: 271245 IP: 170.247.184.0/22 IP: 2804:787c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:21:33:68:24:12:f8:30:5d:4d:df:63:61:78:26:e9:2a:db:90:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 31 13:31:55 2025 GMT Not After : Jul 30 13:36:55 2026 GMT Subject: CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:77:78:0e:57:9b:78:80:8d:67:1b:f4:19: 69:3a:28:32:39:d6:b3:5a:2b:2b:c4:52:82:a3:6d: 1c:17:d1:64:7c:d2:04:a6:1c:00:52:c0:26:d9:17: 82:40:4a:f4:d3:07:b4:23:77:a9:94:a4:64:67:6f: cc:d6:5c:75:52:f6:4d:c0:65:c5:ec:dd:bd:b1:57: 92:1b:aa:43:35:04:41:09:2f:4d:1e:7e:3b:76:31: 6c:10:ad:df:75:fc:d7:07:37:1c:4a:86:e6:44:f2: d2:39:29:c2:b4:c7:e7:a4:52:06:d4:cf:8f:05:2b: e2:77:23:09:31:ab:b8:cc:e9:54:bc:18:a8:0f:05: bd:7f:c6:28:07:66:f6:d9:10:9e:fd:eb:44:af:98: cc:67:6e:a8:d1:66:74:d4:62:48:8a:30:1f:8a:da: c0:57:fb:86:30:c9:ba:c3:36:83:5a:31:e7:23:e1: ca:01:7a:df:9f:2b:e1:10:ac:06:b1:9c:aa:29:58: 57:da:94:0c:7c:06:0e:3e:62:bf:bf:9a:98:cd:81: 36:fb:20:38:77:5f:f1:0f:71:34:ee:19:61:ef:00: 18:95:e5:b1:ca:bd:54:bd:8e:17:19:57:37:df:6a: 58:59:a7:45:24:72:f7:df:04:58:e9:64:97:c8:e1: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.184.0/22 IPv6: 2804:787c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271245 Signature Algorithm: sha256WithRSAEncryption cb:dc:c7:11:f9:f3:11:41:c5:61:c8:61:fd:9b:7a:b9:80:ee: 8e:a5:e5:53:05:b9:1c:cc:fd:7e:a0:f1:c9:02:1b:4d:9f:0d: 0f:8d:60:d5:c9:29:0f:76:56:d7:13:14:ca:7c:60:1d:9b:97: cd:4e:bf:22:bf:13:f5:25:10:c6:96:bf:de:4d:55:53:87:a6: e3:d7:45:ab:6d:83:23:71:f6:3e:46:fc:63:6f:80:00:a9:4b: 53:a9:06:3c:94:64:17:17:91:2b:8d:61:5e:14:d8:96:34:ce: 3d:1b:ae:5c:53:5c:4b:b7:dc:f5:31:84:0c:8f:e9:2a:c4:4b: a8:8b:14:2c:0d:2f:df:2a:3d:8e:77:6f:ce:21:56:b8:29:4a: 30:c2:0e:a5:4e:b1:3c:50:f5:02:de:07:b2:bf:a1:9b:d3:83: b3:f9:1e:0b:33:92:f6:c2:41:42:b8:6d:4e:22:cf:85:0f:29: 10:2c:e6:65:75:a3:88:bf:f3:47:9c:3b:2b:90:9b:27:ce:2e: 5c:0b:c4:6e:22:83:a6:6b:9c:3c:45:b5:29:ed:04:71:4e:33: 5f:de:5c:ff:2e:3e:b5:78:b7:76:61:8a:e8:ec:f2:91:3a:4b: 84:6d:c6:49:9e:f6:c0:35:ae:1d:e6:b4:06:27:5a:cf:54:a7: 45:75:72:4f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQCEzaCQS+DBdTd9jYXgm6SrbkLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzExMzMxNTVaFw0yNjA3MzAxMzM2NTVaMDMxMTAvBgNV BAMTKEVEMzM2NDBBODJFN0Y4RjEyNTBBQkU1OUY4QzAyMDAzMUFFOTg2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF23d4DlebeICNZxv0GWk6KDI5 1rNaKyvEUoKjbRwX0WR80gSmHABSwCbZF4JASvTTB7Qjd6mUpGRnb8zWXHVS9k3A ZcXs3b2xV5IbqkM1BEEJL00efjt2MWwQrd91/NcHNxxKhuZE8tI5KcK0x+ekUgbU z48FK+J3Iwkxq7jM6VS8GKgPBb1/xigHZvbZEJ7960SvmMxnbqjRZnTUYkiKMB+K 2sBX+4YwybrDNoNaMecj4coBet+fK+EQrAaxnKopWFfalAx8Bg4+Yr+/mpjNgTb7 IDh3X/EPcTTuGWHvABiV5bHKvVS9jhcZVzffalhZp0UkcvffBFjpZJfI4RjfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtM2QKguf48SUK vln4wCADGumGozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmdK U2J4clMzcnM2WEFlOExYeDdYRlp6eFdnMWtNbXJpdURNV3BzSEtoVHYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJn SlNieHJTM3JzNlhBZThMWHg3WEZaenhXZzFrTW1yaXVETVdwc0hLaFR2LzAvRUQz MzY0MEE4MkU3RjhGMTI1MEFCRTU5RjhDMDIwMDMxQUU5ODZBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqve4MA0EAgACMAcDBQAoBHh8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjjTANBgkqhkiG9w0BAQsFAAOCAQEAy9zHEfnzEUHFYchh /Zt6uYDujqXlUwW5HMz9fqDxyQIbTZ8ND41g1ckpD3ZW1xMUynxgHZuXzU6/Ir8T 9SUQxpa/3k1VU4em49dFq22DI3H2Pkb8Y2+AAKlLU6kGPJRkFxeRK41hXhTYljTO PRuuXFNcS7fc9TGEDI/pKsRLqIsULA0v3yo9jndvziFWuClKMMIOpU6xPFD1At4H sr+hm9ODs/keCzOS9sJBQrhtTiLPhQ8pECzmZXWjiL/zR5w7K5CbJ84uXAvEbiKD pmucPEW1Ke0EcU4zX95c/y4+tXi3dmGK6OzykTpLhG3GSZ72wDWuHea0Bidaz1Sn RXVyTw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:31:38 2025 by rpki-client