$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer File: EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer (raw, json) Hash identifier: F1ORnhee1tzCGJXHn0r0QD8UxWL4Y0C/WZVx/jhOT94= Subject key identifier: EF:1A:3C:5F:9F:81:38:A7:8E:27:53:47:F4:AF:88:05:B5:57:4F:33 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 60D61A4AEBF0387ADDDC4C11F0E909D564BA2B7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.mft caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 17:31:13 +0000 Certificate not after: Tue 30 Jun 2026 17:36:13 +0000 Subordinate resources: AS: 11432 IP: 200.155.128.0/18 IP: 200.170.192.0/18 IP: 200.194.248.0/21 IP: 200.201.128.0/19 IP: 2804:138::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d6:1a:4a:eb:f0:38:7a:dd:dc:4c:11:f0:e9:09:d5:64:ba:2b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 17:31:13 2025 GMT Not After : Jun 30 17:36:13 2026 GMT Subject: CN=EF1A3C5F9F8138A78E275347F4AF8805B5574F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:63:a3:27:bd:14:5f:9c:09:a4:31:06:5b: 9c:5d:2c:16:95:11:13:4b:ed:16:ad:ae:ac:02:33: 59:db:c7:d6:e0:92:0d:2a:fd:eb:1b:a0:d8:d6:1f: e5:e9:b7:43:33:82:45:f4:0a:33:02:2f:da:b5:fd: 60:e0:0b:84:c0:9f:55:7f:00:16:42:91:93:fa:f0: 78:78:fa:f1:a1:4a:57:10:91:82:6a:10:89:a8:ec: 3b:fc:e1:19:12:95:18:0a:c4:72:bf:5d:31:ba:f1: ee:3a:2f:2b:e3:9c:6c:f2:c7:68:e5:ce:1c:6d:96: 20:5f:1f:e4:6f:d4:ac:db:99:8e:e1:43:84:ad:6c: 7d:fd:85:03:7b:2e:02:33:b0:a9:a0:ad:9e:0e:54: 8b:db:06:ed:f9:35:8a:0f:8f:57:ef:79:24:46:f9: 12:14:58:1f:9f:87:90:22:0c:c3:27:9d:cb:a8:10: eb:94:88:f2:b8:ce:e1:a6:92:7b:36:61:93:91:49: d0:47:f3:eb:08:5d:77:24:42:77:f5:20:4c:a1:6d: c1:8c:ec:eb:ff:72:46:cd:ca:1d:0e:0e:6c:0b:fb: d3:11:ec:cf:d0:54:84:51:e5:65:35:ee:d2:0d:93: 4c:bd:f7:f5:cd:99:7a:3f:ed:25:33:9c:8b:be:bc: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:1A:3C:5F:9F:81:38:A7:8E:27:53:47:F4:AF:88:05:B5:57:4F:33 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.155.128.0/18 200.170.192.0/18 200.194.248.0/21 200.201.128.0/19 IPv6: 2804:138::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11432 Signature Algorithm: sha256WithRSAEncryption 1f:56:99:58:36:57:04:9d:7f:b1:42:0f:40:40:3d:26:30:5e: ae:26:b6:d5:f5:1e:52:e6:54:06:6e:e0:96:c2:d3:7b:f6:40: 75:26:29:63:db:ce:a3:fc:b2:9c:b8:4b:d1:46:8c:4c:42:a0: 37:3f:6f:39:77:7a:23:c9:a8:ff:4a:87:8e:3e:03:75:28:09: 59:c7:c6:8b:47:92:df:7f:38:9c:a4:f6:fe:0e:8d:19:6c:e0: 8f:f3:55:ec:b5:f4:1f:d9:b3:b0:48:a8:93:24:ee:02:e1:0b: fe:56:6a:9c:c9:3a:37:ca:03:4c:00:d7:2f:9f:7c:7a:f7:11: cf:e6:17:e2:70:67:68:a0:4e:d9:44:78:43:0f:4b:10:33:e2: b0:4e:68:8c:6a:b8:af:fe:ac:ed:1c:fa:af:81:b2:ad:85:b6: 6b:c9:50:dd:3c:13:3f:69:a0:af:bb:48:6a:36:5e:2a:29:1f: 42:23:72:1f:dc:64:15:e7:26:63:52:36:8c:6e:c4:8b:6f:75: b3:1a:80:13:24:b0:3c:92:ae:af:8e:33:70:f2:a8:72:dd:31: 15:dc:b7:53:29:ff:9b:dd:99:70:c2:be:b8:cf:5c:80:d7:be: 5a:83:0a:82:a2:7f:65:79:36:a3:6e:af:33:a4:9d:b6:c8:e2: e4:f2:30:2d -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUYNYaSuvwOHrd3EwR8OkJ1WS6K38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDExNzMxMTNaFw0yNjA2MzAxNzM2MTNaMDMxMTAvBgNV BAMTKEVGMUEzQzVGOUY4MTM4QTc4RTI3NTM0N0Y0QUY4ODA1QjU1NzRGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGu2OjJ70UX5wJpDEGW5xdLBaV ERNL7RatrqwCM1nbx9bgkg0q/esboNjWH+Xpt0MzgkX0CjMCL9q1/WDgC4TAn1V/ ABZCkZP68Hh4+vGhSlcQkYJqEImo7Dv84RkSlRgKxHK/XTG68e46LyvjnGzyx2jl zhxtliBfH+Rv1KzbmY7hQ4StbH39hQN7LgIzsKmgrZ4OVIvbBu35NYoPj1fveSRG +RIUWB+fh5AiDMMnncuoEOuUiPK4zuGmkns2YZORSdBH8+sIXXckQnf1IEyhbcGM 7Ov/ckbNyh0ODmwL+9MR7M/QVIRR5WU17tINk0y99/XNmXo/7SUznIu+vIaxAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvGjxfn4E4p44n U0f0r4gFtVdPMzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhH aHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQalMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4 R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAvRUYx QTNDNUY5RjgxMzhBNzhFMjc1MzQ3RjRBRjg4MDVCNTU3NEYzMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQGyJuAAwQGyKrAAwQDyML4AwQFyMmAMA0EAgACMAcD BQAoBAE4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiyoMA0GCSqGSIb3DQEBCwUA A4IBAQAfVplYNlcEnX+xQg9AQD0mMF6uJrbV9R5S5lQGbuCWwtN79kB1Jilj286j /LKcuEvRRoxMQqA3P285d3ojyaj/SoeOPgN1KAlZx8aLR5LffzicpPb+Do0ZbOCP 81XstfQf2bOwSKiTJO4C4Qv+VmqcyTo3ygNMANcvn3x69xHP5hficGdooE7ZRHhD D0sQM+KwTmiMariv/qztHPqvgbKthbZryVDdPBM/aaCvu0hqNl4qKR9CI3If3GQV 5yZjUjaMbsSLb3WzGoATJLA8kq6vjjNw8qhy3TEV3LdTKf+b3Zlwwr64z1yA175a gwqCon9leTajbq8zpJ22yOLk8jAt -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:53 2025 by rpki-client