$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer File: 1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer (raw, json) Hash identifier: oNB/Vtf17/R+QX4jYYNL628ttFTDQ3kMl4vOA79mP1c= Subject key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2904494F3269F7C7A9327D311E7FAEB04F8296E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft caRepository: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 06:29:53 +0000 Certificate not after: Fri 19 Jun 2026 06:34:53 +0000 Subordinate resources: AS: 11802 IP: 200.19.192.0/19 IP: 200.192.64.0/20 IP: 2801:80:50::/48 IP: 2804:1f00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 01:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:04:49:4f:32:69:f7:c7:a9:32:7d:31:1e:7f:ae:b0:4f:82:96:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 20 06:29:53 2025 GMT Not After : Jun 19 06:34:53 2026 GMT Subject: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:64:b4:e3:17:89:30:c0:cc:d6:92:e7:fe: f0:14:69:b5:60:08:e3:fd:f6:eb:de:c8:0e:79:32: a6:70:01:4c:b1:64:0e:00:7a:71:a3:ff:49:20:8d: 6d:bf:58:55:4b:e6:1e:93:5d:be:ec:c8:6d:09:91: c4:59:50:15:93:79:74:45:84:f6:db:16:25:0d:42: f3:c0:f0:1f:d9:ae:45:b0:dc:ec:b6:e5:26:41:ba: 89:54:99:a2:3b:ee:eb:18:ed:93:25:5f:03:ca:39: bf:c2:52:58:88:62:3c:61:ad:75:2c:80:07:f7:f3: 4e:ff:9e:a0:24:36:69:01:62:5a:f1:b4:0f:01:d9: 88:6a:bb:c8:00:db:fe:11:83:5a:e1:4e:13:c6:51: 19:44:d5:b6:0e:c9:c0:5b:5a:ac:c5:a5:79:22:91: b0:3c:83:6b:8a:51:52:7e:32:e9:93:7f:db:3e:f4: ff:a8:ef:2d:66:ef:a1:22:96:ea:e8:1f:67:4e:c2: d8:b1:31:38:c6:bd:eb:f2:ff:7e:ae:90:44:89:41: fa:1a:47:23:72:c2:d1:b7:d0:3e:15:8b:b6:51:9e: 16:68:7b:e6:ee:cb:17:d5:70:8b:34:e0:43:84:a6: ea:6f:35:dd:77:bc:64:ff:7d:49:67:3d:f6:83:ec: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.19.192.0/19 200.192.64.0/20 IPv6: 2801:80:50::/48 2804:1f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11802 Signature Algorithm: sha256WithRSAEncryption ad:86:bc:bf:3e:26:26:4c:47:a6:db:d7:ca:7e:30:42:ee:e0: 26:6d:19:47:11:f7:8f:ea:6c:e9:d9:d4:c0:46:f2:1c:17:8d: 0e:cc:fa:58:95:69:f8:cf:47:65:43:8a:28:b2:c8:9f:d8:5b: 0d:ca:5b:d2:5a:8e:11:d7:80:76:71:69:bc:c0:bf:d3:06:6c: 40:30:a1:f0:e6:ee:2e:d8:bb:a8:82:68:c7:45:92:e7:ef:12: d2:ea:19:5d:b5:38:6f:8d:f8:ba:6b:6e:7e:29:2d:1f:d9:09: 20:cf:5c:2d:3e:97:74:ab:7b:74:6a:62:24:19:a3:08:fc:46: d1:45:8d:55:2b:49:89:04:21:2c:9e:14:a5:56:2b:4b:02:b1: d6:8a:56:7d:d6:8f:2a:33:54:44:83:87:c4:10:b1:05:c4:c8: 66:10:d5:85:fd:7e:94:c1:76:3b:cc:60:6f:05:0c:0d:44:8b: 25:b7:b0:49:68:47:06:93:b9:68:51:5a:59:77:bc:3c:e1:a3: 05:e3:f5:3a:dc:60:39:aa:85:8e:9c:0e:c8:46:b3:a6:ed:1a: e4:21:06:d2:be:82:db:8f:50:e5:e6:ac:cb:60:a4:e4:37:fb: 2f:25:76:5d:5e:30:e4:c9:86:d0:62:bc:73:e4:fe:04:d9:c1: aa:8f:f5:39 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIUKQRJTzJp98epMn0xHn+usE+ClugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjAwNjI5NTNaFw0yNjA2MTkwNjM0NTNaMDMxMTAvBgNV BAMTKDE1MjJCM0YxQUM2REJEQkEwMzYzODFDMUEzMzc2M0I3QTUzQjI5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdWS04xeJMMDM1pLn/vAUabVg COP99uveyA55MqZwAUyxZA4AenGj/0kgjW2/WFVL5h6TXb7syG0JkcRZUBWTeXRF hPbbFiUNQvPA8B/ZrkWw3Oy25SZBuolUmaI77usY7ZMlXwPKOb/CUliIYjxhrXUs gAf3807/nqAkNmkBYlrxtA8B2Yhqu8gA2/4Rg1rhThPGURlE1bYOycBbWqzFpXki kbA8g2uKUVJ+MumTf9s+9P+o7y1m76EiluroH2dOwtixMTjGvevy/36ukESJQfoa RyNywtG30D4Vi7ZRnhZoe+buyxfVcIs04EOEpupvNd13vGT/fUlnPfaD7CZ/AgMB AAGjggNIMIIDRDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVIrPxrG29ugNj gcGjN2O3pTspozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGFr dTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUyWmIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rh a3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAvMTUy MkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdBNTNCMjlBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEH AQH/BC4wLDASBAIAATAMAwQFyBPAAwQEyMBAMBYEAgACMBADBwAoAQCAAFADBQAo BB8AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAi4aMA0GCSqGSIb3DQEBCwUAA4IB AQCthry/PiYmTEem29fKfjBC7uAmbRlHEfeP6mzp2dTARvIcF40OzPpYlWn4z0dl Q4oossif2FsNylvSWo4R14B2cWm8wL/TBmxAMKHw5u4u2LuogmjHRZLn7xLS6hld tThvjfi6a25+KS0f2Qkgz1wtPpd0q3t0amIkGaMI/EbRRY1VK0mJBCEsnhSlVitL ArHWilZ91o8qM1REg4fEELEFxMhmENWF/X6UwXY7zGBvBQwNRIslt7BJaEcGk7lo UVpZd7w84aMF4/U63GA5qoWOnA7IRrOm7RrkIQbSvoLbj1Dl5qzLYKTkN/svJXZd XjDkyYbQYrxz5P4E2cGqj/U5 -----END CERTIFICATE-----Generated at Tue Jul 1 00:51:56 2025 by rpki-client