$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer (raw, json) Hash identifier: lou2MXyIJlxB9WYxWmTFmp+XHrmfu2p9v4HiQj63m8Y= Subject key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 209765A2DF84393A91FEF304883CF1EE4C8E8692 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft caRepository: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Jun 2025 16:55:12 +0000 Certificate not after: Wed 24 Jun 2026 17:00:12 +0000 Subordinate resources: AS: 267489 IP: 192.141.163.0/24 IP: 2804:4244::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:97:65:a2:df:84:39:3a:91:fe:f3:04:88:3c:f1:ee:4c:8e:86:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 25 16:55:12 2025 GMT Not After : Jun 24 17:00:12 2026 GMT Subject: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:4d:3c:77:13:19:05:0c:75:29:e6:15:06: 0d:61:d9:4b:e6:6e:52:a1:58:e5:a1:b6:af:ab:aa: 27:12:3b:1b:41:b7:bb:09:21:97:cf:b0:18:eb:f1: 81:1e:bf:3e:b6:9e:5f:7e:7c:8b:45:e1:e1:fb:34: c8:70:f1:c8:12:10:5e:e3:34:0c:b3:d1:4e:3f:79: 9e:55:4c:6a:70:e7:a1:19:7b:d4:e8:2e:53:fd:ee: cf:bf:0e:1a:71:48:77:06:06:57:92:65:a2:6f:02: c8:c0:f2:3d:82:e1:d2:e4:56:e2:2e:93:1a:10:99: 9d:8b:50:8b:ca:dd:fc:9b:8e:23:19:04:33:38:ee: e8:26:57:a2:9e:22:02:04:2f:77:4c:b3:b4:82:3a: 4a:76:97:b4:9c:bd:95:ed:93:ee:b5:af:dd:11:22: fd:c5:a5:6c:86:9e:74:85:eb:02:a7:a8:eb:fc:45: 59:3e:8b:9b:35:c6:aa:ab:03:6d:48:04:48:12:d2: 2c:49:dd:10:71:bb:1d:2b:02:ea:3b:e0:26:ca:f2: 1e:a3:e0:4f:d7:9e:e9:a0:49:d6:dd:ee:6d:6e:f8: 7e:b7:93:fa:e5:eb:7f:19:bb:ab:95:08:f3:0c:c8: 73:00:2c:40:35:91:f1:02:0f:16:dc:5f:fe:10:b2: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.163.0/24 IPv6: 2804:4244::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267489 Signature Algorithm: sha256WithRSAEncryption d2:b7:17:9b:71:9b:be:59:26:89:2f:b4:86:63:bb:84:55:37: 1d:d2:5c:51:e4:e1:7b:3d:09:37:e8:46:cd:2a:fa:7d:12:9c: f2:7b:2f:23:74:fc:fa:4b:e6:d8:4e:47:bb:5f:e8:ae:61:06: a0:bb:52:99:dd:d2:ef:c9:88:1f:a0:37:9a:3a:46:7c:6a:7b: 79:77:1d:ac:ad:18:de:42:21:7f:14:cc:b5:3b:28:5e:fe:a8: 0a:b9:8d:53:df:8a:cf:bc:f8:f8:0b:e1:51:a0:80:3e:eb:7c: fb:fd:d0:35:1e:0a:f5:45:5e:39:f5:5a:d0:9a:44:28:39:a0: 80:e0:94:32:a2:b4:4d:f1:d2:a4:8f:90:cd:cc:40:cf:4b:9a: 02:03:32:89:3b:5d:af:72:1e:ce:f5:cb:a3:dc:e3:a1:a5:f9: e4:85:08:08:0d:9d:1d:39:0f:3d:94:bf:69:fd:25:ac:44:09: 6b:27:dd:f8:8e:29:ad:85:69:a3:ed:0b:e2:36:55:46:75:6b: 41:d6:6e:9e:ea:73:a7:14:07:4a:d5:12:cf:2b:d2:1d:bd:ab: 37:78:d1:16:f7:3b:41:2d:c9:24:be:ce:e3:ff:82:26:49:a1: 69:89:5b:18:70:ea:ae:0b:d1:a5:43:6b:7b:86:67:5e:e0:79: 10:af:4b:5c -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUIJdlot+EOTqR/vMEiDzx7kyOhpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjUxNjU1MTJaFw0yNjA2MjQxNzAwMTJaMDMxMTAvBgNV BAMTKDIzRUNENEQxQUY4OENFMkUxQjNERjZERjg3RkM3NkNDMTU3QTA3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDE08dxMZBQx1KeYVBg1h2Uvm blKhWOWhtq+rqicSOxtBt7sJIZfPsBjr8YEevz62nl9+fItF4eH7NMhw8cgSEF7j NAyz0U4/eZ5VTGpw56EZe9ToLlP97s+/DhpxSHcGBleSZaJvAsjA8j2C4dLkVuIu kxoQmZ2LUIvK3fybjiMZBDM47ugmV6KeIgIEL3dMs7SCOkp2l7ScvZXtk+61r90R Iv3FpWyGnnSF6wKnqOv8RVk+i5s1xqqrA21IBEgS0ixJ3RBxux0rAuo74CbK8h6j 4E/XnumgSdbd7m1u+H63k/rl638Zu6uVCPMMyHMALEA1kfECDxbcX/4QshFZAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQj7NTRr4jOLhs9 9t+H/HbMFXoHwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMS8yM0VD RDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0EwN0MxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBADAjaMwDQQCAAIwBwMFACgEQkQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBThMA0GCSqGSIb3DQEBCwUAA4IBAQDStxebcZu+WSaJL7SG Y7uEVTcd0lxR5OF7PQk36EbNKvp9Epzyey8jdPz6S+bYTke7X+iuYQagu1KZ3dLv yYgfoDeaOkZ8ant5dx2srRjeQiF/FMy1Oyhe/qgKuY1T34rPvPj4C+FRoIA+63z7 /dA1Hgr1RV459VrQmkQoOaCA4JQyorRN8dKkj5DNzEDPS5oCAzKJO12vch7O9cuj 3OOhpfnkhQgIDZ0dOQ89lL9p/SWsRAlrJ934jimthWmj7QviNlVGdWtB1m6e6nOn FAdK1RLPK9Idvas3eNEW9ztBLckkvs7j/4ImSaFpiVsYcOquC9GlQ2t7hmde4HkQ r0tc -----END CERTIFICATE-----Generated at Sun Jun 29 22:33:35 2025 by rpki-client