$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer File: 2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer (raw, json) Hash identifier: +1IqDwTBO2/OdZjeIWrw/yUv6IyZPUH1f24/WCj8ypE= Subject key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29D9193F8FD70EF40044F7D61840757BBE558FC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft caRepository: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Jul 2026 12:58:06 +0000 Certificate not after: Fri 16 Jul 2027 13:03:06 +0000 Subordinate resources: AS: 52947 IP: 168.197.16.0/22 IP: 177.38.136.0/21 IP: 2804:1df4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 22:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d9:19:3f:8f:d7:0e:f4:00:44:f7:d6:18:40:75:7b:be:55:8f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 17 12:58:06 2026 GMT Not After : Jul 16 13:03:06 2027 GMT Subject: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:85:21:31:46:11:a9:51:8d:1a:86:6e:24: 38:97:37:6a:05:13:b7:f4:d4:01:7d:90:89:59:52: dc:b3:b2:4d:3e:c3:28:ea:fc:0b:eb:cb:45:1b:0b: d2:87:4e:a7:2c:12:70:85:10:f8:90:58:c3:06:a0: e8:cf:6a:2f:00:56:74:cd:8c:a0:42:f4:5c:6a:fd: f3:4a:62:35:d9:03:25:f1:c4:0f:8d:39:89:a9:54: e7:81:83:82:ad:db:0f:a6:d0:2f:73:86:1a:e0:6c: b8:39:1d:af:9b:c7:4c:e4:80:1c:84:a3:44:1e:41: 1f:f5:73:32:37:92:4d:12:e0:0e:d5:93:b5:93:71: 39:48:95:3e:9a:fe:eb:8a:f6:b9:43:0c:1d:52:70: a7:77:f5:ac:3f:91:b9:ad:97:dd:0d:4b:8d:81:fd: 8e:4e:cb:b4:e0:02:43:66:5d:f2:a4:53:9e:96:45: 71:ff:d7:1c:9d:e8:f8:74:1e:af:03:f7:66:7a:d0: 39:5c:f9:c6:d2:8f:c1:7e:ca:38:1e:81:60:7b:fe: 47:70:f9:fa:07:f9:31:23:eb:e3:4f:be:9b:48:7f: 44:ac:5f:b0:cf:bc:0e:b2:6a:e0:bd:d3:e4:6f:24: 1c:48:4e:ca:fa:d9:1c:73:b7:d8:12:90:9d:6d:51: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.16.0/22 177.38.136.0/21 IPv6: 2804:1df4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52947 Signature Algorithm: sha256WithRSAEncryption 97:99:8e:89:1a:47:81:70:a2:e6:cf:3b:ce:af:fc:8b:12:7b: ab:ea:26:14:38:79:1b:71:a9:7b:b0:44:7d:f5:57:03:11:d5: 8c:f5:f2:f2:9f:6f:d9:41:32:57:94:0a:87:1a:75:37:6b:9a: 26:06:2d:6a:2d:91:c1:f5:3f:cb:4f:04:d7:cf:bb:09:d3:26: b1:5d:7c:7c:b6:11:de:28:62:a2:9e:37:f3:67:19:df:e0:93: 33:c6:2c:6a:41:ac:3c:6c:f6:cf:46:96:99:df:ba:14:be:e0: a3:71:50:cb:5b:08:6a:a2:c6:09:47:15:c3:65:2b:d4:99:5d: 08:16:93:a2:47:a3:e0:92:cc:2a:2e:25:86:ae:b9:4e:c8:04: 5f:cf:6c:a4:f2:27:4e:ea:36:e3:78:3b:6a:b7:3f:24:7d:6a: f2:49:b6:4e:bb:9f:75:f3:84:65:f0:38:53:8f:ec:a0:93:d9: f8:c4:96:bf:3d:ac:44:b4:90:f2:bc:11:53:f1:e2:9f:85:9e: bd:9d:e5:35:f3:2f:1e:47:3d:2c:ea:cf:e0:27:d0:40:3a:fe: 20:ea:2f:b4:5a:83:c0:94:7d:9f:ef:c8:bf:1b:fa:6a:de:5e: 54:bf:f8:51:ad:1a:91:cb:99:ae:76:07:ae:1d:0d:ab:a8:1d: d4:f4:7b:54 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKdkZP4/XDvQARPfWGEB1e75Vj8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MTcxMjU4MDZaFw0yNzA3MTYxMzAzMDZaMDMxMTAvBgNV BAMTKDJEMzU1NzhDQTIxQzZDOEU4MkFCRjkwQjU1QTIxRkRDMDRCNEZGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs9IUhMUYRqVGNGoZuJDiXN2oF E7f01AF9kIlZUtyzsk0+wyjq/Avry0UbC9KHTqcsEnCFEPiQWMMGoOjPai8AVnTN jKBC9Fxq/fNKYjXZAyXxxA+NOYmpVOeBg4Kt2w+m0C9zhhrgbLg5Ha+bx0zkgByE o0QeQR/1czI3kk0S4A7Vk7WTcTlIlT6a/uuK9rlDDB1ScKd39aw/kbmtl90NS42B /Y5Oy7TgAkNmXfKkU56WRXH/1xyd6Ph0Hq8D92Z60Dlc+cbSj8F+yjgegWB7/kdw +foH+TEj6+NPvptIf0SsX7DPvA6yauC90+RvJBxITsr62Rxzt9gSkJ1tUTnjAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtNVeMohxsjoKr +QtVoh/cBLT/dTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNZ MnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gxNUovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JT WTJ6WVp2NkI1cEhycDdVOXd2cUZnZnhQcUs2dTVtZ3pHM1h4ZGdoMTVKLzAvMkQz NTU3OENBMjFDNkM4RTgyQUJGOTBCNTVBMjFGREMwNEI0RkY3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqMUQAwQDsSaIMA0EAgACMAcDBQAoBB30MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDO0zANBgkqhkiG9w0BAQsFAAOCAQEAl5mOiRpH gXCi5s87zq/8ixJ7q+omFDh5G3Gpe7BEffVXAxHVjPXy8p9v2UEyV5QKhxp1N2ua JgYtai2RwfU/y08E18+7CdMmsV18fLYR3ihiop4382cZ3+CTM8YsakGsPGz2z0aW md+6FL7go3FQy1sIaqLGCUcVw2Ur1JldCBaTokej4JLMKi4lhq65TsgEX89spPIn Tuo243g7arc/JH1q8km2TrufdfOEZfA4U4/soJPZ+MSWvz2sRLSQ8rwRU/Hin4We vZ3lNfMvHkc9LOrP4CfQQDr+IOovtFqDwJR9n+/Ivxv6at5eVL/4Ua0akcuZrnYH rh0Nq6gd1PR7VA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:22:24 2026 by rpki-client