$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer File: 2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer (raw, json) Hash identifier: 2ZhY9X6LcsgzPxjtW0b/SjXinOVFWl5QBVPkXqd8coo= Subject key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 89B93C11A3FDA9AE4419DA1C50B96583419CE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft caRepository: rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 22 Aug 2025 18:25:54 +0000 Certificate not after: Fri 21 Aug 2026 18:30:54 +0000 Subordinate resources: AS: 28186 IP: 138.117.176.0/22 IP: 177.8.224.0/20 IP: 177.21.0.0/19 IP: 177.23.80.0/21 IP: 177.136.112.0/20 IP: 187.44.128.0/17 IP: 189.89.128.0/18 IP: 201.55.192.0/22 IP: 2804:204::/32 IP: 2804:24dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89:b9:3c:11:a3:fd:a9:ae:44:19:da:1c:50:b9:65:83:41:9c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 22 18:25:54 2025 GMT Not After : Aug 21 18:30:54 2026 GMT Subject: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:40:47:26:6d:7f:2c:85:40:23:1b:1d:45: f1:a1:80:6f:fb:80:fe:c1:a0:d7:a8:96:46:42:f4: 9c:27:6a:a0:8e:3d:57:1b:80:ef:67:76:67:bf:e2: c7:74:fe:d5:5c:3d:e1:3c:ab:7a:ac:36:59:b0:db: 55:3e:7e:b5:81:02:0d:36:86:be:28:9b:81:81:48: c0:6f:5d:36:5d:63:9f:b3:47:54:34:36:8e:2a:11: a5:7c:39:3c:e5:eb:5e:ae:6b:b6:d6:33:2f:65:ab: ab:8e:32:49:d8:dc:66:b7:73:76:9d:e7:d0:a1:de: 8d:0c:07:3e:47:42:f6:48:b1:d9:e3:2e:9a:1a:bb: 1e:9b:50:c0:5c:11:b8:0c:cc:b2:02:64:49:d0:71: 47:e9:ae:96:8a:7f:42:ef:02:81:25:8e:03:a6:e6: 4e:4b:2a:d9:ef:67:ff:21:c1:de:3f:60:64:8b:b0: 14:89:2b:1b:dc:f5:b7:95:53:97:2c:df:d6:98:af: 90:0c:77:b3:1f:5f:3e:f8:48:b7:90:32:81:25:8f: 7e:a0:2d:16:3c:2a:10:8c:09:6a:f5:81:72:8c:ec: 9b:97:66:4a:c8:71:10:bc:b0:18:35:2f:35:f6:c6: 4a:9d:d6:dc:d6:a3:5a:32:12:85:22:ef:61:67:1d: 1d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.176.0/22 177.8.224.0/20 177.21.0.0/19 177.23.80.0/21 177.136.112.0/20 187.44.128.0/17 189.89.128.0/18 201.55.192.0/22 IPv6: 2804:204::/32 2804:24dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28186 Signature Algorithm: sha256WithRSAEncryption 1c:69:f1:8b:93:73:87:c5:46:9f:10:de:4a:19:c8:6d:dd:8e: ae:ee:77:ab:0e:d3:48:57:78:c3:b1:43:de:13:8c:d5:95:02: 87:9d:55:2a:c7:df:3d:c3:50:a5:ee:cb:b3:1e:43:9a:19:b3: 91:9b:52:24:69:c6:17:ee:84:ec:14:02:4e:76:d3:ea:c9:82: 19:23:e4:83:7e:95:0d:51:9e:06:d2:cb:3b:07:42:d9:49:1e: 15:50:f0:da:85:b3:c9:42:41:fd:71:7a:15:2a:f3:f3:fd:0c: 6f:9d:8e:01:98:14:52:62:9a:02:7c:06:b8:07:8b:a4:42:47: 52:b6:87:38:43:3f:0c:a0:3d:eb:7d:d3:c9:f6:d3:0b:41:33: 96:3b:66:61:7c:7d:6d:95:05:bf:5e:ba:32:e7:b5:8a:62:96: e5:32:2a:57:d6:25:eb:35:8f:47:1a:9a:44:70:a4:6d:9a:bc: ad:ca:1a:d9:18:6b:00:16:78:2d:b5:a1:b3:11:98:6b:87:7c: 7c:1b:48:8f:9e:3c:f7:05:fc:88:48:3c:fb:76:43:f9:6d:25: d1:b9:ae:0f:47:db:f6:31:4e:62:e4:43:86:6c:3c:0e:97:2c: 36:d6:b1:46:fd:ec:7c:7f:1c:b1:82:f4:f7:f5:c9:03:64:60: af:09:25:2c -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUAIm5PBGj/amuRBnaHFC5ZYNBnOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjIxODI1NTRaFw0yNjA4MjExODMwNTRaMDMxMTAvBgNV BAMTKDJFODFGMjk1NkU1QzE5NThDMUY1MzhBMUFBQTk5OTREQ0I4M0RBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6EBHJm1/LIVAIxsdRfGhgG/7 gP7BoNeolkZC9JwnaqCOPVcbgO9ndme/4sd0/tVcPeE8q3qsNlmw21U+frWBAg02 hr4om4GBSMBvXTZdY5+zR1Q0No4qEaV8OTzl616ua7bWMy9lq6uOMknY3Ga3c3ad 59Ch3o0MBz5HQvZIsdnjLpoaux6bUMBcEbgMzLICZEnQcUfprpaKf0LvAoEljgOm 5k5LKtnvZ/8hwd4/YGSLsBSJKxvc9beVU5cs39aYr5AMd7MfXz74SLeQMoElj36g LRY8KhCMCWr1gXKM7JuXZkrIcRC8sBg1LzX2xkqd1tzWo1oyEoUi72FnHR37AgMB AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQugfKVblwZWMH1 OKGqqZlNy4PaITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE5U ZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlFdnkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhO VGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzEvMkU4 MUYyOTU2RTVDMTk1OEMxRjUzOEExQUFBOTk5NERDQjgzREEyMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEH AQH/BFAwTjA2BAIAATAwAwQCinWwAwQEsQjgAwQFsRUAAwQDsRdQAwQEsYhwAwQH uyyAAwQGvVmAAwQCyTfAMBQEAgACMA4DBQAoBAIEAwUAKAQk3DAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgJuGjANBgkqhkiG9w0BAQsFAAOCAQEAHGnxi5Nzh8VGnxDe ShnIbd2Oru53qw7TSFd4w7FD3hOM1ZUCh51VKsffPcNQpe7Lsx5DmhmzkZtSJGnG F+6E7BQCTnbT6smCGSPkg36VDVGeBtLLOwdC2UkeFVDw2oWzyUJB/XF6FSrz8/0M b52OAZgUUmKaAnwGuAeLpEJHUraHOEM/DKA9633TyfbTC0EzljtmYXx9bZUFv166 Mue1imKW5TIqV9Yl6zWPRxqaRHCkbZq8rcoa2RhrABZ4LbWhsxGYa4d8fBtIj548 9wX8iEg8+3ZD+W0l0bmuD0fb9jFOYuRDhmw8DpcsNtaxRv3sfH8csYL09/XJA2Rg rwklLA== -----END CERTIFICATE-----Generated at Sat Aug 23 07:15:16 2025 by rpki-client