$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/667E147F41B8931495CA63574998633ECA590500.cer File: 667E147F41B8931495CA63574998633ECA590500.cer (raw, json) Hash identifier: R7ANw3XLqafvBjPKH4GE7xnVVGNM9/qxzrdA5Ydmp8M= Subject key identifier: 66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5FBCA7637FD8290307AC77899A48F997FA193441 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.mft caRepository: rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 22 Aug 2025 17:52:00 +0000 Certificate not after: Fri 21 Aug 2026 17:57:00 +0000 Subordinate resources: AS: 28653 IP: 201.76.208.0/20 IP: 2804:790::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bc:a7:63:7f:d8:29:03:07:ac:77:89:9a:48:f9:97:fa:19:34:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 22 17:52:00 2025 GMT Not After : Aug 21 17:57:00 2026 GMT Subject: CN=667E147F41B8931495CA63574998633ECA590500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:50:6a:6b:83:d6:95:46:3b:95:e9:35:50: ff:00:2e:80:10:58:d8:96:86:b5:a9:b5:b3:70:86: 79:72:72:ce:e1:9f:6a:98:3a:f7:fd:25:10:b8:28: 83:b8:de:4c:3b:9b:fa:03:c9:04:b9:3f:c4:7f:6c: 1c:c3:7a:10:51:50:4c:26:8d:4b:5a:65:8c:af:69: 09:92:fb:63:9d:5c:7e:58:b7:0d:39:e2:da:53:23: 44:9b:5c:8c:0a:dc:7e:1c:6e:85:e6:aa:7d:63:e3: 79:3e:20:d8:68:28:c2:4f:a8:6c:9b:e5:be:3d:02: a8:6e:8c:44:64:19:28:9a:3f:34:c9:36:91:d2:fe: 41:e8:c7:a7:a1:58:61:de:98:64:b8:77:ca:e2:3f: 75:f0:13:aa:89:42:40:0e:33:4e:c6:bd:b9:71:6f: a2:af:36:48:95:e0:50:5b:44:0a:02:f5:5d:5a:5e: c7:6c:a1:1f:63:b4:cc:28:5c:59:fe:2b:af:c6:aa: 77:a7:02:f6:c7:d6:a2:74:3d:7f:23:7a:b8:3d:bc: a7:75:2e:01:35:24:80:4b:72:66:f4:14:e9:e7:a7: 09:d5:57:23:34:9e:2b:94:5c:66:8c:8c:a9:7f:4f: b9:96:a1:e3:37:66:f9:71:cc:58:67:8b:61:76:46: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:7E:14:7F:41:B8:93:14:95:CA:63:57:49:98:63:3E:CA:59:05:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/667E147F41B8931495CA63574998633ECA590500.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.76.208.0/20 IPv6: 2804:790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28653 Signature Algorithm: sha256WithRSAEncryption 59:d3:9e:04:01:1b:29:e4:2b:75:60:bf:07:86:9a:2d:cd:d6: 5c:57:6c:da:02:25:c7:f0:f6:d8:73:8e:08:ff:e2:21:b0:f8: d9:0c:e3:f7:d9:38:db:95:ac:28:83:32:3c:7f:35:4b:a4:0f: 6a:d3:e9:f0:45:73:de:d1:89:85:f4:d7:43:2c:81:1d:c3:ec: ed:32:55:2d:1d:94:2d:b7:5f:da:9b:7c:0c:bf:63:6b:71:87: d6:66:b9:ff:f4:51:61:7b:15:2e:8b:d8:85:2f:dc:7a:9c:e1: a9:00:6a:42:86:ff:de:ac:2a:42:c3:8f:ff:4b:ab:f0:62:d0: 30:a3:ab:07:7c:e8:15:55:3d:60:5d:e3:15:00:92:b6:68:aa: 41:ca:98:dd:79:b4:27:5d:63:e6:1f:fb:dd:fb:c4:a0:c1:b1: 94:de:f6:14:b6:4a:8f:7a:8c:64:fe:f5:0f:8a:84:f3:4b:8f: e5:d3:d4:89:f8:c9:13:4b:e7:80:ef:e3:ef:6c:25:e7:f2:1f: 06:3d:b8:09:52:0f:59:3f:ed:f0:ce:2c:1d:64:7d:64:03:ff: 9f:36:38:18:31:f1:e2:63:fc:25:9e:d4:ff:52:05:87:5d:3f: 14:44:08:83:33:94:b5:83:ae:99:70:7c:4a:8b:10:c8:6f:53: 17:bc:c2:fd -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUX7ynY3/YKQMHrHeJmkj5l/oZNEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjIxNzUyMDBaFw0yNjA4MjExNzU3MDBaMDMxMTAvBgNV BAMTKDY2N0UxNDdGNDFCODkzMTQ5NUNBNjM1NzQ5OTg2MzNFQ0E1OTA1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUlBqa4PWlUY7lek1UP8ALoAQ WNiWhrWptbNwhnlycs7hn2qYOvf9JRC4KIO43kw7m/oDyQS5P8R/bBzDehBRUEwm jUtaZYyvaQmS+2OdXH5Ytw054tpTI0SbXIwK3H4cboXmqn1j43k+INhoKMJPqGyb 5b49AqhujERkGSiaPzTJNpHS/kHox6ehWGHemGS4d8riP3XwE6qJQkAOM07Gvblx b6KvNkiV4FBbRAoC9V1aXsdsoR9jtMwoXFn+K6/GqnenAvbH1qJ0PX8jerg9vKd1 LgE1JIBLcmb0FOnnpwnVVyM0niuUXGaMjKl/T7mWoeM3ZvlxzFhni2F2Rpl3AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmfhR/QbiTFJXK Y1dJmGM+ylkFADAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ21u Q2JwOHY3aURNdXJnVnRBRHJNMTd3Z1RKdUZpb3pTa2tzb3h2NTRBalAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nt bkNicDh2N2lETXVyZ1Z0QURyTTE3d2dUSnVGaW96U2trc294djU0QWpQLzAvNjY3 RTE0N0Y0MUI4OTMxNDk1Q0E2MzU3NDk5ODYzM0VDQTU5MDUwMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyUzQMA0EAgACMAcDBQAoBAeQMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm/tMA0GCSqGSIb3DQEBCwUAA4IBAQBZ054EARsp5Ct1YL8H hpotzdZcV2zaAiXH8PbYc44I/+IhsPjZDOP32TjblawogzI8fzVLpA9q0+nwRXPe 0YmF9NdDLIEdw+ztMlUtHZQtt1/am3wMv2NrcYfWZrn/9FFhexUui9iFL9x6nOGp AGpChv/erCpCw4//S6vwYtAwo6sHfOgVVT1gXeMVAJK2aKpBypjdebQnXWPmH/vd +8SgwbGU3vYUtkqPeoxk/vUPioTzS4/l09SJ+MkTS+eA7+PvbCXn8h8GPbgJUg9Z P+3wziwdZH1kA/+fNjgYMfHiY/wlntT/UgWHXT8URAiDM5S1g66ZcHxKixDIb1MX vML9 -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:08 2025 by rpki-client