$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.cer File: 87575BC22E7BED0E57475986037CBA8D6DE4F4A8.cer (raw, json) Hash identifier: dJxmk/B7mkkh+8AK+En5h8RLK5HEj2aOyQnurSXplSo= Subject key identifier: 87:57:5B:C2:2E:7B:ED:0E:57:47:59:86:03:7C:BA:8D:6D:E4:F4:A8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E9D9AB63D992103F682D4FF5B39D900194B9BBF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.mft caRepository: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 15:38:33 +0000 Certificate not after: Fri 19 Jun 2026 15:43:33 +0000 Subordinate resources: AS: 268850 IP: 45.174.128.0/24 IP: 2801:80:3540::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:9a:b6:3d:99:21:03:f6:82:d4:ff:5b:39:d9:00:19:4b:9b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 20 15:38:33 2025 GMT Not After : Jun 19 15:43:33 2026 GMT Subject: CN=87575BC22E7BED0E57475986037CBA8D6DE4F4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:b9:e0:8b:90:0e:15:34:09:d2:54:00:ba: 7a:c5:2e:f5:75:46:eb:6f:22:96:0a:95:5b:48:28: 96:c1:d6:bc:6e:3d:fc:7c:da:ac:b6:6f:89:62:d3: fe:bb:ef:56:88:b6:2f:5d:fa:7e:35:8d:97:65:11: 2e:3c:54:d7:85:6b:75:d7:92:3c:bf:b7:a2:ea:0b: 86:4b:6d:2b:6f:f8:08:64:ba:49:54:2a:d0:ba:c4: 3d:82:26:49:12:8a:8b:dd:f2:5d:c2:45:2d:8d:73: 69:a3:9b:6e:29:c6:39:ca:8b:4e:97:c1:92:a9:81: b6:1d:f1:85:d3:17:10:50:ab:82:e0:bd:38:10:ff: 58:10:1f:57:2a:55:7d:1f:38:60:0e:b0:0d:57:39: 3b:9a:84:a4:05:8b:b7:43:a1:17:17:6a:ed:45:ee: be:59:76:28:3c:50:2d:10:2c:c7:04:f6:00:24:42: 76:62:0d:cf:43:0e:dc:e2:5c:69:45:19:88:7f:65: 9b:cd:b6:94:67:9a:cc:1f:e3:69:35:da:32:9a:cd: 84:6a:22:07:b5:7b:80:78:20:22:e6:bf:8d:6a:d3: eb:d0:20:c9:48:58:0d:e1:a6:91:c8:b8:18:89:ff: 25:25:68:1a:91:76:87:de:aa:05:e0:28:0c:0d:5a: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:57:5B:C2:2E:7B:ED:0E:57:47:59:86:03:7C:BA:8D:6D:E4:F4:A8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/87575BC22E7BED0E57475986037CBA8D6DE4F4A8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.128.0/24 IPv6: 2801:80:3540::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268850 Signature Algorithm: sha256WithRSAEncryption d5:ea:1c:6e:fc:f9:ec:10:70:50:c3:e4:47:5c:bf:6b:65:fe: fd:a1:f6:54:66:76:a4:3e:22:04:5d:d3:76:ff:69:63:a0:53: be:e0:90:c7:ea:72:b7:20:af:25:93:a6:b8:a3:75:e9:62:1d: 92:2c:ae:4c:d8:cd:bb:01:a0:00:10:c9:ca:fc:81:b5:bc:0c: f9:4a:3e:4d:b8:2c:9d:03:ad:d6:ac:64:fc:4e:e3:68:21:c1: b0:9b:78:70:a0:ab:ee:b2:e9:a7:c2:f8:a9:92:e0:01:75:83: 1c:95:00:8f:02:99:05:a0:59:ff:31:89:09:dc:2d:d4:04:74: c2:bb:00:b9:36:70:aa:0f:c0:b5:30:f8:7d:98:c7:b3:ff:29: 59:20:32:61:d6:7d:f5:3b:64:d2:e7:d7:56:f6:d5:b9:42:3d: af:3d:1c:ab:09:4e:b9:65:34:f7:65:4f:6e:4e:00:31:09:f8: 0e:70:7d:1b:e2:8a:14:2b:7c:a1:dc:ce:65:d5:09:4e:5c:9b: bb:d0:fa:1f:62:33:ae:95:8d:83:f8:14:ee:c4:c7:94:b5:92: a4:07:a0:80:d1:f4:ba:f5:78:4d:3b:82:23:c0:09:1c:07:6f: f3:4b:78:62:e5:9d:6f:07:b7:96:d8:a9:ad:f8:7b:22:a3:7e: 7a:dc:e7:48 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUTp2atj2ZIQP2gtT/WznZABlLm78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjAxNTM4MzNaFw0yNjA2MTkxNTQzMzNaMDMxMTAvBgNV BAMTKDg3NTc1QkMyMkU3QkVEMEU1NzQ3NTk4NjAzN0NCQThENkRFNEY0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9Lngi5AOFTQJ0lQAunrFLvV1 RutvIpYKlVtIKJbB1rxuPfx82qy2b4li0/6771aIti9d+n41jZdlES48VNeFa3XX kjy/t6LqC4ZLbStv+AhkuklUKtC6xD2CJkkSiovd8l3CRS2Nc2mjm24pxjnKi06X wZKpgbYd8YXTFxBQq4LgvTgQ/1gQH1cqVX0fOGAOsA1XOTuahKQFi7dDoRcXau1F 7r5Zdig8UC0QLMcE9gAkQnZiDc9DDtziXGlFGYh/ZZvNtpRnmswf42k12jKazYRq Ige1e4B4ICLmv41q0+vQIMlIWA3hppHIuBiJ/yUlaBqRdofeqgXgKAwNWgF1AgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHV1vCLnvtDldH WYYDfLqNbeT0qDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXIy c0FQRlR4ckZCVFVoMWVRZFFQWXVzWkFjcEd6c1FOVnVrZWhQWkVFa1YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy MnNBUEZUeHJGQlRVaDFlUWRRUFl1c1pBY3BHenNRTlZ1a2VoUFpFRWtWLzAvODc1 NzVCQzIyRTdCRUQwRTU3NDc1OTg2MDM3Q0JBOEQ2REU0RjRBOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQALa6AMA8EAgACMAkDBwAoAQCANUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBBoyMA0GCSqGSIb3DQEBCwUAA4IBAQDV6hxu/PnsEHBQ w+RHXL9rZf79ofZUZnakPiIEXdN2/2ljoFO+4JDH6nK3IK8lk6a4o3XpYh2SLK5M 2M27AaAAEMnK/IG1vAz5Sj5NuCydA63WrGT8TuNoIcGwm3hwoKvusumnwvipkuAB dYMclQCPApkFoFn/MYkJ3C3UBHTCuwC5NnCqD8C1MPh9mMez/ylZIDJh1n31O2TS 59dW9tW5Qj2vPRyrCU65ZTT3ZU9uTgAxCfgOcH0b4ooUK3yh3M5l1QlOXJu70Pof YjOulY2D+BTuxMeUtZKkB6CA0fS69XhNO4IjwAkcB2/zS3hi5Z1vB7eW2Kmt+Hsi o3563OdI -----END CERTIFICATE-----Generated at Sun Jun 29 23:43:34 2025 by rpki-client