$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8A093B42E9C642176E9BD34BD501752936B07CA6.cer File: 8A093B42E9C642176E9BD34BD501752936B07CA6.cer (raw, json) Hash identifier: zEHXVK4Ye9ptCjIn1cp2ACY+iIoIBUkOA5Ve9CZekwM= Subject key identifier: 8A:09:3B:42:E9:C6:42:17:6E:9B:D3:4B:D5:01:75:29:36:B0:7C:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0690676B18F01EFE1D9835746F5ABB4A8BB3F7EF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/8A093B42E9C642176E9BD34BD501752936B07CA6.mft caRepository: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 20 Aug 2025 13:15:28 +0000 Certificate not after: Wed 19 Aug 2026 13:20:28 +0000 Subordinate resources: AS: 263266 IP: 170.82.108.0/22 IP: 177.129.28.0/22 IP: 2804:1614::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:90:67:6b:18:f0:1e:fe:1d:98:35:74:6f:5a:bb:4a:8b:b3:f7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 20 13:15:28 2025 GMT Not After : Aug 19 13:20:28 2026 GMT Subject: CN=8A093B42E9C642176E9BD34BD501752936B07CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:16:bd:54:aa:9c:c4:dd:67:64:be:01:66: 0c:14:e9:fc:d9:b5:02:35:d5:e0:04:8b:c1:52:0d: e4:30:f3:66:70:f6:b0:59:f8:a4:fb:01:c1:ea:78: b4:94:46:e6:ea:3c:f4:21:0f:cd:8b:31:fa:a7:7b: b2:1b:86:49:27:2f:85:2f:f1:36:e9:7f:cc:18:3b: 1c:ee:b9:cf:a9:e0:50:c8:a5:3f:b2:65:1a:79:5c: 49:4b:25:ef:61:a8:1d:f1:a9:0f:b5:fb:2a:2f:a8: df:cd:02:5d:5a:4d:93:80:b6:38:e3:e6:83:b2:de: 25:ee:28:8a:77:30:9b:e2:c2:8d:be:c6:76:96:2d: b5:e7:97:c2:3d:52:df:6d:40:e8:1d:f1:bf:26:75: 79:73:85:01:35:26:93:11:e2:53:a2:c6:00:8e:93: 4d:79:4f:7f:6f:7d:7b:b9:c4:4f:b6:e2:bd:03:89: 1b:f9:1d:90:de:cc:cf:40:00:dc:d0:5a:35:42:b6: 45:7e:61:89:32:86:59:fc:ea:47:c3:23:ce:8c:2f: 4e:ff:4c:00:63:ea:8d:e0:f6:8b:33:5b:41:7b:ed: 2d:d2:50:3b:92:e3:22:39:7f:13:cc:ac:b2:ea:34: 61:a1:d5:51:1f:ed:5b:98:aa:8e:6f:24:11:ed:fb: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:09:3B:42:E9:C6:42:17:6E:9B:D3:4B:D5:01:75:29:36:B0:7C:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/8A093B42E9C642176E9BD34BD501752936B07CA6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.108.0/22 177.129.28.0/22 IPv6: 2804:1614::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263266 Signature Algorithm: sha256WithRSAEncryption 27:b2:32:e3:56:ec:31:4c:ce:b2:de:b9:25:c4:ce:7a:f1:1f: 9f:68:e8:65:7e:e6:e8:22:44:aa:96:ef:51:44:ef:44:64:40: 98:66:35:08:31:75:81:86:bd:3f:45:02:46:1f:f1:29:45:5e: 28:a7:37:68:d8:c5:85:96:1a:f8:5f:df:d4:8d:19:dd:a1:42: f3:d5:2d:a1:c1:55:8d:64:42:64:a0:62:5a:44:25:65:b2:17: 41:cc:48:62:57:52:73:7c:43:06:c5:91:91:4f:d9:8a:52:45: a7:76:1b:98:23:7a:a6:fa:64:79:1d:ae:52:cb:a5:53:ea:55: a0:6c:29:31:03:7e:6b:be:c2:ce:0e:a5:40:71:de:03:d7:d3: 82:23:25:cf:86:22:50:39:94:84:b1:23:cb:5b:40:5e:84:36: 61:9d:be:1a:f8:5e:3e:9a:2b:c8:34:ef:9a:26:cd:87:47:df: 57:f0:a5:aa:80:5a:a6:61:bc:f6:18:59:17:4f:b3:fd:93:d6: 8f:68:d3:b2:04:eb:42:5d:a1:fb:18:88:31:a8:f2:1c:01:b1: fe:ac:ac:3b:53:73:1e:99:82:2a:9d:50:f2:14:8b:38:21:1d: ee:48:52:f5:1c:08:1e:96:78:13:57:5f:ee:51:8d:6d:09:95: 61:b3:af:07 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBpBnaxjwHv4dmDV0b1q7Souz9+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjAxMzE1MjhaFw0yNjA4MTkxMzIwMjhaMDMxMTAvBgNV BAMTKDhBMDkzQjQyRTlDNjQyMTc2RTlCRDM0QkQ1MDE3NTI5MzZCMDdDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLha9VKqcxN1nZL4BZgwU6fzZ tQI11eAEi8FSDeQw82Zw9rBZ+KT7AcHqeLSURubqPPQhD82LMfqne7IbhkknL4Uv 8Tbpf8wYOxzuuc+p4FDIpT+yZRp5XElLJe9hqB3xqQ+1+yovqN/NAl1aTZOAtjjj 5oOy3iXuKIp3MJviwo2+xnaWLbXnl8I9Ut9tQOgd8b8mdXlzhQE1JpMR4lOixgCO k015T39vfXu5xE+24r0DiRv5HZDezM9AANzQWjVCtkV+YYkyhln86kfDI86ML07/ TABj6o3g9oszW0F77S3SUDuS4yI5fxPMrLLqNGGh1VEf7VuYqo5vJBHt+37LAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKCTtC6cZCF26b 00vVAXUpNrB8pjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlVX ajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJV V2o3V01hS1I3YkduaTVib1JzYjYzbzZVeEw5Qzc5dTV1YjZObmtSZ2UyLzAvOEEw OTNCNDJFOUM2NDIxNzZFOUJEMzRCRDUwMTc1MjkzNkIwN0NBNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlJsAwQCsYEcMA0EAgACMAcDBQAoBBYUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEYjANBgkqhkiG9w0BAQsFAAOCAQEAJ7Iy41bs MUzOst65JcTOevEfn2joZX7m6CJEqpbvUUTvRGRAmGY1CDF1gYa9P0UCRh/xKUVe KKc3aNjFhZYa+F/f1I0Z3aFC89UtocFVjWRCZKBiWkQlZbIXQcxIYldSc3xDBsWR kU/ZilJFp3YbmCN6pvpkeR2uUsulU+pVoGwpMQN+a77Czg6lQHHeA9fTgiMlz4Yi UDmUhLEjy1tAXoQ2YZ2+GvhePporyDTvmibNh0ffV/ClqoBapmG89hhZF0+z/ZPW j2jTsgTrQl2h+xiIMajyHAGx/qysO1NzHpmCKp1Q8hSLOCEd7khS9RwIHpZ4E1df 7lGNbQmVYbOvBw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:13:46 2025 by rpki-client