$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer File: A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer (raw, json) Hash identifier: xb3Z/7/swshyLr3rLNqVeLMmEVSiUgeUvPhfjqZ+VlM= Subject key identifier: A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6F0AF45684435E6002B2552A1D59B6632FC2FFDF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.mft caRepository: rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Apr 2025 14:00:44 +0000 Certificate not after: Mon 27 Apr 2026 14:05:44 +0000 Subordinate resources: AS: 265907 IP: 131.196.84.0/22 IP: 2804:3fb0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0a:f4:56:84:43:5e:60:02:b2:55:2a:1d:59:b6:63:2f:c2:ff:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 28 14:00:44 2025 GMT Not After : Apr 27 14:05:44 2026 GMT Subject: CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:31:de:c8:d8:32:21:cd:bb:6a:6a:9a:d6: b9:e9:72:bf:a1:92:4f:55:d3:3d:37:c5:49:c0:ad: 40:d9:51:e9:05:a9:b1:34:a7:6a:ac:af:d9:8d:df: 27:d8:40:37:72:34:cb:11:79:70:a3:01:e5:6c:9c: 8c:78:37:36:3f:4d:7d:79:3e:05:e5:80:42:6c:f2: 0f:87:f5:b1:c0:eb:5d:f9:91:dd:c0:52:9b:f2:54: d2:50:4d:8d:b3:64:21:f6:3d:d6:f1:7a:01:19:10: 73:f8:17:aa:de:13:a0:a4:cb:0a:b9:de:4a:30:ea: 71:d9:a0:98:bc:8b:13:8b:ab:be:6b:fb:84:1b:2c: b0:e3:30:7c:5f:4f:13:7a:50:e1:57:b1:d4:70:30: 87:a2:b3:c4:a4:33:37:20:cf:54:d2:0f:8a:0a:90: 81:45:6c:57:cb:12:c1:ec:82:05:0c:9d:24:f8:fe: 21:b4:28:2b:6d:84:21:ff:e2:64:7b:40:e7:17:ba: 72:20:8c:e2:d6:8e:b7:6c:45:22:ad:e1:48:a6:f6: 57:62:5d:bb:38:9c:1e:f6:3a:bc:eb:49:50:34:0a: 69:c5:8e:b3:5c:02:d8:a1:cd:7c:14:4c:32:10:59: 76:94:45:61:b5:5f:44:56:9f:59:f4:6b:12:46:dd: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.84.0/22 IPv6: 2804:3fb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265907 Signature Algorithm: sha256WithRSAEncryption 7b:12:e6:aa:44:62:f7:db:e6:22:16:2b:61:0e:ba:49:3a:2a: 7a:6d:64:8b:57:4f:0b:69:8b:55:aa:24:1b:33:08:0c:2e:51: 81:6f:1f:e9:48:80:9f:15:90:82:df:88:64:74:f7:87:c9:95: 6d:32:8d:b0:b5:4c:a3:c7:0f:04:9c:06:40:9b:ae:e6:6b:e9: f7:01:0f:16:b3:89:24:5e:75:71:48:c4:51:8e:0e:74:fd:dd: dd:d6:97:ab:80:47:af:8b:e9:e1:ec:06:46:ea:08:58:3f:e4: 14:15:0b:94:ce:63:70:42:e0:7e:8d:4e:b1:ea:81:d2:d2:e1: 66:32:3b:c5:b0:13:a0:f1:20:44:4d:c2:26:93:5c:45:54:fe: ca:d6:75:58:ac:a2:16:5b:39:57:e6:30:e9:ae:b0:87:4f:16: 5a:ea:80:c5:dd:f2:5d:36:ef:90:f4:b7:de:a7:c9:b8:be:8b: 34:f7:30:32:26:9f:f1:ff:0d:e7:ff:54:39:4f:79:f6:1d:57: 81:2a:4c:1a:77:c6:ea:42:20:6f:cf:70:3f:82:f3:e9:30:f9: 96:86:ad:3c:d8:87:c3:6a:e7:fd:24:d4:b7:06:b3:37:78:eb: 3b:6d:94:21:6a:41:6d:e3:4b:92:c0:6a:45:e6:cc:56:23:3a: 74:79:53:f6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbwr0VoRDXmACslUqHVm2Yy/C/98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjgxNDAwNDRaFw0yNjA0MjcxNDA1NDRaMDMxMTAvBgNV BAMTKEEyRUQ3MjBENzc5QzNDNDgzNTZDNkI1QTNERUEyQTEwQ0IwRjlGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ODHeyNgyIc27amqa1rnpcr+h kk9V0z03xUnArUDZUekFqbE0p2qsr9mN3yfYQDdyNMsReXCjAeVsnIx4NzY/TX15 PgXlgEJs8g+H9bHA6135kd3AUpvyVNJQTY2zZCH2PdbxegEZEHP4F6reE6Ckywq5 3kow6nHZoJi8ixOLq75r+4QbLLDjMHxfTxN6UOFXsdRwMIeis8SkMzcgz1TSD4oK kIFFbFfLEsHsggUMnST4/iG0KCtthCH/4mR7QOcXunIgjOLWjrdsRSKt4Uim9ldi Xbs4nB72OrzrSVA0CmnFjrNcAtihzXwUTDIQWXaURWG1X0RWn1n0axJG3TEnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSi7XINd5w8SDVs a1o96ioQyw+feDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODRM eXVzdkdGRkpDa0xxZHdERTQ2VHFROU1VQmExS0hVSDdFN1hTcFBNS1ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg0 THl1c3ZHRkZKQ2tMcWR3REU0NlRxUTlNVUJhMUtIVUg3RTdYU3BQTUtaLzAvQTJF RDcyMEQ3NzlDM0M0ODM1NkM2QjVBM0RFQTJBMTBDQjBGOUY3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8RUMA0EAgACMAcDBQAoBD+wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQOszANBgkqhkiG9w0BAQsFAAOCAQEAexLmqkRi99vmIhYr YQ66SToqem1ki1dPC2mLVaokGzMIDC5RgW8f6UiAnxWQgt+IZHT3h8mVbTKNsLVM o8cPBJwGQJuu5mvp9wEPFrOJJF51cUjEUY4OdP3d3daXq4BHr4vp4ewGRuoIWD/k FBULlM5jcELgfo1OseqB0tLhZjI7xbAToPEgRE3CJpNcRVT+ytZ1WKyiFls5V+Yw 6a6wh08WWuqAxd3yXTbvkPS33qfJuL6LNPcwMiaf8f8N5/9UOU959h1XgSpMGnfG 6kIgb89wP4Lz6TD5loatPNiHw2rn/STUtwazN3jrO22UIWpBbeNLksBqRebMViM6 dHlT9g== -----END CERTIFICATE-----Generated at Thu May 8 17:54:08 2025 by rpki-client