$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer File: AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer (raw, json) Hash identifier: ZsqiestJ0Dq2Ggifr3nSLBjR1waOCVkRUPkEpLuTZGo= Subject key identifier: AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 719D67F1745BE338A796BD42FE74446DAE48676F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.mft caRepository: rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 29 May 2025 12:35:04 +0000 Certificate not after: Thu 28 May 2026 12:40:04 +0000 Subordinate resources: AS: 267116 IP: 45.229.116.0/22 IP: 2804:485c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9d:67:f1:74:5b:e3:38:a7:96:bd:42:fe:74:44:6d:ae:48:67:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 29 12:35:04 2025 GMT Not After : May 28 12:40:04 2026 GMT Subject: CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:1b:b2:a2:89:23:9c:62:a5:ae:39:27:20: 84:39:62:a6:c7:ea:98:35:bd:c4:12:1f:e9:bf:88: 65:f7:03:9b:f6:cf:47:82:36:1a:99:c8:fd:45:b1: 72:c3:01:0e:3c:17:7d:0b:f5:bc:a9:2e:e9:85:bf: 07:a7:3d:a8:d9:22:4e:bf:44:d0:80:28:0d:87:75: 8f:3a:e7:ab:89:88:87:94:f9:e2:eb:c7:1c:b4:48: 86:ff:2b:5f:bf:19:9c:c1:dd:8d:4e:10:14:c5:30: ac:f1:82:b9:4b:17:dc:77:15:03:fd:49:6b:8b:ef: 73:be:ae:be:db:8b:41:53:89:0c:8a:d4:11:83:b9: 21:20:00:fb:65:63:25:6a:ae:ff:cb:24:d1:cb:7e: 53:6e:69:6a:30:12:73:cc:2a:83:88:2a:d6:6f:84: 8b:6c:d2:cf:6c:b7:2a:cb:f1:31:4d:e4:b5:ad:ad: c0:f2:e7:51:2f:63:f4:49:fc:e1:b1:0f:19:92:72: cc:72:35:7a:d5:9c:a5:45:2d:8d:c9:bc:3c:c0:11: e5:7e:b1:8b:49:f5:a9:88:b6:c5:c5:69:b0:4c:95: f8:a7:6b:7b:ff:7c:30:33:ac:33:b9:76:86:a6:b3: e1:b9:e4:fb:1a:3e:2c:1f:49:5a:e4:74:10:4c:27: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.116.0/22 IPv6: 2804:485c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267116 Signature Algorithm: sha256WithRSAEncryption bf:7f:f6:09:e3:58:3a:f9:fe:90:39:59:2e:82:68:f1:a5:7e: 34:51:9a:90:b2:ba:2b:94:e2:1e:9f:ab:7d:66:fd:8e:ca:33: 30:c9:42:2b:72:8d:6c:0f:14:8d:a7:e7:0a:8b:bc:58:b4:b0: 4e:5e:e9:b5:89:45:89:a4:b9:22:5c:f3:d6:1c:9f:ac:8d:6d: 94:5e:0e:44:7b:c0:9b:26:b5:68:03:4a:d0:7d:3a:85:41:ee: 3b:d0:8d:91:37:7e:80:fd:26:0d:50:f2:a7:1f:85:28:7d:a8: 6c:50:9c:6c:8e:9f:14:09:2f:7b:4d:1b:24:bc:5f:00:55:45: 4c:fe:74:04:e7:45:af:c1:34:73:52:6a:2b:e7:90:57:b0:24: 1d:51:4d:3d:a3:23:87:b7:d7:32:9b:8d:ad:77:8b:39:b6:e0: b9:31:9b:19:a4:0b:26:1b:1d:c4:12:ff:ed:9c:4e:0e:aa:f1: a3:57:e4:53:6f:46:62:df:99:82:98:9e:09:4e:9c:73:a9:9f: 97:13:89:db:84:29:c9:bc:a0:59:2e:f4:a1:8b:6d:9e:39:57: 2b:40:ca:b7:01:28:7e:d5:bd:3c:34:f2:20:40:ae:d9:39:a8: 65:31:bf:b5:59:89:82:a6:d5:8a:51:28:55:59:2e:02:30:e6: 29:e9:9e:59 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcZ1n8XRb4zinlr1C/nREba5IZ28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MjkxMjM1MDRaFw0yNjA1MjgxMjQwMDRaMDMxMTAvBgNV BAMTKEFBM0VEN0E3RUFFRjlCOEM5ODk1M0FCNkQ1NkQ3Mjc4QkI4QUJBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvxuyookjnGKlrjknIIQ5YqbH 6pg1vcQSH+m/iGX3A5v2z0eCNhqZyP1FsXLDAQ48F30L9bypLumFvwenPajZIk6/ RNCAKA2HdY8656uJiIeU+eLrxxy0SIb/K1+/GZzB3Y1OEBTFMKzxgrlLF9x3FQP9 SWuL73O+rr7bi0FTiQyK1BGDuSEgAPtlYyVqrv/LJNHLflNuaWowEnPMKoOIKtZv hIts0s9styrL8TFN5LWtrcDy51EvY/RJ/OGxDxmScsxyNXrVnKVFLY3JvDzAEeV+ sYtJ9amItsXFabBMlfina3v/fDAzrDO5doams+G55PsaPiwfSVrkdBBMJznRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqPten6u+bjJiV OrbVbXJ4u4q67zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVF akRldFpKN2ZYM01ydEh5dEZzZm9qWm9TVlg5YnZjNUNnWjJrZDhqUTcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1 RWpEZXRaSjdmWDNNcnRIeXRGc2ZvalpvU1ZYOWJ2YzVDZ1oya2Q4alE3LzAvQUEz RUQ3QTdFQUVGOUI4Qzk4OTUzQUI2RDU2RDcyNzhCQjhBQkFFRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeV0MA0EAgACMAcDBQAoBEhcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTbDANBgkqhkiG9w0BAQsFAAOCAQEAv3/2CeNYOvn+kDlZ LoJo8aV+NFGakLK6K5TiHp+rfWb9jsozMMlCK3KNbA8UjafnCou8WLSwTl7ptYlF iaS5Ilzz1hyfrI1tlF4ORHvAmya1aANK0H06hUHuO9CNkTd+gP0mDVDypx+FKH2o bFCcbI6fFAkve00bJLxfAFVFTP50BOdFr8E0c1JqK+eQV7AkHVFNPaMjh7fXMpuN rXeLObbguTGbGaQLJhsdxBL/7ZxODqrxo1fkU29GYt+ZgpieCU6cc6mflxOJ24Qp ybygWS70oYttnjlXK0DKtwEoftW9PDTyIECu2TmoZTG/tVmJgqbVilEoVVkuAjDm KemeWQ== -----END CERTIFICATE-----Generated at Sun Jun 29 21:54:34 2025 by rpki-client