$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer File: AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.cer (raw, json) Hash identifier: GZKIFN925gfc9MgDzkW/mgspXdZolriEs3fpL9ow9po= Subject key identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 424CD2D63EF8C91A10FCAFAD2C10E35D327B1B96 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft caRepository: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 21:55:54 +0000 Certificate not after: Fri 14 Aug 2026 22:00:54 +0000 Subordinate resources: AS: 28238 IP: 186.216.224.0/20 IP: 187.0.128.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4c:d2:d6:3e:f8:c9:1a:10:fc:af:ad:2c:10:e3:5d:32:7b:1b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 15 21:55:54 2025 GMT Not After : Aug 14 22:00:54 2026 GMT Subject: CN=AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:4b:7d:0d:0b:2e:9d:ba:a3:37:3c:46:1d: 02:03:5e:36:23:2a:6f:98:24:f4:84:16:75:b3:b6: 04:66:7c:3c:2e:8e:61:40:06:3b:47:39:41:85:37: ba:36:8f:a8:63:6f:58:d8:02:1b:1f:de:53:de:6f: be:f5:69:5d:1c:75:fe:16:05:47:dc:ff:34:6b:f9: ef:60:be:de:e8:1b:8d:5a:b3:b3:f2:9a:a1:37:eb: 78:db:ce:4d:9d:82:b1:42:a2:89:ab:8f:bf:6b:b5: 1f:2d:40:a1:ce:33:c2:cf:93:bd:3f:eb:05:37:93: 41:2c:33:40:bf:1e:2d:6e:bd:f7:89:4a:47:83:ef: e9:61:0d:70:bb:53:da:cd:97:6e:98:4a:34:d1:7e: fc:77:e9:fd:72:6e:6c:50:0a:3c:ed:7a:67:b2:ee: a2:06:50:8c:c4:bd:c7:f3:7b:3f:7f:3b:85:93:29: 9b:22:bc:aa:ed:86:7a:81:c6:6f:9f:8a:80:b1:5e: 50:86:6f:de:8a:68:ee:d4:70:1e:7a:a4:b8:11:22: 04:70:63:a3:5f:2d:e3:63:7d:6a:36:89:7e:05:29: 2d:85:24:81:b1:5d:87:08:87:57:c0:84:9a:29:e1: b0:1c:40:15:b2:68:a2:f7:3d:bd:0c:d4:f6:40:46: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:33:19:60:57:AC:10:FD:FD:EE:C3:F7:DC:CA:44:7D:FD:09:8D:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/1/AD33196057AC10FDFDEEC3F7DCCA447DFD098D7C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.216.224.0/20 187.0.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28238 Signature Algorithm: sha256WithRSAEncryption 96:4c:5f:37:28:3b:f7:f8:92:f3:5c:98:52:4c:44:bc:1c:bf: b8:63:82:7f:2d:84:64:76:aa:95:2c:4f:e0:88:e1:e8:45:62: 52:0a:a3:53:38:26:3d:1c:a9:af:23:b0:c3:83:2a:06:66:66: 69:0d:5d:a3:3d:10:25:28:97:80:64:13:40:9c:97:6f:8e:a8: 0f:89:bd:85:e6:04:19:74:fe:11:3d:1b:1e:d8:e0:06:82:14: 43:c7:d8:28:59:78:a5:9c:7b:7c:8e:77:a7:26:fc:8a:43:90: 0d:bf:26:96:16:ca:73:15:48:72:dd:eb:5b:50:e4:fd:66:6c: d2:44:d6:bc:d3:ba:db:f9:a8:90:a9:ab:a4:34:16:c3:b6:e4: b6:30:48:96:1f:dc:79:39:89:3e:e5:79:4e:1b:d4:46:15:32: 5b:5d:46:b6:2e:fd:d7:1c:8e:12:da:96:4b:a6:30:47:a4:50: 80:29:5b:ad:5c:f2:ba:1d:03:31:5d:09:36:82:e4:49:8c:2b: 92:0f:2e:9f:7b:df:96:8b:52:c5:b4:73:a2:b4:c6:31:1c:f7: bb:82:a8:0f:e2:65:7e:52:c6:92:4b:01:92:cd:41:61:9e:17: 35:06:79:77:89:82:c0:77:92:29:fc:41:4c:ee:a9:95:4c:e7: d9:aa:20:b3 -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIUQkzS1j74yRoQ/K+tLBDjXTJ7G5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTUyMTU1NTRaFw0yNjA4MTQyMjAwNTRaMDMxMTAvBgNV BAMTKEFEMzMxOTYwNTdBQzEwRkRGREVFQzNGN0RDQ0E0NDdERkQwOThEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWi0t9DQsunbqjNzxGHQIDXjYj Km+YJPSEFnWztgRmfDwujmFABjtHOUGFN7o2j6hjb1jYAhsf3lPeb771aV0cdf4W BUfc/zRr+e9gvt7oG41as7PymqE363jbzk2dgrFCoomrj79rtR8tQKHOM8LPk70/ 6wU3k0EsM0C/Hi1uvfeJSkeD7+lhDXC7U9rNl26YSjTRfvx36f1ybmxQCjztemey 7qIGUIzEvcfzez9/O4WTKZsivKrthnqBxm+fioCxXlCGb96KaO7UcB56pLgRIgRw Y6NfLeNjfWo2iX4FKS2FJIGxXYcIh1fAhJop4bAcQBWyaKL3Pb0M1PZARrB3AgMB AAGjggMwMIIDLDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStMxlgV6wQ/f3u w/fcykR9/QmNfDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVZM ZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9ONVkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlW TGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzEvQUQz MzE5NjA1N0FDMTBGREZERUVDM0Y3RENDQTQ0N0RGRDA5OEQ3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQEutjgAwQEuwCAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAm5OMA0GCSqGSIb3DQEBCwUAA4IBAQCWTF83KDv3+JLzXJhSTES8HL+4Y4J/ LYRkdqqVLE/giOHoRWJSCqNTOCY9HKmvI7DDgyoGZmZpDV2jPRAlKJeAZBNAnJdv jqgPib2F5gQZdP4RPRse2OAGghRDx9goWXilnHt8jnenJvyKQ5ANvyaWFspzFUhy 3etbUOT9ZmzSRNa807rb+aiQqaukNBbDtuS2MEiWH9x5OYk+5XlOG9RGFTJbXUa2 Lv3XHI4S2pZLpjBHpFCAKVutXPK6HQMxXQk2guRJjCuSDy6fe9+Wi1LFtHOitMYx HPe7gqgP4mV+UsaSSwGSzUFhnhc1Bnl3iYLAd5Ip/EFM7qmVTOfZqiCz -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:54 2025 by rpki-client