$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer File: AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer (raw, json) Hash identifier: Lj0skFUw4rRbQRVDIhfJTVbS+Uc5S9aZFEXFmliC3uw= Subject key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AE14A1F368708DF26953D4F36480F90E4A47967 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft caRepository: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 12:19:29 +0000 Certificate not after: Thu 06 Aug 2026 12:24:29 +0000 Subordinate resources: AS: 1916 AS: 6125 IP: 132.255.96.0/22 IP: 138.121.68.0/22 IP: 150.165.0.0/16 IP: 170.79.212.0/22 IP: 200.17.0.0/20 IP: 200.17.32.0 -- 200.17.79.255 IP: 200.17.112.0 -- 200.17.159.255 IP: 200.17.176.0/20 IP: 200.18.20.0 -- 200.18.31.255 IP: 200.18.80.0/20 IP: 200.18.128.0 -- 200.18.239.255 IP: 200.19.8.0 -- 200.19.47.255 IP: 200.19.112.0 -- 200.19.191.255 IP: 200.128.128.0 -- 200.128.239.255 IP: 200.129.0.0 -- 200.131.255.255 IP: 200.133.0.0 -- 200.133.223.255 IP: 200.133.240.0/20 IP: 200.137.0.0/16 IP: 200.139.0.0/18 IP: 200.143.192.0/18 IP: 200.159.240.0/20 IP: 200.235.0.0/17 IP: 200.237.0.0/18 IP: 200.239.128.0/18 IP: 2001:12f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e1:4a:1f:36:87:08:df:26:95:3d:4f:36:48:0f:90:e4:a4:79:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 7 12:19:29 2025 GMT Not After : Aug 6 12:24:29 2026 GMT Subject: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:2f:24:c0:dc:9f:16:67:7b:06:c1:4f:07: 04:8f:f4:a3:76:54:c7:bd:08:b9:cc:5d:ef:4d:7e: 59:15:41:4d:45:cc:d9:c8:86:c8:c7:d3:92:1b:bd: 32:95:9b:22:6c:3a:0a:60:fd:d5:d0:2c:da:0a:0f: 61:26:91:b4:35:65:55:7a:c4:b8:b7:cc:90:2c:c7: 50:04:fd:2b:b2:7b:d0:5c:a1:fc:7d:2b:68:ad:4b: 91:95:5b:e7:c5:f3:98:e7:5d:e9:5a:69:08:36:ca: 86:dc:3e:13:b5:73:e4:7b:f4:e7:27:a4:43:6b:ed: f8:35:d5:23:84:f6:a4:52:4f:58:6f:b1:7e:d6:71: ed:b5:1c:7d:2e:bc:49:10:fb:9f:28:5c:ed:6a:83: 24:57:2b:98:40:11:9c:60:a7:06:38:48:47:88:3e: 2b:f7:54:bc:c2:5c:3c:b9:92:bb:dc:20:d4:9c:20: c5:d9:f3:eb:31:b3:3a:b5:9f:32:2c:22:46:3f:01: 81:00:b2:3a:07:34:de:11:ac:9f:c0:17:90:f9:b4: 1a:aa:b5:48:09:a2:b2:fd:68:a7:b0:1b:88:fc:6d: 08:e4:38:57:73:09:41:9b:a3:74:16:94:bc:aa:3f: 08:2f:7b:53:33:c2:12:95:b6:37:29:28:ed:63:6f: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.96.0/22 138.121.68.0/22 150.165.0.0/16 170.79.212.0/22 200.17.0.0/20 200.17.32.0-200.17.79.255 200.17.112.0-200.17.159.255 200.17.176.0/20 200.18.20.0-200.18.31.255 200.18.80.0/20 200.18.128.0-200.18.239.255 200.19.8.0-200.19.47.255 200.19.112.0-200.19.191.255 200.128.128.0-200.128.239.255 200.129.0.0-200.131.255.255 200.133.0.0-200.133.223.255 200.133.240.0/20 200.137.0.0/16 200.139.0.0/18 200.143.192.0/18 200.159.240.0/20 200.235.0.0/17 200.237.0.0/18 200.239.128.0/18 IPv6: 2001:12f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1916 6125 Signature Algorithm: sha256WithRSAEncryption 41:d9:fc:9d:0e:65:9f:a2:6e:d6:8d:33:e7:07:df:f2:7c:84: fd:47:c6:2a:9e:6f:45:37:e7:da:19:0b:c0:c8:4d:fd:50:36: f5:71:d7:06:0c:d8:b5:1c:ee:fb:11:17:2d:a6:54:ec:b6:9c: 39:b1:29:f8:f3:82:ec:75:38:60:e5:b5:58:2c:6c:c7:5b:d9: 9f:12:bd:77:f5:9e:c4:ee:4a:fa:e4:1f:bd:c2:2b:c3:bc:61: c5:95:72:e5:b1:45:c9:1d:40:4d:7f:ee:2d:4b:cb:71:49:30: e2:94:1b:df:79:69:e4:d7:4a:6a:bb:0b:44:85:4b:2b:b0:b9: 5b:12:1e:12:6c:6b:6a:26:08:21:02:a0:d1:7e:fc:e8:6b:0c: 33:4d:33:c4:33:ae:b9:12:fc:25:9a:28:08:fd:80:17:1a:7a: b6:f8:ba:37:a6:76:96:1e:bb:ca:eb:40:c9:a6:53:1c:03:63: 18:1b:f8:18:cd:bb:58:8c:70:40:8a:19:58:50:80:94:07:6b: da:c7:e7:09:e4:b2:3f:41:58:e5:7b:f1:dc:16:75:96:67:b6: d6:d7:ca:32:55:84:da:9f:ee:b1:99:9a:4f:ac:03:10:ce:29: e8:b2:43:88:1e:8b:d7:fa:a2:01:07:d8:2c:1b:52:16:04:2b: a1:9d:44:c2 -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUOuFKHzaHCN8mlT1PNkgPkOSkeWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDcxMjE5MjlaFw0yNjA4MDYxMjI0MjlaMDMxMTAvBgNV BAMTKEFFRTQ2RTMyQ0IxNDYyNDE5Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCS8kwNyfFmd7BsFPBwSP9KN2 VMe9CLnMXe9NflkVQU1FzNnIhsjH05IbvTKVmyJsOgpg/dXQLNoKD2EmkbQ1ZVV6 xLi3zJAsx1AE/Suye9Bcofx9K2itS5GVW+fF85jnXelaaQg2yobcPhO1c+R79Ocn pENr7fg11SOE9qRST1hvsX7Wce21HH0uvEkQ+58oXO1qgyRXK5hAEZxgpwY4SEeI Piv3VLzCXDy5krvcINScIMXZ8+sxszq1nzIsIkY/AYEAsjoHNN4RrJ/AF5D5tBqq tUgJorL9aKewG4j8bQjkOFdzCUGbo3QWlLyqPwgve1MzwhKVtjcpKO1jb9bdAgMB AAGjggQPMIIECzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu5G4yyxRiQZzM uJtcSYSV6Rm1zzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkgy YW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1VdWQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJI MmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAvQUVF NDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVFOTE5QjVDRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH/BggrBgEFBQcB BwEB/wSB7zCB7DCB2gQCAAEwgdMDBAKE/2ADBAKKeUQDAwCWpQMEAqpP1AMEBMgR ADAMAwQFyBEgAwQEyBFAMAwDBATIEXADBAXIEYADBATIEbAwDAMEAsgSFAMEBcgS AAMEBMgSUDAMAwQHyBKAAwQEyBLgMAwDBAPIEwgDBATIEyAwDAMEBMgTcAMEBsgT gDAMAwQHyICAAwQEyIDgMAoDAwDIgQMDAsiAMAsDAwDIhQMEBciFwAMEBMiF8AMD AMiJAwQGyIsAAwQGyI/AAwQEyJ/wAwQHyOsAAwQGyO0AAwQGyO+AMA0EAgACMAcD BQAgARLwMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAgd8AgIX7TANBgkqhkiG9w0B AQsFAAOCAQEAQdn8nQ5ln6Ju1o0z5wff8nyE/UfGKp5vRTfn2hkLwMhN/VA29XHX BgzYtRzu+xEXLaZU7LacObEp+POC7HU4YOW1WCxsx1vZnxK9d/WexO5K+uQfvcIr w7xhxZVy5bFFyR1ATX/uLUvLcUkw4pQb33lp5NdKarsLRIVLK7C5WxIeEmxraiYI IQKg0X786GsMM00zxDOuuRL8JZooCP2AFxp6tvi6N6Z2lh67yutAyaZTHANjGBv4 GM27WIxwQIoZWFCAlAdr2sfnCeSyP0FY5Xvx3BZ1lme21tfKMlWE2p/usZmaT6wD EM4p6LJDiB6L1/qiAQfYLBtSFgQroZ1Ewg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:55 2025 by rpki-client