$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer File: BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer (raw, json) Hash identifier: 2G1sGXGP24TmH1O7ESs+CJXj3yHOMspvAnn9RubncBA= Subject key identifier: BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F1C1C309EDF8D782090B10F6E4209EBBC606DFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft caRepository: rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 13 Aug 2025 04:27:29 +0000 Certificate not after: Wed 12 Aug 2026 04:32:29 +0000 Subordinate resources: AS: 265121 IP: 143.208.116.0/22 IP: 2804:2ad4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1c:1c:30:9e:df:8d:78:20:90:b1:0f:6e:42:09:eb:bc:60:6d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 13 04:27:29 2025 GMT Not After : Aug 12 04:32:29 2026 GMT Subject: CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:86:25:46:53:1a:ba:11:75:57:5a:41:3f: 62:84:27:b7:dd:90:32:20:54:86:8e:c7:97:63:97: cc:6f:bf:0d:3d:b3:6e:89:7e:99:06:50:79:4f:37: 35:28:04:cd:f9:73:99:ea:d3:26:0f:51:e4:d9:0f: 28:2c:ca:05:3f:49:a9:44:fd:d4:fa:dd:fd:33:39: 0d:fc:22:d9:70:3b:16:cb:bc:1d:bb:65:a3:67:f2: 98:45:9d:75:d7:f1:41:ba:fc:92:ee:85:8e:64:28: 6f:24:39:5b:7e:1b:d5:ad:c5:99:3a:ee:7b:82:14: 0a:95:44:ec:9d:0f:68:77:f7:5f:08:c4:04:5b:41: f0:82:e8:a2:7d:04:8c:b2:5b:4a:d5:7b:2c:c0:e6: 41:39:fd:91:da:19:e2:77:b6:f2:17:15:09:69:41: 79:45:35:c3:28:73:6f:14:50:f5:b1:c7:3d:74:26: 1a:93:58:f6:80:da:4e:35:40:35:89:5a:d2:09:6a: 12:42:a4:0c:6c:57:53:3c:57:aa:2e:d4:02:49:d6: 4c:20:5b:c5:9a:78:0a:ef:a3:f6:15:5e:57:8a:f8: 7c:d9:cd:fd:66:e9:da:c9:e8:0f:0b:34:81:d2:44: 1d:16:db:51:99:f9:11:d5:13:f4:64:09:44:63:00: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.116.0/22 IPv6: 2804:2ad4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265121 Signature Algorithm: sha256WithRSAEncryption cd:fa:7c:b6:75:27:a6:33:82:1f:10:50:27:af:73:18:6c:17: bc:5b:5d:e8:f0:d0:1d:0b:ab:1d:d0:f3:a8:71:64:c1:3e:12: da:ab:29:d7:34:48:ef:31:c4:ab:ef:de:26:98:48:6f:4c:3e: 96:07:b6:c7:e7:b5:f5:54:4a:2b:c8:69:a3:2c:c0:2b:a3:eb: 12:fb:33:89:fe:71:04:14:c7:02:f2:1f:a8:3d:b2:30:b7:7a: 5d:6c:e3:2e:73:f0:51:82:84:ce:5e:02:08:b4:f3:f1:a1:dd: f4:1b:67:28:be:bc:37:9a:a2:eb:a1:8a:85:21:de:10:eb:60: c3:f3:a0:0d:4f:b1:e6:0f:cb:46:f0:62:85:9f:0e:56:6a:d0: 07:90:97:c0:82:e1:45:1b:6a:3d:c7:cc:fe:4c:e8:6d:8b:07: 1f:2a:52:f9:9a:36:d6:cf:d6:7a:6c:a7:32:86:93:fc:58:2f: 96:7c:d1:9d:de:67:c8:77:a7:22:49:c8:8e:8d:37:d6:f0:ad: 18:00:df:de:a4:08:9e:1a:48:18:f5:5f:8d:45:74:40:5b:30: de:75:99:e5:16:a2:a0:d1:78:2a:ea:53:3c:f6:93:1b:21:3c: 91:43:e9:21:70:3f:62:ce:06:b9:8e:5d:5c:04:09:cb:39:a1: 67:aa:53:08 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHxwcMJ7fjXggkLEPbkIJ67xgbf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTMwNDI3MjlaFw0yNjA4MTIwNDMyMjlaMDMxMTAvBgNV BAMTKEJGMUVEOTIwMTI0QTk1NjA3OEY1NEVGMkU3NEM0NkE0QkZDM0Y1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfa4YlRlMauhF1V1pBP2KEJ7fd kDIgVIaOx5djl8xvvw09s26JfpkGUHlPNzUoBM35c5nq0yYPUeTZDygsygU/SalE /dT63f0zOQ38ItlwOxbLvB27ZaNn8phFnXXX8UG6/JLuhY5kKG8kOVt+G9WtxZk6 7nuCFAqVROydD2h3918IxARbQfCC6KJ9BIyyW0rVeyzA5kE5/ZHaGeJ3tvIXFQlp QXlFNcMoc28UUPWxxz10JhqTWPaA2k41QDWJWtIJahJCpAxsV1M8V6ou1AJJ1kwg W8WaeArvo/YVXleK+HzZzf1m6drJ6A8LNIHSRB0W21GZ+RHVE/RkCURjACOxAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/HtkgEkqVYHj1 TvLnTEakv8P1FzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHND N2ZnajNuUERSMWJHSlZTMUE2b0JMSm9aRGczVXR4UXZZcGl0TTZIU1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhz QzdmZ2ozblBEUjFiR0pWUzFBNm9CTEpvWkRnM1V0eFF2WXBpdE02SFNYLzAvQkYx RUQ5MjAxMjRBOTU2MDc4RjU0RUYyRTc0QzQ2QTRCRkMzRjUxNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj9B0MA0EAgACMAcDBQAoBCrUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLoTANBgkqhkiG9w0BAQsFAAOCAQEAzfp8tnUnpjOCHxBQ J69zGGwXvFtd6PDQHQurHdDzqHFkwT4S2qsp1zRI7zHEq+/eJphIb0w+lge2x+e1 9VRKK8hpoyzAK6PrEvszif5xBBTHAvIfqD2yMLd6XWzjLnPwUYKEzl4CCLTz8aHd 9BtnKL68N5qi66GKhSHeEOtgw/OgDU+x5g/LRvBihZ8OVmrQB5CXwILhRRtqPcfM /kzobYsHHypS+Zo21s/WemynMoaT/FgvlnzRnd5nyHenIknIjo031vCtGADf3qQI nhpIGPVfjUV0QFsw3nWZ5RaioNF4KupTPPaTGyE8kUPpIXA/Ys4GuY5dXAQJyzmh Z6pTCA== -----END CERTIFICATE-----Generated at Sat Aug 23 07:14:13 2025 by rpki-client