$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer File: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer (raw, json) Hash identifier: /l4/3IvSL4CsvaJxVH81mU08bVcceuHblybUQzdowN8= Subject key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 561F7CFA1B1ECE1EEF39BB6ECE99AD27297A246D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft caRepository: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 25 Jun 2025 17:12:10 +0000 Certificate not after: Wed 24 Jun 2026 17:17:10 +0000 Subordinate resources: AS: 266614 IP: 45.7.200.0/22 IP: 45.169.132.0/22 IP: 2804:3eac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 17:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1f:7c:fa:1b:1e:ce:1e:ef:39:bb:6e:ce:99:ad:27:29:7a:24:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 25 17:12:10 2025 GMT Not After : Jun 24 17:17:10 2026 GMT Subject: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:58:cf:84:7f:fa:1e:2a:84:fc:dc:ba:09: 39:a7:d3:12:e4:97:a2:0f:71:ff:5c:3e:a5:04:db: 34:c8:dc:79:51:59:5e:4d:e1:6f:30:6e:82:ce:10: 1c:65:e7:d3:0e:31:e9:cc:71:fa:f2:8a:e8:fe:0b: ff:b1:2f:88:a7:74:65:d9:6a:a5:10:ac:ed:ad:ee: 03:07:fb:12:59:2f:01:e6:cc:77:9f:b8:37:85:79: 75:28:5b:b0:ad:c4:c7:d4:a3:16:f5:5a:81:e6:7b: 28:72:7b:3d:21:95:65:c6:59:82:e2:f7:08:16:95: b3:d1:74:73:fd:fc:0f:61:e7:e0:d0:a7:5e:87:01: 7c:3b:78:b3:53:89:c7:10:77:07:db:08:cd:78:a9: bd:85:34:9e:b1:82:e5:f1:27:48:7f:e9:37:1b:90: 89:5d:bd:40:1d:07:ca:48:a6:4c:a9:21:df:15:5d: 8b:38:ed:76:26:75:c2:3e:53:b4:14:72:10:7a:33: a4:d1:85:e5:e4:b4:0a:f4:fd:0b:7a:24:24:5f:8b: 21:d7:54:02:15:8a:0f:e0:9e:d9:53:d8:e5:f9:e7: c5:b3:53:bb:43:0d:ea:7d:c3:4c:83:95:80:bb:9a: 49:28:d8:e2:9d:d8:10:65:ca:d5:fc:f9:46:da:e9: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.200.0/22 45.169.132.0/22 IPv6: 2804:3eac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266614 Signature Algorithm: sha256WithRSAEncryption 57:2f:0d:39:c2:ee:33:d9:19:15:03:9d:5d:3d:41:2c:46:15: fb:80:f9:c5:2b:00:e3:d4:85:31:01:a8:ba:fb:e7:99:ec:dc: 7b:44:06:89:93:97:38:d2:5f:c2:07:20:5a:ea:b6:21:74:f5: 72:b4:f7:c4:9a:ed:fb:22:4d:df:8c:18:75:9a:05:50:ab:5a: f1:0c:82:ad:68:63:6b:0a:4c:57:2a:f4:7b:3d:88:92:c5:85: e6:4a:5b:12:d9:34:4c:ab:53:b9:34:9a:6c:94:f7:86:5d:c2: a6:0e:8a:37:95:2c:bb:09:82:52:96:5d:31:6b:0d:ac:63:0b: 3f:0b:81:46:63:6a:5b:99:08:6a:ca:27:c0:af:22:68:2f:b9: dc:4e:78:4d:86:fa:f8:b5:6b:1a:16:a8:25:60:37:72:d9:ae: 67:f3:06:12:03:36:91:50:55:a4:8f:a2:e7:38:9c:a3:42:19: 49:6c:8d:f1:a1:a5:e7:e5:4d:fb:5c:d5:17:69:fb:ef:f3:24: 8e:15:02:e7:7b:42:17:2e:f3:8f:ee:d6:9e:21:26:ef:f4:2e: 6d:e3:af:d8:b0:e3:66:1e:77:a9:cb:35:4c:f9:f1:c2:1f:e4: 7d:69:59:bf:f0:37:54:32:62:e9:73:cf:13:03:24:2f:8b:62: 10:27:59:4e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVh98+hsezh7vObtuzpmtJyl6JG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjUxNzEyMTBaFw0yNjA2MjQxNzE3MTBaMDMxMTAvBgNV BAMTKEM3RDhGNEE1RUNGRTVCMjU1M0Y2QUFGMkExMDREREM5N0YyMDU0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa8FjPhH/6HiqE/Ny6CTmn0xLk l6IPcf9cPqUE2zTI3HlRWV5N4W8wboLOEBxl59MOMenMcfryiuj+C/+xL4indGXZ aqUQrO2t7gMH+xJZLwHmzHefuDeFeXUoW7CtxMfUoxb1WoHmeyhyez0hlWXGWYLi 9wgWlbPRdHP9/A9h5+DQp16HAXw7eLNTiccQdwfbCM14qb2FNJ6xguXxJ0h/6Tcb kIldvUAdB8pIpkypId8VXYs47XYmdcI+U7QUchB6M6TRheXktAr0/Qt6JCRfiyHX VAIVig/gntlT2OX558WzU7tDDep9w0yDlYC7mkko2OKd2BBlytX8+Uba6ctNAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTH2PSl7P5bJVP2 qvKhBN3JfyBUmDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGNa aWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtuMlkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhj WmljU2dpdnA0UlZab1ZvclRTTTFtZXJuS3JZeDFZMThReVo5UnBLbjJZLzAvQzdE OEY0QTVFQ0ZFNUIyNTUzRjZBQUYyQTEwNEREQzk3RjIwNTQ5OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQfIAwQCLamEMA0EAgACMAcDBQAoBD6sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQRdjANBgkqhkiG9w0BAQsFAAOCAQEAVy8NOcLu M9kZFQOdXT1BLEYV+4D5xSsA49SFMQGouvvnmezce0QGiZOXONJfwgcgWuq2IXT1 crT3xJrt+yJN34wYdZoFUKta8QyCrWhjawpMVyr0ez2IksWF5kpbEtk0TKtTuTSa bJT3hl3Cpg6KN5UsuwmCUpZdMWsNrGMLPwuBRmNqW5kIasonwK8iaC+53E54TYb6 +LVrGhaoJWA3ctmuZ/MGEgM2kVBVpI+i5zico0IZSWyN8aGl5+VN+1zVF2n77/Mk jhUC53tCFy7zj+7WniEm7/QubeOv2LDjZh53qcs1TPnxwh/kfWlZv/A3VDJi6XPP EwMkL4tiECdZTg== -----END CERTIFICATE-----Generated at Mon Jun 30 17:34:55 2025 by rpki-client