$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer File: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer (raw, json) Hash identifier: PFjKO8QTA47BnGTrR/wXJfGhMA9DeITA0QLac9V1gl4= Subject key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DB20074F378EE8921B57A627A48A351B1A25C86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft caRepository: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 21 Aug 2025 20:04:12 +0000 Certificate not after: Thu 20 Aug 2026 20:09:12 +0000 Subordinate resources: AS: 271216 IP: 177.36.76.0/22 IP: 2804:7808::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b2:00:74:f3:78:ee:89:21:b5:7a:62:7a:48:a3:51:b1:a2:5c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 21 20:04:12 2025 GMT Not After : Aug 20 20:09:12 2026 GMT Subject: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:c9:b7:2a:a0:fa:d1:7d:7d:24:f3:2b:01: 09:67:0e:c7:e5:ad:19:7c:75:88:df:e2:91:92:e6: 8c:1c:45:c7:7f:92:d9:ab:17:4f:87:f1:78:b5:ff: f5:71:66:46:f4:94:88:a7:a1:93:3f:8e:ca:94:87: f2:5f:8e:37:dd:51:f5:be:5d:28:a3:57:ec:22:27: dd:22:f3:4a:1a:50:fc:ce:9d:36:d2:10:fe:c6:85: 80:08:89:88:97:6f:dc:87:ec:6b:59:63:51:cd:d1: f6:0d:a5:3e:e3:a4:b8:98:bd:5d:a7:b3:93:bb:a2: 8c:54:eb:d8:4f:c7:29:33:8a:4b:15:b3:05:38:13: b5:ea:26:fd:ec:ab:ec:88:32:70:07:ab:f0:ae:ac: ea:1a:74:72:ef:9a:bc:50:19:fb:63:64:25:29:a6: 67:78:02:d2:f2:b1:a9:31:04:d4:d3:af:e9:47:29: 62:fe:c2:04:60:9c:47:b2:15:f2:61:fb:e5:cc:a8: 97:fa:0f:85:ce:36:1c:74:cd:d7:ea:ba:1a:f4:c8: fc:48:9b:31:54:72:6f:40:4f:19:04:47:80:b8:4c: 99:8d:a6:ac:f9:9e:8b:ba:f1:91:76:55:ae:7b:66: 2f:10:77:73:71:9e:b7:c4:9a:41:ed:43:d0:64:cc: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.36.76.0/22 IPv6: 2804:7808::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271216 Signature Algorithm: sha256WithRSAEncryption da:d0:7d:ef:b9:90:91:0d:90:16:33:f5:65:4b:2b:aa:f7:c2: fb:02:98:30:a1:f9:24:ca:fd:32:54:ab:03:5f:e8:2c:8d:20: 41:31:78:28:c7:be:bd:1d:1c:41:a7:d5:1b:f3:92:cc:f7:67: a4:56:46:2f:e6:75:fe:b4:f2:23:c7:23:c3:fb:0f:0c:92:54: 9f:7c:9b:cb:19:51:32:23:6d:67:23:07:52:ac:d2:64:bf:9a: 65:09:74:45:6e:6e:26:52:d7:57:9d:ca:01:c6:c2:a1:be:e3: 19:8b:ec:c7:0f:af:07:3b:4b:a9:4e:11:94:bc:be:01:dd:06: 42:e4:88:3b:b4:12:41:9f:cd:c0:5c:69:8f:2d:cd:9e:83:b8: eb:aa:ea:96:7d:ec:07:32:7c:6c:2e:46:30:af:bc:b1:d0:71: 6a:57:7e:1c:01:f9:f3:44:1d:66:cc:71:68:83:ee:00:0b:dc: 40:b7:fe:6c:3b:5c:39:91:08:8a:8f:0f:32:e1:7c:39:08:84: 2b:f5:e8:7d:48:96:f3:9d:f6:f4:f6:8c:a0:6e:55:dd:da:13: 3f:99:75:69:29:21:7d:7d:1a:d3:ee:6a:e1:f1:23:6c:70:7c: 06:b4:ee:24:61:06:ae:5e:6c:72:52:9a:47:fb:1a:56:86:e6: de:31:d1:58 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULbIAdPN47okhtXpiekijUbGiXIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjEyMDA0MTJaFw0yNjA4MjAyMDA5MTJaMDMxMTAvBgNV BAMTKENCRUQyRUI1NUZCRjdERDIzNTZENzM0NzFERjU5M0FBNzA3M0QzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmq8m3KqD60X19JPMrAQlnDsfl rRl8dYjf4pGS5owcRcd/ktmrF0+H8Xi1//VxZkb0lIinoZM/jsqUh/JfjjfdUfW+ XSijV+wiJ90i80oaUPzOnTbSEP7GhYAIiYiXb9yH7GtZY1HN0fYNpT7jpLiYvV2n s5O7ooxU69hPxykziksVswU4E7XqJv3sq+yIMnAHq/CurOoadHLvmrxQGftjZCUp pmd4AtLysakxBNTTr+lHKWL+wgRgnEeyFfJh++XMqJf6D4XONhx0zdfquhr0yPxI mzFUcm9ATxkER4C4TJmNpqz5nou68ZF2Va57Zi8Qd3NxnrfEmkHtQ9BkzNddAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL7S61X7990jVt c0cd9ZOqcHPT/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREt3 aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RL d2lCM01IRFU5OTEyUHhVWXVBTGQ4aEd6dGZYaWI5V0RBR0FDVDVjbktULzEvQ0JF RDJFQjU1RkJGN0REMjM1NkQ3MzQ3MURGNTkzQUE3MDczRDNGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsSRMMA0EAgACMAcDBQAoBHgIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjcDANBgkqhkiG9w0BAQsFAAOCAQEA2tB977mQkQ2QFjP1 ZUsrqvfC+wKYMKH5JMr9MlSrA1/oLI0gQTF4KMe+vR0cQafVG/OSzPdnpFZGL+Z1 /rTyI8cjw/sPDJJUn3ybyxlRMiNtZyMHUqzSZL+aZQl0RW5uJlLXV53KAcbCob7j GYvsxw+vBztLqU4RlLy+Ad0GQuSIO7QSQZ/NwFxpjy3NnoO466rqln3sBzJ8bC5G MK+8sdBxald+HAH580QdZsxxaIPuAAvcQLf+bDtcOZEIio8PMuF8OQiEK/XofUiW 85329PaMoG5V3doTP5l1aSkhfX0a0+5q4fEjbHB8BrTuJGEGrl5sclKaR/saVobm 3jHRWA== -----END CERTIFICATE-----Generated at Sat Aug 23 08:54:07 2025 by rpki-client