$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer File: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer (raw, json) Hash identifier: drY7L4iTTZgbxeG8/5EBfl/WpwHzex4wLlOhLQsRtIE= Subject key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29789FA60BABA68C458942B14BB11226D21C40DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft caRepository: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 15:58:43 +0000 Certificate not after: Thu 13 Aug 2026 16:03:43 +0000 Subordinate resources: AS: 264216 IP: 138.99.196.0/22 IP: 177.86.48.0/21 IP: 2804:2458::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:78:9f:a6:0b:ab:a6:8c:45:89:42:b1:4b:b1:12:26:d2:1c:40:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 14 15:58:43 2025 GMT Not After : Aug 13 16:03:43 2026 GMT Subject: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:a2:c6:4e:95:a4:3d:b3:bc:ec:83:fb:6c: 17:60:14:85:6e:87:2f:92:81:3f:a4:b5:ab:c0:2e: 71:19:d8:18:95:a3:f7:ec:05:c3:f0:00:65:be:dc: fe:7d:86:fa:f4:d5:1f:4c:f1:aa:48:db:03:2a:24: ea:cd:0e:f7:40:c8:7f:64:f5:7f:73:2a:8f:02:88: 6e:48:27:48:48:a7:76:1d:e1:1b:72:04:14:19:15: 77:9b:f7:ce:5c:37:3a:d8:13:ed:f7:ee:0c:ed:bc: 0d:a4:6d:31:88:b5:85:fb:0f:2c:37:65:a3:5a:d0: 76:54:21:0a:ad:38:4e:06:8b:c9:b9:71:2d:83:36: 15:1b:d1:7e:df:48:bd:43:30:f5:bf:fd:64:16:a3: 6c:2d:89:4f:6a:41:16:7a:6e:34:7e:d2:67:5d:c8: fe:85:24:f9:46:f3:13:eb:0c:f1:65:38:0d:e5:6e: 68:a0:60:38:ab:cf:60:0c:19:10:7f:2c:1e:79:6b: 4e:1d:0c:a7:c7:9c:2d:d2:a4:70:c0:37:d6:27:4f: 98:15:be:9b:80:8c:ff:24:5b:af:97:bd:21:76:7b: 32:6b:93:05:57:69:f9:b9:5a:8c:c5:26:11:7b:cb: a9:d1:9b:89:21:3f:f4:6c:d0:c7:05:81:e2:c5:e9: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.196.0/22 177.86.48.0/21 IPv6: 2804:2458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264216 Signature Algorithm: sha256WithRSAEncryption 5b:90:c5:e5:0b:d8:61:84:ed:7a:8f:c5:cb:21:f2:cc:55:c6: 9b:9a:c3:a5:b4:f6:74:a1:9f:da:ce:53:d8:f1:fb:b0:87:60: 88:97:bb:69:e7:8c:fa:20:1f:02:89:e3:9c:0c:71:d5:2f:31: 15:ba:d0:04:13:43:6f:79:5d:86:d9:44:e6:fd:40:02:13:8a: 27:40:00:6c:c0:be:32:78:41:7f:5a:a8:da:25:a6:c2:37:cc: 5e:77:ea:dc:d5:40:b6:ea:a3:5b:24:ba:f8:df:11:b2:93:6c: bc:73:37:43:96:33:85:6c:ea:4e:2f:7e:ce:84:f6:0f:b1:70: fc:f7:8c:81:03:5d:e8:05:a3:f1:eb:32:0b:f5:4d:df:82:cb: 6b:23:01:43:d3:ef:ee:97:dc:ca:b9:73:6d:7d:20:b3:bb:93: 78:bf:7d:58:4c:a1:b7:41:d0:82:01:65:81:4a:8f:52:3b:13: ba:92:30:c2:2c:32:cf:18:1b:ef:3f:7b:e2:fe:4e:b1:a4:51: 1e:dc:5f:e3:ad:f1:f0:8c:74:72:7c:99:96:8d:41:58:7a:6c: b7:0f:bd:66:5d:08:08:64:e2:82:cd:f8:ae:8c:d0:e2:e5:02: e4:df:a5:59:ca:3f:90:a9:09:de:9e:37:de:5c:6d:40:29:82: cf:0e:93:e8 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKXifpgurpoxFiUKxS7ESJtIcQNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTQxNTU4NDNaFw0yNjA4MTMxNjAzNDNaMDMxMTAvBgNV BAMTKEUzMjU1RTI0REY0MTdEOUQyQ0Y1QThBMzkyQzMyNUYwOTQzMkVBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHKLGTpWkPbO87IP7bBdgFIVu hy+SgT+ktavALnEZ2BiVo/fsBcPwAGW+3P59hvr01R9M8apI2wMqJOrNDvdAyH9k 9X9zKo8CiG5IJ0hIp3Yd4RtyBBQZFXeb985cNzrYE+337gztvA2kbTGItYX7Dyw3 ZaNa0HZUIQqtOE4Gi8m5cS2DNhUb0X7fSL1DMPW//WQWo2wtiU9qQRZ6bjR+0mdd yP6FJPlG8xPrDPFlOA3lbmigYDirz2AMGRB/LB55a04dDKfHnC3SpHDAN9YnT5gV vpuAjP8kW6+XvSF2ezJrkwVXafm5WozFJhF7y6nRm4khP/Rs0McFgeLF6YlFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjJV4k30F9nSz1 qKOSwyXwlDLqXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3dF ZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d3 RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAvRTMy NTVFMjRERjQxN0Q5RDJDRjVBOEEzOTJDMzI1RjA5NDMyRUE1RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimPEAwQDsVYwMA0EAgACMAcDBQAoBCRYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIGDANBgkqhkiG9w0BAQsFAAOCAQEAW5DF5QvY YYTteo/FyyHyzFXGm5rDpbT2dKGf2s5T2PH7sIdgiJe7aeeM+iAfAonjnAxx1S8x FbrQBBNDb3ldhtlE5v1AAhOKJ0AAbMC+MnhBf1qo2iWmwjfMXnfq3NVAtuqjWyS6 +N8RspNsvHM3Q5YzhWzqTi9+zoT2D7Fw/PeMgQNd6AWj8esyC/VN34LLayMBQ9Pv 7pfcyrlzbX0gs7uTeL99WEyht0HQggFlgUqPUjsTupIwwiwyzxgb7z974v5OsaRR Htxf463x8Ix0cnyZlo1BWHpstw+9Zl0ICGTigs34rozQ4uUC5N+lWco/kKkJ3p43 3lxtQCmCzw6T6A== -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:27 2025 by rpki-client