$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer File: E7700F13658CA0FAD21A568C7195309EAC2021BA.cer (raw, json) Hash identifier: JDWFLKa2Vka7eoTciTvhN+7DdU8sS0nC+vO4TC9vbm8= Subject key identifier: E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D4483C085861C7849389756A4CE969343B70B69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft caRepository: rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 02 Oct 2025 03:07:35 +0000 Certificate not after: Thu 01 Oct 2026 03:12:35 +0000 Subordinate resources: AS: 26616 IP: 200.152.48.0/20 IP: 200.229.160.0/20 IP: 2804:3fe4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:44:83:c0:85:86:1c:78:49:38:97:56:a4:ce:96:93:43:b7:0b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 2 03:07:35 2025 GMT Not After : Oct 1 03:12:35 2026 GMT Subject: CN=E7700F13658CA0FAD21A568C7195309EAC2021BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:59:d9:68:1f:bd:7c:eb:df:6d:5f:07:31: 2a:19:f5:d1:c0:b3:91:66:45:e9:f8:87:83:89:b8: 1f:ae:aa:16:9a:74:8f:2b:26:87:51:9b:af:b1:b7: 6d:8e:62:e0:4c:23:d5:57:49:6a:c1:15:0d:3a:0e: f4:41:15:f4:36:68:15:9a:33:56:d9:aa:89:3c:2b: 24:69:91:cf:cb:a6:3a:20:25:32:0d:9b:aa:97:3b: d3:f4:05:da:c0:61:5d:3a:8f:b4:06:01:6c:77:1d: 1d:21:41:f2:b9:aa:71:d2:95:68:98:80:c8:fc:9c: e6:47:95:9f:a9:70:f1:0e:39:23:aa:d7:05:6c:b8: 05:8e:54:3f:d8:86:64:db:16:c2:b5:1f:d6:b1:d1: e0:0d:70:dc:a1:24:0e:c5:a1:18:1a:a5:06:85:16: 33:f1:f2:86:6a:6f:42:3d:8f:35:5d:7d:cd:2c:eb: 17:19:95:75:6e:90:27:54:8e:fa:07:1c:76:ca:38: 49:34:6e:dc:eb:04:60:e8:e7:56:fc:7e:d5:96:70: be:d2:43:a8:f4:f9:89:1d:cd:af:73:79:2c:21:d9: aa:92:22:c2:4a:1f:d6:66:be:6c:b5:f4:31:63:6c: 28:30:09:10:f5:9d:b7:70:78:9a:35:53:1f:48:c8: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.48.0/20 200.229.160.0/20 IPv6: 2804:3fe4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26616 Signature Algorithm: sha256WithRSAEncryption 2c:e5:09:3d:84:7b:3d:69:13:bb:7a:21:9e:a0:28:e4:58:55: c6:00:31:48:2e:91:1d:e7:a5:6f:54:04:5d:ae:83:94:53:f3: fe:73:fe:66:ae:6d:4a:61:aa:d6:30:60:5c:05:b8:98:d8:99: 55:29:d9:4b:ec:b9:69:d4:52:ae:94:70:d4:c5:61:e8:b7:e7: f2:a2:b5:d2:dc:00:00:f3:11:92:73:60:46:ab:58:75:45:50: 60:30:72:4d:0a:99:c0:2d:02:54:3d:0d:97:35:18:02:45:94: 89:02:ff:97:d6:6c:2a:35:37:5e:a3:2a:cf:1e:80:a9:05:2a: be:7e:80:2d:32:5e:63:78:b7:48:6e:5a:5e:e4:18:a8:e8:d2: f4:5a:15:2b:a2:fa:d3:04:3a:ce:58:a3:18:80:86:7e:80:69: e4:2f:f0:10:ff:b0:e1:51:ed:e8:a5:99:24:d8:83:12:2e:03: 23:46:c6:2b:44:22:32:98:6e:81:3b:5c:56:84:92:10:36:ba: 84:f9:d4:83:eb:a0:95:99:e0:f4:76:d7:be:f0:c8:1e:da:7c: 0b:2f:19:ea:ef:a5:de:fa:77:b7:37:c5:b8:ea:fe:5f:89:cf: f4:2b:14:c1:37:17:7a:89:45:78:a4:30:8d:d1:c6:9f:ea:bb: bf:fa:d4:ab -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUHUSDwIWGHHhJOJdWpM6Wk0O3C2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDIwMzA3MzVaFw0yNjEwMDEwMzEyMzVaMDMxMTAvBgNV BAMTKEU3NzAwRjEzNjU4Q0EwRkFEMjFBNTY4QzcxOTUzMDlFQUMyMDIxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhD1nZaB+9fOvfbV8HMSoZ9dHA s5FmRen4h4OJuB+uqhaadI8rJodRm6+xt22OYuBMI9VXSWrBFQ06DvRBFfQ2aBWa M1bZqok8KyRpkc/LpjogJTINm6qXO9P0BdrAYV06j7QGAWx3HR0hQfK5qnHSlWiY gMj8nOZHlZ+pcPEOOSOq1wVsuAWOVD/YhmTbFsK1H9ax0eANcNyhJA7FoRgapQaF FjPx8oZqb0I9jzVdfc0s6xcZlXVukCdUjvoHHHbKOEk0btzrBGDo51b8ftWWcL7S Q6j0+Ykdza9zeSwh2aqSIsJKH9Zmvmy19DFjbCgwCRD1nbdweJo1Ux9IyDYJAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTncA8TZYyg+tIa VoxxlTCerCAhujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFZR VWFKbW14THhmbmNGeDdMbjFBTHBTWmpCYmh1YnhvNUJOVHpWamdNdlUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRW UVVhSm1teEx4Zm5jRng3TG4xQUxwU1pqQmJodWJ4bzVCTlR6VmpnTXZVLzAvRTc3 MDBGMTM2NThDQTBGQUQyMUE1NjhDNzE5NTMwOUVBQzIwMjFCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEyJgwAwQEyOWgMA0EAgACMAcDBQAoBD/kMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmf4MA0GCSqGSIb3DQEBCwUAA4IBAQAs5Qk9hHs9 aRO7eiGeoCjkWFXGADFILpEd56VvVARdroOUU/P+c/5mrm1KYarWMGBcBbiY2JlV KdlL7Llp1FKulHDUxWHot+fyorXS3AAA8xGSc2BGq1h1RVBgMHJNCpnALQJUPQ2X NRgCRZSJAv+X1mwqNTdeoyrPHoCpBSq+foAtMl5jeLdIblpe5Bio6NL0WhUrovrT BDrOWKMYgIZ+gGnkL/AQ/7DhUe3opZkk2IMSLgMjRsYrRCIymG6BO1xWhJIQNrqE +dSD66CVmeD0dte+8Mge2nwLLxnq76Xe+ne3N8W46v5fic/0KxTBNxd6iUV4pDCN 0caf6ru/+tSr -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:46 2025 by rpki-client