$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer File: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer (raw, json) Hash identifier: EKo2YvcGlJQLq6ZWuA1pInkMhdBOK6BCz/YcaWX1BWo= Subject key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24390E7B47DF02B617D36F33254354E320D2A0BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft caRepository: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Jul 2025 16:31:07 +0000 Certificate not after: Tue 21 Jul 2026 16:36:07 +0000 Subordinate resources: AS: 268577 IP: 45.163.116.0/22 IP: 2804:5354::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:39:0e:7b:47:df:02:b6:17:d3:6f:33:25:43:54:e3:20:d2:a0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 16:31:07 2025 GMT Not After : Jul 21 16:36:07 2026 GMT Subject: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:94:39:94:50:4c:51:01:a8:ff:29:28:62: 00:1e:0a:a7:2d:10:c9:f3:06:41:72:cd:a7:73:01: c1:00:7a:35:c5:24:59:06:a8:b8:38:87:25:f2:d4: 94:84:3b:c1:c5:a4:7e:03:f1:f5:0a:a1:2d:22:db: e3:4b:1b:7c:49:b5:6b:be:6f:eb:11:20:db:d5:5c: 9c:a8:e6:77:30:3a:15:c6:55:65:07:97:48:73:b5: 14:f0:a8:17:2d:bf:12:07:30:04:7b:8c:a9:f5:f8: 50:41:7a:3c:7d:be:3a:2b:9f:ab:83:90:bb:84:57: 9c:b2:62:5a:99:c1:25:e1:1b:d3:78:0d:3d:78:6a: e1:32:66:e9:b9:97:44:f4:1f:93:fa:44:a3:b8:5e: b4:4d:a6:87:ca:e6:5b:03:24:f6:c2:b8:3f:f4:78: ee:44:ef:f0:06:f7:cc:81:2a:a0:dd:3b:3d:5b:56: 06:f6:aa:25:6f:b8:28:29:bc:db:ad:c0:ab:85:bf: 39:53:87:3a:9f:a0:e6:4d:13:19:82:ae:95:ff:4a: 4e:af:1b:b8:39:95:79:ab:95:8e:a0:5e:d3:e8:53: dd:f1:ff:f0:d2:85:ea:cd:3b:94:b6:e7:a0:dc:1d: 55:47:e4:2c:f5:ed:36:90:f8:e7:76:91:63:79:b5: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.116.0/22 IPv6: 2804:5354::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268577 Signature Algorithm: sha256WithRSAEncryption 12:93:7b:82:b8:27:b4:a0:a0:01:c5:86:fa:e5:eb:dd:81:81: 95:36:e3:84:f4:9a:2d:67:6e:64:2b:30:b9:b1:52:2d:ba:3b: 3e:4d:5e:e8:92:c0:b7:3e:8a:76:16:18:3a:5e:a3:3a:66:7b: a0:98:6e:35:68:3e:87:75:72:67:51:7e:d3:49:29:41:5f:70: 7d:25:69:52:70:15:23:ec:fe:03:ac:81:6d:38:33:f6:6f:4c: cf:17:f7:6d:29:ce:71:04:6f:fa:9f:4e:43:7c:1a:9c:f9:e8: 45:5c:10:2b:3f:b6:68:78:ef:e2:01:81:d0:d6:2f:c1:d2:61: 74:3a:cc:a3:7d:43:ef:40:c8:6a:b0:e3:cb:2d:14:ea:1c:78: 7e:ae:90:3d:c6:11:ca:88:0f:31:2a:10:a3:4f:53:51:26:57: 80:e3:19:90:a8:a7:11:4b:ae:b1:71:2e:8b:34:c3:ea:b7:12: ad:fb:5e:2f:34:46:03:eb:c2:72:44:49:88:84:da:ea:7d:dd: ce:3a:a2:f8:25:94:3a:eb:77:53:a8:d9:90:f5:cf:82:93:16: 6d:49:c1:99:c0:b6:1a:25:51:b4:15:43:e4:34:5c:b3:c0:4d: 96:f1:f5:91:ae:ce:b7:6d:fb:2b:95:1b:41:4d:f9:ab:3c:03: 2a:7f:df:9d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJDkOe0ffArYX028zJUNU4yDSoL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjIxNjMxMDdaFw0yNjA3MjExNjM2MDdaMDMxMTAvBgNV BAMTKDBBMkIyRjREMzJGMzQ4QTNFNzVBMzFBNDhGQTZCQ0UxOTQ5QUU3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fJQ5lFBMUQGo/ykoYgAeCqct EMnzBkFyzadzAcEAejXFJFkGqLg4hyXy1JSEO8HFpH4D8fUKoS0i2+NLG3xJtWu+ b+sRINvVXJyo5ncwOhXGVWUHl0hztRTwqBctvxIHMAR7jKn1+FBBejx9vjorn6uD kLuEV5yyYlqZwSXhG9N4DT14auEyZum5l0T0H5P6RKO4XrRNpofK5lsDJPbCuD/0 eO5E7/AG98yBKqDdOz1bVgb2qiVvuCgpvNutwKuFvzlThzqfoOZNExmCrpX/Sk6v G7g5lXmrlY6gXtPoU93x//DSherNO5S256DcHVVH5Cz17TaQ+Od2kWN5tZXfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKKy9NMvNIo+da MaSPprzhlJrn8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVl4 Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZkSlIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VZ eEc4N1VMTXBjR0ZSTjV0dXFKbkM0cFB2TFFTQ0U5SlZ2ZjhDNTlGZEpSLzAvMEEy QjJGNEQzMkYzNDhBM0U3NUEzMUE0OEZBNkJDRTE5NDlBRTdGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaN0MA0EAgACMAcDBQAoBFNUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZITANBgkqhkiG9w0BAQsFAAOCAQEAEpN7grgntKCgAcWG +uXr3YGBlTbjhPSaLWduZCswubFSLbo7Pk1e6JLAtz6KdhYYOl6jOmZ7oJhuNWg+ h3VyZ1F+00kpQV9wfSVpUnAVI+z+A6yBbTgz9m9Mzxf3bSnOcQRv+p9OQ3wanPno RVwQKz+2aHjv4gGB0NYvwdJhdDrMo31D70DIarDjyy0U6hx4fq6QPcYRyogPMSoQ o09TUSZXgOMZkKinEUuusXEuizTD6rcSrfteLzRGA+vCckRJiITa6n3dzjqi+CWU Out3U6jZkPXPgpMWbUnBmcC2GiVRtBVD5DRcs8BNlvH1ka7Ot237K5UbQU35qzwD Kn/fnQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:20:23 2025 by rpki-client