$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/390DE358A808D36C0795E69DC8E59530BF5A0D37.cer File: 390DE358A808D36C0795E69DC8E59530BF5A0D37.cer (raw, json) Hash identifier: ycQ+Epi9wFVx8TfQ0ZLFWDd3RmU02iadSr+pdjAkuZA= Subject key identifier: 39:0D:E3:58:A8:08:D3:6C:07:95:E6:9D:C8:E5:95:30:BF:5A:0D:37 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A279FD1429187B46639F440CA20511419FB84A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.mft caRepository: rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 18:49:05 +0000 Certificate not after: Wed 01 Jul 2026 18:54:05 +0000 Subordinate resources: AS: 272446 IP: 2804:8150::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:27:9f:d1:42:91:87:b4:66:39:f4:40:ca:20:51:14:19:fb:84:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 2 18:49:05 2025 GMT Not After : Jul 1 18:54:05 2026 GMT Subject: CN=390DE358A808D36C0795E69DC8E59530BF5A0D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:ec:cd:0e:20:8e:b0:1f:b4:e2:8b:4d:c7: f1:d5:1b:a9:59:69:49:3b:8d:40:a4:2d:b1:76:cc: 63:17:ed:0b:32:52:ea:84:db:22:18:80:bf:26:21: 89:99:50:3e:8a:56:22:a2:15:27:ef:82:b1:fe:e2: 64:47:8b:b1:2e:39:7d:dc:ba:c1:de:d0:a2:71:49: 49:3e:b0:7e:2a:72:40:0c:25:16:b4:78:88:c5:6e: 2e:8d:8f:54:cd:bb:fd:9d:70:b3:8b:97:19:d7:83: 83:5b:17:fa:34:64:56:2c:ce:09:32:4c:7c:5b:53: 7e:6d:d2:65:12:97:9f:de:bd:31:6e:3e:d0:87:d6: a4:fa:76:78:db:6c:51:6c:5a:cf:51:f5:5e:9b:75: 72:76:80:0e:6f:05:a6:24:3b:6e:de:3a:c8:ef:e6: f0:a4:89:44:f6:ed:2c:ef:23:97:6d:7e:be:a7:21: 03:db:4f:ef:82:9b:be:3a:0c:83:6f:3b:d5:e9:f6: 91:57:b4:7e:00:0e:13:86:e1:cc:50:23:ea:24:99: b3:79:fa:44:e3:11:30:8e:b7:60:9a:90:47:99:82: 84:01:84:d0:ae:d5:02:dc:9d:91:b0:8e:a1:ac:06: 30:7f:bc:01:7a:22:65:fd:4a:96:60:ca:89:10:e9: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:0D:E3:58:A8:08:D3:6C:07:95:E6:9D:C8:E5:95:30:BF:5A:0D:37 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8150::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272446 Signature Algorithm: sha256WithRSAEncryption 54:e4:4a:dd:b6:7a:f7:f2:4e:18:1b:ab:7e:2e:5d:63:1a:30: 86:a5:ae:03:6d:d2:9f:28:72:89:6f:1c:ef:19:ba:eb:74:32: 28:45:19:5d:61:b0:88:fb:b2:9f:81:c8:c1:70:7d:43:49:47: ec:ca:23:ff:19:01:8c:61:b3:e9:93:21:86:4a:bd:75:bc:36: 17:d8:9e:09:96:11:6e:01:43:13:5a:74:71:37:7a:cf:08:e8: 7b:a7:37:27:8d:dc:ea:4c:92:25:e5:e2:39:be:b9:5c:55:58: f0:4d:7f:03:52:01:dd:6d:b4:75:87:95:00:de:c3:57:d2:07: 9a:97:a0:4d:7a:8d:03:ec:68:6e:f4:1d:9c:9b:e3:54:e2:05: 34:56:08:c7:0d:d9:fd:a3:86:68:c2:57:74:e7:af:2b:c9:f6: ce:2b:c3:7b:5b:74:b5:ee:c3:85:0b:93:d0:db:db:c9:14:3c: 08:ee:f7:ad:66:cb:be:e6:cc:6b:69:dd:84:78:0a:9b:0f:2c: d7:09:16:45:9c:5a:25:8d:33:44:00:f0:16:48:ca:0a:5a:93: bd:a8:44:82:e3:e9:22:fe:91:62:8d:3d:aa:99:bd:ba:65:61: 61:60:fc:c6:9b:11:21:c1:e6:0d:e6:45:35:98:e9:ea:0e:cf: 53:76:0b:1c -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUeief0UKRh7RmOfRAyiBRFBn7hKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDIxODQ5MDVaFw0yNjA3MDExODU0MDVaMDMxMTAvBgNV BAMTKDM5MERFMzU4QTgwOEQzNkMwNzk1RTY5REM4RTU5NTMwQkY1QTBEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEo+zNDiCOsB+04otNx/HVG6lZ aUk7jUCkLbF2zGMX7QsyUuqE2yIYgL8mIYmZUD6KViKiFSfvgrH+4mRHi7EuOX3c usHe0KJxSUk+sH4qckAMJRa0eIjFbi6Nj1TNu/2dcLOLlxnXg4NbF/o0ZFYszgky THxbU35t0mUSl5/evTFuPtCH1qT6dnjbbFFsWs9R9V6bdXJ2gA5vBaYkO27eOsjv 5vCkiUT27SzvI5dtfr6nIQPbT++Cm746DINvO9Xp9pFXtH4ADhOG4cxQI+okmbN5 +kTjETCOt2CakEeZgoQBhNCu1QLcnZGwjqGsBjB/vAF6ImX9SpZgyokQ6ZO9AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5DeNYqAjTbAeV 5p3I5ZUwv1oNNzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnk4 WG9HRWhRZVk1RXFlN0VMYVpZVVFSWThhOU1VZzFEdlpWa3JpcDd4TWovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ5 OFhvR0VoUWVZNUVxZTdFTGFaWVVRUlk4YTlNVWcxRHZaVmtyaXA3eE1qLzAvMzkw REUzNThBODA4RDM2QzA3OTVFNjlEQzhFNTk1MzBCRjVBMEQzNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASBUDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KD4wDQYJKoZIhvcNAQELBQADggEBAFTkSt22evfyThgbq34uXWMaMIalrgNt0p8o colvHO8Zuut0MihFGV1hsIj7sp+ByMFwfUNJR+zKI/8ZAYxhs+mTIYZKvXW8NhfY ngmWEW4BQxNadHE3es8I6HunNyeN3OpMkiXl4jm+uVxVWPBNfwNSAd1ttHWHlQDe w1fSB5qXoE16jQPsaG70HZyb41TiBTRWCMcN2f2jhmjCV3TnryvJ9s4rw3tbdLXu w4ULk9Db28kUPAju961my77mzGtp3YR4CpsPLNcJFkWcWiWNM0QA8BZIygpak72o RILj6SL+kWKNPaqZvbplYWFg/MabESHB5g3mRTWY6eoOz1N2Cxw= -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:27 2025 by rpki-client