$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer File: 578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer (raw, json) Hash identifier: Ag3+SjMdYyBhCEM2Qhc8rVp4jZBXH7Q92nDxVwsF2Ac= Subject key identifier: 57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E61870225DA877114E52E78D49FA69573B7C4D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.mft caRepository: rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 17:37:58 +0000 Certificate not after: Mon 06 Jul 2026 17:42:58 +0000 Subordinate resources: AS: 266339 IP: 170.239.44.0/22 IP: 2804:3648::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:61:87:02:25:da:87:71:14:e5:2e:78:d4:9f:a6:95:73:b7:c4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 17:37:58 2025 GMT Not After : Jul 6 17:42:58 2026 GMT Subject: CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:67:1d:92:bd:e3:80:c0:4e:eb:82:48:7f: 4a:04:74:62:23:14:4b:90:ad:c0:18:38:12:dc:1d: 96:6a:b1:37:17:cb:ef:3c:f5:ab:3a:51:b5:44:c9: 52:28:e3:5a:32:8b:91:6f:3d:65:06:a7:b2:d5:70: 8f:b2:6c:f2:ca:4a:72:44:2e:fd:69:5a:f1:c0:2f: 2d:44:84:14:45:0b:7b:63:68:b3:ef:57:2d:8f:79: f3:22:87:ce:6e:98:d8:55:d3:01:1c:84:ee:c6:5e: e0:97:d4:7a:13:77:90:29:17:a1:b8:93:04:9b:b9: 7d:fa:40:3a:0c:9d:ad:88:e9:43:b2:29:33:6b:ca: 5d:37:fe:6b:e4:7f:9d:f9:bb:90:71:21:85:6b:f8: ac:b7:db:f8:2a:af:4f:5d:da:12:75:f0:8f:a0:01: e1:fc:25:0f:a3:af:0e:db:fc:d2:1e:d7:d9:3f:80: de:73:ef:fd:77:9e:dd:44:ac:e5:e9:61:f3:45:d1: 06:81:86:0d:9a:5c:c2:47:73:21:33:44:02:d5:5c: 16:2c:1b:89:9d:14:02:41:ba:12:ad:ae:bb:48:10: 1d:49:ea:2c:c5:cb:7d:2e:9e:b8:49:b8:c9:37:49: 10:9b:93:f6:f2:a0:69:12:84:64:57:2c:b2:34:25: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.44.0/22 IPv6: 2804:3648::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266339 Signature Algorithm: sha256WithRSAEncryption 6b:80:0f:22:63:af:6e:aa:a0:b6:53:69:c4:31:43:df:39:62: ae:75:20:80:12:05:a1:53:f3:38:3c:dd:ba:b7:ba:16:93:b4: 94:35:cc:08:64:45:2c:65:8c:3d:29:0e:b0:64:18:a2:bd:a9: 10:f4:6d:22:c3:7d:83:e3:f3:81:0b:9e:b4:0c:36:60:4b:f5: d2:98:da:8e:e2:c3:5d:69:79:e4:2b:2e:f4:fe:1b:41:62:73: b8:e0:e2:49:1c:78:bd:4c:15:53:16:92:71:ef:28:eb:70:42: ca:59:7e:a1:91:36:14:ab:ce:ab:6d:fa:24:48:8f:98:90:d2: 41:7e:25:8c:6b:1e:a3:b5:06:f1:d4:b3:a1:5f:ee:4e:99:57: 75:5b:72:d0:59:03:1e:11:46:d8:96:5c:df:08:57:bb:3f:e7: 28:1d:7e:8f:28:93:54:63:8d:5a:1a:3c:9a:06:7e:52:e0:8a: 6b:68:dd:a3:eb:aa:ff:e4:ff:6a:25:3f:1c:5b:a8:4a:f3:d1: a2:56:11:71:eb:87:89:3a:cf:8d:4b:91:c6:68:b8:fb:b1:58: 0f:87:6f:8a:e7:3f:1c:83:57:f2:04:6f:55:cb:84:7d:22:f8: 68:e9:a1:96:47:d0:ac:92:1a:38:2c:3d:94:e1:6b:fb:a6:45: fd:d0:91:00 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULmGHAiXah3EU5S541J+mlXO3xNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDcxNzM3NThaFw0yNjA3MDYxNzQyNThaMDMxMTAvBgNV BAMTKDU3OEZBQ0E0NUVBQUQxREI3QzdFQkE4NkEwNzUwRkJGN0Q4MzRCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgGcdkr3jgMBO64JIf0oEdGIj FEuQrcAYOBLcHZZqsTcXy+889as6UbVEyVIo41oyi5FvPWUGp7LVcI+ybPLKSnJE Lv1pWvHALy1EhBRFC3tjaLPvVy2PefMih85umNhV0wEchO7GXuCX1HoTd5ApF6G4 kwSbuX36QDoMna2I6UOyKTNryl03/mvkf535u5BxIYVr+Ky32/gqr09d2hJ18I+g AeH8JQ+jrw7b/NIe19k/gN5z7/13nt1ErOXpYfNF0QaBhg2aXMJHcyEzRALVXBYs G4mdFAJBuhKtrrtIEB1J6izFy30unrhJuMk3SRCbk/byoGkShGRXLLI0JeKrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXj6ykXqrR23x+ uoagdQ+/fYNLozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXNl SnVwQm10N0ROYXFrakZ1b3hHdzR5S2laVHlpWmFFVFhzdURacnNrSG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVz ZUp1cEJtdDdETmFxa2pGdW94R3c0eUtpWlR5aVphRVRYc3VEWnJza0huLzAvNTc4 RkFDQTQ1RUFBRDFEQjdDN0VCQTg2QTA3NTBGQkY3RDgzNEJBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqu8sMA0EAgACMAcDBQAoBDZIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQYzANBgkqhkiG9w0BAQsFAAOCAQEAa4APImOvbqqgtlNp xDFD3zlirnUggBIFoVPzODzdure6FpO0lDXMCGRFLGWMPSkOsGQYor2pEPRtIsN9 g+PzgQuetAw2YEv10pjajuLDXWl55Csu9P4bQWJzuODiSRx4vUwVUxaSce8o63BC yll+oZE2FKvOq236JEiPmJDSQX4ljGseo7UG8dSzoV/uTplXdVty0FkDHhFG2JZc 3whXuz/nKB1+jyiTVGONWho8mgZ+UuCKa2jdo+uq/+T/aiU/HFuoSvPRolYRceuH iTrPjUuRxmi4+7FYD4dviuc/HINX8gRvVcuEfSL4aOmhlkfQrJIaOCw9lOFr+6ZF /dCRAA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:21:53 2025 by rpki-client