$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer File: 653D1900116E7E41CE869340B5477E400370D802.cer (raw, json) Hash identifier: WddpMoJx8pbpHIsBnV/nO+NWqsDRusDSNevSGmppQf0= Subject key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D8D39CE061C4C0D166B771B55CE3D673A5E545F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft caRepository: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 29 Jul 2025 19:55:55 +0000 Certificate not after: Tue 28 Jul 2026 20:00:55 +0000 Subordinate resources: AS: 52796 IP: 177.52.44.0/22 IP: 2804:b94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8d:39:ce:06:1c:4c:0d:16:6b:77:1b:55:ce:3d:67:3a:5e:54:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 29 19:55:55 2025 GMT Not After : Jul 28 20:00:55 2026 GMT Subject: CN=653D1900116E7E41CE869340B5477E400370D802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:8d:6a:23:26:a1:57:cd:10:44:ea:0b:65: 7e:d1:7e:b3:a1:d3:cd:9b:05:21:c9:d8:4d:3d:83: e0:ef:2f:f1:d3:76:29:af:55:d2:84:ee:46:3b:8d: ad:cf:8e:00:71:d0:62:30:44:0a:23:ef:02:a5:83: 91:4a:00:0e:d5:ac:53:3b:d9:f5:b5:dc:02:70:3a: 22:09:45:4a:09:73:43:92:72:3a:84:3d:b4:c4:4b: 58:86:6d:23:5f:79:c0:cd:6e:0f:0f:9e:6f:77:90: c0:4c:13:3e:be:6f:0c:78:38:2a:b4:fd:ed:38:b8: da:dc:37:35:a0:c5:a5:87:e3:2a:5e:7b:6a:0f:a1: 53:41:b7:ad:d1:5e:a7:d1:b5:a1:07:a6:37:f6:9a: 72:a3:38:4e:b9:41:97:b8:ac:2a:d6:ab:fd:dd:74: 7a:58:0c:12:38:4b:25:ae:f6:be:72:df:88:b7:e8: 1e:16:89:91:d6:2c:c2:3c:39:2a:d5:99:0d:7a:0a: f3:37:6d:7d:9c:45:5f:1c:83:0c:75:a4:1e:2c:1d: d8:2e:41:7d:0e:33:30:fb:87:59:a2:06:84:02:d4: cc:71:0c:e8:74:43:5d:55:2f:f4:66:1b:9d:04:5c: 96:b9:02:6b:ca:32:65:41:1b:3d:11:64:96:57:95: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.52.44.0/22 IPv6: 2804:b94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52796 Signature Algorithm: sha256WithRSAEncryption 62:fa:3f:3f:a5:38:c0:72:a9:af:71:11:a7:7a:55:27:15:0d: 88:ed:2e:bb:c6:5a:6a:f3:20:b9:c5:a2:d4:64:c4:90:1f:0b: 18:8c:60:69:d5:4b:29:fd:66:bc:49:49:96:c7:2b:b5:7e:58: 53:4a:1e:9c:89:4a:dc:b4:f1:b0:28:90:8b:35:82:d7:e0:d9: 51:36:04:13:16:a0:8d:b7:6f:98:99:75:d8:ae:cf:0b:f0:07: 5d:a8:af:e1:05:87:43:da:be:fd:ca:3c:29:8a:d3:f3:69:1c: 62:d7:47:e2:72:06:85:13:eb:33:15:03:cf:28:7a:5a:2d:1d: 86:60:88:08:a5:79:d0:fd:e4:70:b7:23:bf:15:07:b9:e3:ef: e9:98:11:77:74:b2:6d:87:ff:36:83:85:44:07:6d:6d:5c:fd: 5c:31:8b:96:35:27:c9:1c:d7:cd:bd:9b:61:59:e1:cf:9e:24: 81:c5:09:4b:aa:01:04:08:cb:b8:2f:b0:bf:c9:20:0c:a5:b1: e7:e1:d0:29:3b:3b:10:5b:ad:2c:c9:7c:57:c0:ab:fc:43:a6: d1:52:bf:93:bb:c5:d4:d2:33:7b:ff:19:11:9b:19:3b:eb:4d: 77:dc:0c:49:95:c0:2a:54:ea:d9:de:09:73:74:ce:13:51:54: 47:d6:d0:08 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUXY05zgYcTA0Wa3cbVc49ZzpeVF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjkxOTU1NTVaFw0yNjA3MjgyMDAwNTVaMDMxMTAvBgNV BAMTKDY1M0QxOTAwMTE2RTdFNDFDRTg2OTM0MEI1NDc3RTQwMDM3MEQ4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbY1qIyahV80QROoLZX7RfrOh 082bBSHJ2E09g+DvL/HTdimvVdKE7kY7ja3PjgBx0GIwRAoj7wKlg5FKAA7VrFM7 2fW13AJwOiIJRUoJc0OScjqEPbTES1iGbSNfecDNbg8Pnm93kMBMEz6+bwx4OCq0 /e04uNrcNzWgxaWH4ypee2oPoVNBt63RXqfRtaEHpjf2mnKjOE65QZe4rCrWq/3d dHpYDBI4SyWu9r5y34i36B4WiZHWLMI8OSrVmQ16CvM3bX2cRV8cgwx1pB4sHdgu QX0OMzD7h1miBoQC1MxxDOh0Q11VL/RmG50EXJa5AmvKMmVBGz0RZJZXle2fAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlPRkAEW5+Qc6G k0C1R35AA3DYAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHJv ZExwZGRuWlQ4b1FCSlkyb2lLd2JDSjI5ZVBVa3lFOVF3UU5TNWZuTWcvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHJv ZExwZGRuWlQ4b1FCSlkyb2lLd2JDSjI5ZVBVa3lFOVF3UU5TNWZuTWcvMC82NTNE MTkwMDExNkU3RTQxQ0U4NjkzNDBCNTQ3N0U0MDAzNzBEODAyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKxNCwwDQQCAAIwBwMFACgEC5QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAM48MA0GCSqGSIb3DQEBCwUAA4IBAQBi+j8/pTjAcqmvcRGn elUnFQ2I7S67xlpq8yC5xaLUZMSQHwsYjGBp1Usp/Wa8SUmWxyu1flhTSh6ciUrc tPGwKJCLNYLX4NlRNgQTFqCNt2+YmXXYrs8L8AddqK/hBYdD2r79yjwpitPzaRxi 10ficgaFE+szFQPPKHpaLR2GYIgIpXnQ/eRwtyO/FQe54+/pmBF3dLJth/82g4VE B21tXP1cMYuWNSfJHNfNvZthWeHPniSBxQlLqgEECMu4L7C/ySAMpbHn4dApOzsQ W60syXxXwKv8Q6bRUr+Tu8XU0jN7/xkRmxk760133AxJlcAqVOrZ3glzdM4TUVRH 1tAI -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:00 2025 by rpki-client