$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer (raw, json) Hash identifier: iZ73ywx5hKxonTSuF91zF6XJN2DkL+i8hgd7klMLLuk= Subject key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2543EBA7119B215DAA63D6750E3F4F343814046F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft caRepository: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Jun 2025 17:40:38 +0000 Certificate not after: Thu 11 Jun 2026 17:45:38 +0000 Subordinate resources: AS: 263140 IP: 168.205.144.0/22 IP: 191.6.140.0/22 IP: 2804:175c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 11:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:43:eb:a7:11:9b:21:5d:aa:63:d6:75:0e:3f:4f:34:38:14:04:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 12 17:40:38 2025 GMT Not After : Jun 11 17:45:38 2026 GMT Subject: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:f5:0b:94:2d:fa:93:33:aa:b2:c4:51:d5: 9f:fd:76:ee:b6:b4:2d:55:fa:86:82:1a:eb:5a:0b: c1:1a:f9:3c:5c:0c:66:54:2d:86:a3:9f:40:82:0d: c7:3f:7b:b3:4f:c4:59:a5:72:37:eb:d3:20:62:43: ea:73:41:d9:fe:6f:14:14:89:d8:b7:cd:9e:88:31: a2:a2:f7:4d:13:cf:f2:8d:4e:13:c5:59:c4:9c:97: 69:3c:31:c9:78:29:b2:d5:e0:99:d1:61:85:a8:ce: 20:d6:39:86:9f:00:41:5a:71:0c:31:88:52:fc:a5: c5:82:4f:18:7f:09:65:e7:c6:98:59:ec:8c:57:ef: 30:32:ea:4e:76:0b:b5:6e:fb:12:80:59:1d:33:eb: 04:ae:5c:81:1e:e6:9a:64:56:1b:b2:eb:91:1c:6d: 96:e6:9a:8e:ca:17:84:29:f2:28:e4:fe:60:59:43: d5:9d:3d:8f:b3:dc:3d:1b:6f:44:0c:96:3c:09:bb: 00:69:02:94:f6:d2:7d:3e:a6:a1:a0:82:a5:cf:e9: ea:12:ef:ce:a9:07:81:39:0a:75:08:d7:5d:85:75: 1c:48:38:3f:11:e2:37:f1:59:31:94:bb:5b:c6:b6: 18:ea:24:7f:8d:7d:04:3f:6e:2e:c0:9c:62:f9:91: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.144.0/22 191.6.140.0/22 IPv6: 2804:175c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263140 Signature Algorithm: sha256WithRSAEncryption 96:e9:40:ea:f0:50:52:ea:71:77:01:79:62:c1:14:26:bc:8e: 47:f4:26:fc:d2:5b:0c:fe:f8:8b:23:de:fd:1e:34:a6:5c:9a: 7f:43:d3:98:1f:cd:9b:2b:ac:ea:14:81:fc:c0:2d:22:e4:5a: fc:9c:e6:b4:87:4f:51:47:71:9f:f1:d2:c1:c2:c3:b4:a6:d0: 74:c0:62:9f:0b:a2:dd:d5:eb:44:a2:98:6a:a2:44:20:91:3d: e0:6f:18:d9:bb:24:24:14:11:ef:96:68:4d:ef:ad:d8:d0:bf: 30:04:73:4e:a7:fa:68:e6:c7:1f:3b:cb:23:ca:ba:ff:fe:29: a3:f0:a2:10:7e:50:42:4a:f9:fc:29:86:48:c4:e6:e0:e3:6e: d6:7e:65:78:14:b6:ba:ca:5e:77:c1:0a:00:40:2e:cb:ea:b5: e5:70:67:e2:85:5a:f8:07:be:dd:c1:d8:bb:98:d7:dd:87:b9: c2:53:f5:99:01:f7:d5:d0:79:9d:7e:f1:ec:ed:0f:a5:8c:0c: 44:db:51:7e:8d:71:bb:90:1f:7e:e0:a4:55:95:11:6e:3c:00: f0:35:72:1a:b9:6b:04:67:93:07:42:f2:27:32:30:89:7b:38: be:da:40:4f:80:51:a7:8a:a5:19:55:c4:51:b0:c2:cd:26:3a: b7:4e:c3:7a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJUPrpxGbIV2qY9Z1Dj9PNDgUBG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTIxNzQwMzhaFw0yNjA2MTExNzQ1MzhaMDMxMTAvBgNV BAMTKDhGMzI3RkVGQTRFODc4OEZGQ0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFV/ULlC36kzOqssRR1Z/9du62 tC1V+oaCGutaC8Ea+TxcDGZULYajn0CCDcc/e7NPxFmlcjfr0yBiQ+pzQdn+bxQU idi3zZ6IMaKi900Tz/KNThPFWcScl2k8Mcl4KbLV4JnRYYWoziDWOYafAEFacQwx iFL8pcWCTxh/CWXnxphZ7IxX7zAy6k52C7Vu+xKAWR0z6wSuXIEe5ppkVhuy65Ec bZbmmo7KF4Qp8ijk/mBZQ9WdPY+z3D0bb0QMljwJuwBpApT20n0+pqGggqXP6eoS 786pB4E5CnUI112FdRxIOD8R4jfxWTGUu1vGthjqJH+NfQQ/bi7AnGL5kfktAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPMn/vpOh4j/z9 zXxtGQZA+KYoEDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnpW UjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6 VlIyOW5oa0ZBcmptM2JvRzZ4ckpDVlBRMzZiNURhZVZzeW40NFNadEFCLzAvOEYz MjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBGOEE2MjgxMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqM2QAwQCvwaMMA0EAgACMAcDBQAoBBdcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQD5DANBgkqhkiG9w0BAQsFAAOCAQEAlulA6vBQ UupxdwF5YsEUJryOR/Qm/NJbDP74iyPe/R40plyaf0PTmB/Nmyus6hSB/MAtIuRa /JzmtIdPUUdxn/HSwcLDtKbQdMBinwui3dXrRKKYaqJEIJE94G8Y2bskJBQR75Zo Te+t2NC/MARzTqf6aObHHzvLI8q6//4po/CiEH5QQkr5/CmGSMTm4ONu1n5leBS2 usped8EKAEAuy+q15XBn4oVa+Ae+3cHYu5jX3Ye5wlP1mQH31dB5nX7x7O0PpYwM RNtRfo1xu5AffuCkVZURbjwA8DVyGrlrBGeTB0LyJzIwiXs4vtpAT4BRp4qlGVXE UbDCzSY6t07Deg== -----END CERTIFICATE-----Generated at Mon Jun 16 15:42:44 2025 by rpki-client