$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer File: 930909AA3662DF88849EF968F649C7749F3E8DAF.cer (raw, json) Hash identifier: qZjmeVSMTxdxocBHqzLm94pnfu8m9YHi3LZx+UU6Dvo= Subject key identifier: 93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64ECCA8DC283FC6C75A97BC287C847B0AD061A9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.mft caRepository: rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Jul 2025 14:53:26 +0000 Certificate not after: Wed 22 Jul 2026 14:58:26 +0000 Subordinate resources: AS: 28654 IP: 187.73.160.0/20 IP: 201.77.128.0/20 IP: 2804:95c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 08:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ec:ca:8d:c2:83:fc:6c:75:a9:7b:c2:87:c8:47:b0:ad:06:1a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 23 14:53:26 2025 GMT Not After : Jul 22 14:58:26 2026 GMT Subject: CN=930909AA3662DF88849EF968F649C7749F3E8DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:8f:b4:5c:38:59:63:42:30:ca:93:66:8c: 22:f7:39:2d:b1:68:60:0c:d0:ec:06:a6:3c:2d:01: 63:48:d3:e9:c6:98:34:b5:1a:17:1d:a2:9a:c8:9c: c1:2a:3c:52:97:6b:b1:80:1c:1e:07:a0:23:09:0e: da:4c:1a:81:f3:9f:b4:6b:85:70:94:d5:54:a0:12: 31:2d:50:4a:bb:57:a6:49:ed:12:79:d3:b6:8b:b2: cc:bf:df:a8:88:93:e6:c8:92:1f:d2:bd:b6:a5:56: 24:5a:b1:0e:64:70:7e:01:da:56:eb:27:0d:21:5f: 59:70:bc:ae:48:bc:64:47:58:e3:31:af:8d:0e:43: c2:4a:6f:d6:3e:3c:56:10:4b:e4:29:a1:b5:85:d1: 4a:01:4a:83:7a:30:55:f6:f0:97:5a:95:ec:ac:15: 61:0a:13:e5:28:b4:ca:21:93:3b:e1:22:45:01:7c: 4a:d1:0d:85:23:29:a7:50:16:ad:93:2a:c9:2c:e9: 3c:06:eb:f8:48:38:ff:0f:8d:b7:d6:38:8b:63:f7: fb:db:19:f1:0e:ae:f2:11:b1:52:26:12:79:45:7f: bd:bf:28:2c:44:18:ee:16:dc:bf:ab:bd:36:d7:ae: d6:6c:fa:cc:19:37:b6:46:bc:fb:87:ca:d1:76:59: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.73.160.0/20 201.77.128.0/20 IPv6: 2804:95c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28654 Signature Algorithm: sha256WithRSAEncryption d5:bd:3d:cd:fb:37:62:97:fb:91:a4:e5:9c:df:e9:cc:90:77: 62:93:89:f8:ce:c3:7f:28:a5:8c:26:b6:0d:d4:8b:3f:46:86: 92:c6:77:42:3f:a0:89:a6:16:6f:59:f2:0d:08:0d:ac:6e:a7: 7f:ad:bc:9d:ab:95:40:f9:db:95:4e:95:80:fe:f8:b5:ef:43: 90:13:76:09:80:3d:1c:d5:ec:58:a1:8c:f7:48:b3:d3:0f:38: 38:c6:a0:fb:2a:76:63:f6:70:6a:39:14:f4:f1:d0:91:d3:d1: 16:4e:41:0e:a9:14:2a:07:39:df:38:38:6d:6c:68:57:63:68: c5:69:aa:60:42:0b:6f:b5:5d:bd:e8:92:84:51:b9:d6:df:62: 0b:31:bc:71:44:34:15:46:e3:ba:64:fd:00:39:14:b4:54:70: fe:ce:59:ef:e5:ff:4c:82:bb:c4:52:6d:9c:61:8a:02:f5:e2: 6a:b2:4d:ce:2e:d8:6a:9e:9a:89:66:c8:55:60:85:97:0b:a1: d3:0b:7b:ed:90:d0:61:75:0c:d4:b3:64:e4:0d:e2:ef:b6:52: 2f:b2:45:1d:47:91:92:bb:f0:4b:dc:64:2c:6b:7c:5d:09:87: 1e:df:03:ba:c5:91:90:54:ab:11:cc:38:4f:11:4c:8b:9e:38: 69:fe:53:0f -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUZOzKjcKD/Gx1qXvCh8hHsK0GGpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjMxNDUzMjZaFw0yNjA3MjIxNDU4MjZaMDMxMTAvBgNV BAMTKDkzMDkwOUFBMzY2MkRGODg4NDlFRjk2OEY2NDlDNzc0OUYzRThEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFI+0XDhZY0IwypNmjCL3OS2x aGAM0OwGpjwtAWNI0+nGmDS1GhcdoprInMEqPFKXa7GAHB4HoCMJDtpMGoHzn7Rr hXCU1VSgEjEtUEq7V6ZJ7RJ507aLssy/36iIk+bIkh/SvbalViRasQ5kcH4B2lbr Jw0hX1lwvK5IvGRHWOMxr40OQ8JKb9Y+PFYQS+QpobWF0UoBSoN6MFX28Jdaleys FWEKE+UotMohkzvhIkUBfErRDYUjKadQFq2TKsks6TwG6/hIOP8PjbfWOItj9/vb GfEOrvIRsVImEnlFf72/KCxEGO4W3L+rvTbXrtZs+swZN7ZGvPuHytF2WY3TAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTCQmqNmLfiISe +Wj2Scd0nz6NrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFBQ RWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhYNEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRQ UEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAvOTMw OTA5QUEzNjYyREY4ODg0OUVGOTY4RjY0OUM3NzQ5RjNFOERBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu0mgAwQEyU2AMA0EAgACMAcDBQAoBAlcMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm/uMA0GCSqGSIb3DQEBCwUAA4IBAQDVvT3N+zdi l/uRpOWc3+nMkHdik4n4zsN/KKWMJrYN1Is/RoaSxndCP6CJphZvWfINCA2sbqd/ rbydq5VA+duVTpWA/vi170OQE3YJgD0c1exYoYz3SLPTDzg4xqD7KnZj9nBqORT0 8dCR09EWTkEOqRQqBznfODhtbGhXY2jFaapgQgtvtV296JKEUbnW32ILMbxxRDQV RuO6ZP0AORS0VHD+zlnv5f9MgrvEUm2cYYoC9eJqsk3OLthqnpqJZshVYIWXC6HT C3vtkNBhdQzUs2TkDeLvtlIvskUdR5GSu/BL3GQsa3xdCYce3wO6xZGQVKsRzDhP EUyLnjhp/lMP -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:27 2025 by rpki-client