$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer File: 97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer (raw, json) Hash identifier: xATkqOymQuqHfYzN4HBlo9CPKvScXVWWcmd0s0FpmFk= Subject key identifier: 97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6E75582429079455E6F89577D7BEC6D0B6F26250 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft caRepository: rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Jul 2025 13:37:13 +0000 Certificate not after: Fri 24 Jul 2026 13:42:13 +0000 Subordinate resources: AS: 274476 IP: 2804:94b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 13:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:75:58:24:29:07:94:55:e6:f8:95:77:d7:be:c6:d0:b6:f2:62:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 25 13:37:13 2025 GMT Not After : Jul 24 13:42:13 2026 GMT Subject: CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:e4:2b:e5:26:ae:95:3f:a2:f6:b3:e6:65: 76:51:c2:4a:e4:17:ed:d5:98:2a:a8:e3:38:ec:24: 22:fd:c3:fe:8e:6e:1d:a0:17:f1:fd:3b:e1:27:91: 35:3e:58:0a:17:61:20:14:aa:0e:a3:cb:72:0c:d2: 15:b0:ba:ef:fe:d9:e6:77:ee:29:d2:74:de:dd:07: 53:d2:4d:31:a2:70:04:2f:3e:22:e7:35:f6:cf:a7: 49:4b:9f:59:33:5f:8d:d4:57:30:3f:94:18:47:64: 74:b6:64:dc:36:7f:30:de:1b:93:c7:86:96:ae:b8: 07:3d:a9:93:4a:58:8e:15:ad:c7:0c:28:69:d0:f7: f5:b3:c0:ab:94:36:27:2d:2b:60:1d:68:7f:1f:2a: 2d:5b:ff:ec:df:fe:38:d0:c5:15:e5:4a:48:5d:ca: d0:fa:16:06:66:af:09:d7:fb:c4:ee:ac:39:21:43: 42:7a:14:8a:d5:c1:55:3e:73:6b:0c:86:4f:21:bc: 1e:23:9e:ae:f4:61:54:75:11:e9:d8:de:93:97:41: d3:5f:5f:07:48:f8:6d:9c:86:f8:16:1e:43:4b:ad: 9f:b9:90:aa:83:ae:8b:15:94:c4:36:31:a8:f9:5e: 36:e0:5f:25:2e:74:94:af:c7:98:94:a3:87:87:06: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274476 Signature Algorithm: sha256WithRSAEncryption 93:b2:a9:7f:33:8b:52:57:26:a9:c5:07:37:c5:a6:67:20:d5: 40:93:a2:e0:15:31:63:03:a2:a3:75:75:15:a8:2c:3c:2f:c3: ff:62:bd:c9:89:d4:42:82:ff:2d:9a:8d:90:58:36:96:73:02: cd:74:0f:be:7c:28:e3:1b:60:13:e2:d2:20:6a:31:37:3a:3e: f1:98:7e:03:92:fe:6c:49:d6:13:c4:dc:ad:78:99:09:6d:3a: 71:91:ab:b5:2e:49:d3:2a:f5:b9:2f:11:62:b5:8a:30:5b:ea: dd:c2:8e:f9:88:25:ea:24:ac:49:20:20:15:06:14:c2:64:07: 8e:4b:89:ee:aa:fd:f0:91:08:b8:ce:0f:db:c3:61:b4:53:6b: f3:4c:11:8d:9c:ba:73:82:29:53:1e:66:c8:75:f3:05:c6:5d: 6f:76:54:ce:6c:17:8c:61:e3:88:3d:f2:2d:e6:62:f0:82:8b: 6a:a4:9d:b9:2a:97:47:40:a1:d9:3f:c1:8c:9c:d3:a5:8b:12: 20:4c:d2:65:8e:88:e6:40:47:fd:27:4c:36:3e:bd:8d:7d:a9: 73:00:2b:32:eb:07:ec:a7:be:c8:c1:27:0a:a4:0d:f4:5f:49: 50:5f:9d:a6:5a:64:fc:27:56:20:84:55:6a:d8:d0:e6:ce:d5: 00:15:ad:2d -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUbnVYJCkHlFXm+JV3177G0LbyYlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjUxMzM3MTNaFw0yNjA3MjQxMzQyMTNaMDMxMTAvBgNV BAMTKDk3Q0NDMkU4RUQyQzQ1Q0JBNkQ1OTBGMTFDQzNCNzgyRTFGREM5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/eQr5SaulT+i9rPmZXZRwkrk F+3VmCqo4zjsJCL9w/6Obh2gF/H9O+EnkTU+WAoXYSAUqg6jy3IM0hWwuu/+2eZ3 7inSdN7dB1PSTTGicAQvPiLnNfbPp0lLn1kzX43UVzA/lBhHZHS2ZNw2fzDeG5PH hpauuAc9qZNKWI4VrccMKGnQ9/WzwKuUNictK2AdaH8fKi1b/+zf/jjQxRXlSkhd ytD6FgZmrwnX+8TurDkhQ0J6FIrVwVU+c2sMhk8hvB4jnq70YVR1EenY3pOXQdNf XwdI+G2chvgWHkNLrZ+5kKqDrosVlMQ2Maj5XjbgXyUudJSvx5iUo4eHBoZDAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXzMLo7SxFy6bV kPEcw7eC4f3JWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjM1 dmFOZFhSMUIxZzM4ckJVZmVmOVN2WEtiVE0yQ0Vra1pxTW5ZYXo0emgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Iz NXZhTmRYUjFCMWczOHJCVWZlZjlTdlhLYlRNMkNFa2tacU1uWWF6NHpoLzAvOTdD Q0MyRThFRDJDNDVDQkE2RDU5MEYxMUNDM0I3ODJFMUZEQzk1OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASUuDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MCwwDQYJKoZIhvcNAQELBQADggEBAJOyqX8zi1JXJqnFBzfFpmcg1UCTouAVMWMD oqN1dRWoLDwvw/9ivcmJ1EKC/y2ajZBYNpZzAs10D758KOMbYBPi0iBqMTc6PvGY fgOS/mxJ1hPE3K14mQltOnGRq7UuSdMq9bkvEWK1ijBb6t3CjvmIJeokrEkgIBUG FMJkB45Lie6q/fCRCLjOD9vDYbRTa/NMEY2cunOCKVMeZsh18wXGXW92VM5sF4xh 44g98i3mYvCCi2qknbkql0dAodk/wYyc06WLEiBM0mWOiOZAR/0nTDY+vY19qXMA KzLrB+ynvsjBJwqkDfRfSVBfnaZaZPwnViCEVWrY0ObO1QAVrS0= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:15 2025 by rpki-client