$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer File: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer (raw, json) Hash identifier: pTS5fMKj3QlX/1o0ThGQQtFjDHQNaQh2AECoM7jvkhM= Subject key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D4FA7EBC1B562E4F60816C0581AC8BF01002E60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft caRepository: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 09 Jul 2025 20:17:59 +0000 Certificate not after: Wed 08 Jul 2026 20:22:59 +0000 Subordinate resources: AS: 264112 IP: 138.97.20.0/22 IP: 170.83.160.0/22 IP: 2804:22a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4f:a7:eb:c1:b5:62:e4:f6:08:16:c0:58:1a:c8:bf:01:00:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 9 20:17:59 2025 GMT Not After : Jul 8 20:22:59 2026 GMT Subject: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bf:31:55:79:8d:60:4c:b8:ca:7e:6d:7d:fb: 2d:1c:14:5a:c2:39:d0:fb:7d:1c:6d:42:f3:ea:f5: 41:35:9f:c4:c6:e3:04:57:ba:96:d9:e3:c4:05:0b: 85:8b:4c:d6:51:2c:2d:6c:70:b0:77:88:ef:03:d7: ce:94:97:c8:29:13:1e:4f:91:2b:57:1f:e2:8a:83: 83:25:8d:a2:dd:1f:ba:46:be:69:dc:56:24:24:78: 3b:2d:d9:44:7a:9d:3c:47:8d:85:53:71:2b:11:8f: 19:af:79:3e:9f:24:49:d9:14:62:9c:71:79:21:12: 26:6b:88:c0:d1:1b:f0:9b:23:96:25:90:85:2b:01: 0b:e5:7f:a0:84:ab:b6:2f:ec:ba:f6:cb:65:1a:b1: 76:8d:e5:cd:00:a7:4e:e9:57:df:f6:89:24:5e:46: 41:31:49:c4:e2:4c:11:5b:82:7f:08:67:00:fa:cc: d4:e4:d6:31:70:52:d6:ea:b1:10:5f:78:c8:7e:88: 90:02:a0:d5:62:0b:03:6a:e8:67:13:6a:f0:bd:47: ec:2f:f7:5f:55:45:ff:bd:eb:ce:a7:34:8d:48:cb: 0c:3b:52:dd:98:1b:65:ae:ac:35:09:c0:d8:55:f5: 8f:b6:0f:69:2d:38:05:71:3d:ec:27:16:79:10:73: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.20.0/22 170.83.160.0/22 IPv6: 2804:22a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264112 Signature Algorithm: sha256WithRSAEncryption c7:6b:6f:6e:30:85:8e:83:ca:23:d9:0f:a2:ba:14:21:76:31: 26:63:26:1a:59:76:d9:6d:ab:88:eb:9a:f1:ca:f0:ac:37:6f: 3d:c7:62:f8:1c:fa:af:56:c5:ce:62:cf:a8:fb:f6:7e:b8:76: 9b:ec:c3:29:66:b6:0b:bd:5d:4f:c8:cb:df:89:3a:56:76:15: 18:50:69:3c:73:37:a7:8c:80:a9:7a:ac:44:1b:e8:4d:15:33: 7a:cd:b4:bc:29:73:b8:ff:55:83:e2:5b:3f:8f:06:57:56:b9: 67:a4:c0:76:28:f8:7c:2d:37:1f:d2:9b:92:1e:f9:48:62:c5: b9:d7:96:ce:7b:28:0d:4e:4e:01:ba:a4:35:f0:64:82:aa:ef: a4:1c:12:2a:30:95:9b:3d:94:2e:44:bd:01:1c:5f:eb:3d:24: d9:23:6a:e3:3d:d5:3f:ba:26:24:78:cc:e7:d7:f6:35:5b:e0: 12:37:6c:f2:ea:2a:18:8b:1f:4e:1d:7c:ce:f1:0d:52:44:33: 1f:e9:d5:71:d8:6a:97:c5:64:d9:d7:a1:32:60:ed:a2:43:79: 92:da:42:63:72:e1:3a:28:f5:a2:4f:6c:f5:7e:17:1b:86:5d: f7:bb:57:1e:0b:4f:a3:b6:78:bc:15:16:05:a4:85:23:a0:0f: 69:35:6a:31 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfU+n68G1YuT2CBbAWBrIvwEALmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDkyMDE3NTlaFw0yNjA3MDgyMDIyNTlaMDMxMTAvBgNV BAMTKEEwOUZGQjBGREMzNEREMDc5NjFGRURCQjc5RDg1OTNGQzI4MTEyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvzFVeY1gTLjKfm19+y0cFFrC OdD7fRxtQvPq9UE1n8TG4wRXupbZ48QFC4WLTNZRLC1scLB3iO8D186Ul8gpEx5P kStXH+KKg4MljaLdH7pGvmncViQkeDst2UR6nTxHjYVTcSsRjxmveT6fJEnZFGKc cXkhEiZriMDRG/CbI5YlkIUrAQvlf6CEq7Yv7Lr2y2UasXaN5c0Ap07pV9/2iSRe RkExScTiTBFbgn8IZwD6zNTk1jFwUtbqsRBfeMh+iJACoNViCwNq6GcTavC9R+wv 919VRf+9686nNI1Iyww7Ut2YG2WurDUJwNhV9Y+2D2ktOAVxPewnFnkQc2aNAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgn/sP3DTdB5Yf 7bt52Fk/woES8zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE1z TkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRN c05EcGVBaHZ2OHdkaldIZ2o0eUh0dFZEY1ZNOFBYeXlkdHpZVDlpclVQLzAvQTA5 RkZCMEZEQzM0REQwNzk2MUZFREJCNzlEODU5M0ZDMjgxMTJGMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimEUAwQCqlOgMA0EAgACMAcDBQAoBCKgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHsDANBgkqhkiG9w0BAQsFAAOCAQEAx2tvbjCF joPKI9kPoroUIXYxJmMmGll22W2riOua8crwrDdvPcdi+Bz6r1bFzmLPqPv2frh2 m+zDKWa2C71dT8jL34k6VnYVGFBpPHM3p4yAqXqsRBvoTRUzes20vClzuP9Vg+Jb P48GV1a5Z6TAdij4fC03H9Kbkh75SGLFudeWznsoDU5OAbqkNfBkgqrvpBwSKjCV mz2ULkS9ARxf6z0k2SNq4z3VP7omJHjM59f2NVvgEjds8uoqGIsfTh18zvENUkQz H+nVcdhql8Vk2dehMmDtokN5ktpCY3LhOij1ok9s9X4XG4Zd97tXHgtPo7Z4vBUW BaSFI6APaTVqMQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:34:56 2025 by rpki-client