$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer File: A238987D0DCDD2E9A9A971D52BB6651198981252.cer (raw, json) Hash identifier: bFSL9Gxg/rnnCDeLfQrpThHUBkVQl2A7JaYxl5vU17g= Subject key identifier: A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 087CDCA04999A914763F9C99E99BD394CBA3DE0B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft caRepository: rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Jul 2025 22:24:39 +0000 Certificate not after: Fri 24 Jul 2026 22:29:39 +0000 Subordinate resources: AS: 267064 IP: 45.228.128.0/22 IP: 2804:4798::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 08 Aug 2025 22:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7c:dc:a0:49:99:a9:14:76:3f:9c:99:e9:9b:d3:94:cb:a3:de:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 25 22:24:39 2025 GMT Not After : Jul 24 22:29:39 2026 GMT Subject: CN=A238987D0DCDD2E9A9A971D52BB6651198981252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:67:98:de:5f:c1:4e:33:e7:15:0b:45:86: bd:0b:f2:9a:3d:ff:dd:93:f0:ae:88:6d:13:a4:7a: d0:33:8e:9f:77:70:6a:12:23:9a:45:19:8d:d9:95: 98:8e:d0:fc:6a:a9:8d:d0:ee:22:8b:7c:8c:68:53: 6a:95:ee:ee:a6:93:57:c4:ec:24:14:a5:a2:8b:4e: 22:af:41:9e:68:19:57:a6:3b:fe:15:5a:ff:c9:3d: 07:32:b9:0a:9a:ef:0d:0c:76:8e:cb:a6:73:e0:6c: a6:37:16:b2:5f:44:84:29:bd:54:40:ad:04:58:1c: d0:8d:f6:94:92:dc:5c:2c:7a:37:13:89:e6:07:e1: 44:07:ae:fb:bb:10:f9:7e:f1:da:f7:fc:8a:2b:5e: 2e:7b:2a:17:20:f3:85:95:df:7a:d6:81:a1:45:9a: b0:b5:80:96:25:0f:e7:ba:30:98:29:b4:47:88:97: 40:fd:cb:bf:52:e3:b4:eb:38:d2:4a:e7:6b:46:4d: 9a:8d:a7:0b:51:4f:db:65:d9:63:53:15:7c:85:79: 48:33:5a:ff:8f:30:71:0a:cb:a6:c7:fa:8d:26:a5: fe:41:56:bf:43:74:74:8c:e7:57:ae:e9:08:98:25: b1:b0:a9:96:8d:0b:50:78:71:fc:aa:3d:73:32:eb: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.128.0/22 IPv6: 2804:4798::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267064 Signature Algorithm: sha256WithRSAEncryption 07:c9:3a:c7:fd:d0:06:ed:97:ce:6e:e6:ab:31:12:82:c6:55: dc:3d:59:52:e2:6c:69:f8:7b:81:e3:f0:5a:bf:8d:18:1d:04: a1:61:3a:5a:72:06:f6:3b:28:09:bf:f2:fc:4f:05:65:c3:8e: 46:2d:90:07:00:a3:75:4f:ea:0a:c3:c3:b2:c7:f5:30:25:2f: ae:75:97:17:da:f6:76:60:98:34:4f:ff:42:8f:1f:21:31:46: 8f:f3:a2:7f:50:82:7c:90:51:97:41:76:21:b1:30:f3:53:d4: 99:e6:58:2d:b6:cd:e3:96:98:89:71:da:ad:23:15:e8:a9:51: bf:37:c3:26:8b:73:80:1e:0b:ac:b8:fa:4d:00:8a:f9:89:9f: c7:e9:6e:16:f5:14:f0:e5:8c:39:2f:1a:69:f9:2e:f7:dd:6e: 8c:09:20:52:a7:bf:a9:97:6c:a2:73:54:66:06:34:1b:cf:7c: fb:2e:db:1b:54:fd:4e:34:03:2a:05:4d:72:25:f6:35:7c:af: f5:c0:f7:79:53:cb:c6:3e:c5:5f:b8:4b:72:5e:33:69:59:be: 38:b7:8a:93:e3:2a:3f:e5:b3:08:62:a2:89:12:ec:35:8d:60: 9c:07:dc:82:a3:f1:f6:59:5b:a1:c3:5b:df:60:7d:de:10:f5: 36:0d:d8:c1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCHzcoEmZqRR2P5yZ6ZvTlMuj3gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjUyMjI0MzlaFw0yNjA3MjQyMjI5MzlaMDMxMTAvBgNV BAMTKEEyMzg5ODdEMERDREQyRTlBOUE5NzFENTJCQjY2NTExOTg5ODEyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2meY3l/BTjPnFQtFhr0L8po9 /92T8K6IbROketAzjp93cGoSI5pFGY3ZlZiO0PxqqY3Q7iKLfIxoU2qV7u6mk1fE 7CQUpaKLTiKvQZ5oGVemO/4VWv/JPQcyuQqa7w0Mdo7LpnPgbKY3FrJfRIQpvVRA rQRYHNCN9pSS3FwsejcTieYH4UQHrvu7EPl+8dr3/IorXi57Khcg84WV33rWgaFF mrC1gJYlD+e6MJgptEeIl0D9y79S47TrONJK52tGTZqNpwtRT9tl2WNTFXyFeUgz Wv+PMHEKy6bH+o0mpf5BVr9DdHSM51eu6QiYJbGwqZaNC1B4cfyqPXMy62iZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiOJh9Dc3S6amp cdUrtmURmJgSUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzFE MXFqUHhzaWZHdVlTcmNmbVZHNm40UnVnYjNuQ3BLb0NIMmt4UmJCbVQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcx RDFxalB4c2lmR3VZU3JjZm1WRzZuNFJ1Z2IzbkNwS29DSDJreFJiQm1ULzAvQTIz ODk4N0QwRENERDJFOUE5QTk3MUQ1MkJCNjY1MTE5ODk4MTI1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeSAMA0EAgACMAcDBQAoBEeYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTODANBgkqhkiG9w0BAQsFAAOCAQEAB8k6x/3QBu2Xzm7m qzESgsZV3D1ZUuJsafh7gePwWr+NGB0EoWE6WnIG9jsoCb/y/E8FZcOORi2QBwCj dU/qCsPDssf1MCUvrnWXF9r2dmCYNE//Qo8fITFGj/Oif1CCfJBRl0F2IbEw81PU meZYLbbN45aYiXHarSMV6KlRvzfDJotzgB4LrLj6TQCK+Ymfx+luFvUU8OWMOS8a afku991ujAkgUqe/qZdsonNUZgY0G898+y7bG1T9TjQDKgVNciX2NXyv9cD3eVPL xj7FX7hLcl4zaVm+OLeKk+MqP+WzCGKiiRLsNY1gnAfcgqPx9llbocNb32B93hD1 Ng3YwQ== -----END CERTIFICATE-----Generated at Fri Aug 8 00:32:09 2025 by rpki-client