$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer File: A8A952B21604B5039520204827A8ABA0842CBF36.cer (raw, json) Hash identifier: mPRnapQUgtf2Oy3jWhkH3jW3cPanDz1AaTAaPW0zDXw= Subject key identifier: A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 550A7F274123B5AD9B3B34ACFE74FEB7044B729D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft caRepository: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 20:10:05 +0000 Certificate not after: Wed 29 Apr 2026 20:15:05 +0000 Subordinate resources: AS: 268786 IP: 45.172.168.0/22 IP: 168.196.204.0/22 IP: 2804:5aa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0a:7f:27:41:23:b5:ad:9b:3b:34:ac:fe:74:fe:b7:04:4b:72:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 20:10:05 2025 GMT Not After : Apr 29 20:15:05 2026 GMT Subject: CN=A8A952B21604B5039520204827A8ABA0842CBF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:cd:9f:0c:2a:d1:20:77:fa:53:f9:c4:5a: 80:f4:63:a0:d8:a9:bf:35:ab:ac:49:a5:a3:06:a9: 04:ed:51:1b:34:b0:19:c8:7d:9a:70:fd:69:f5:d5: e6:92:98:0c:13:7d:d6:82:c6:af:4a:30:c8:a2:7b: ef:bd:5f:3f:f9:06:95:42:3c:0c:40:94:f9:8f:5b: f0:b3:9d:ab:0c:28:45:4a:ab:6f:22:61:99:8e:a9: f6:06:85:70:46:d0:e3:5b:5a:ae:d5:87:de:77:f9: ca:e1:d7:e0:f2:11:26:86:62:95:46:54:95:27:d3: 1b:5e:61:7b:06:ee:d4:eb:6e:7d:69:bf:38:5c:ac: fb:e2:db:63:8a:3c:c3:65:4d:7f:60:47:27:b2:4f: ea:74:cf:e1:93:9c:e5:ae:d5:49:45:89:4d:b4:04: a8:80:9d:9e:3a:52:e8:44:f6:5e:3d:9b:07:84:49: e5:ed:bc:62:7d:e2:79:54:aa:55:fb:bc:ae:d5:69: f7:fd:41:58:33:81:25:be:a6:c1:ea:70:4e:29:f7: 57:0b:8c:10:29:9e:07:6d:f8:32:06:92:fb:c9:ab: 22:f9:f9:17:48:8a:f3:cb:47:49:1b:40:bb:e2:7b: 70:97:0d:df:66:a5:8e:60:73:7b:8f:14:05:a4:81: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.168.0/22 168.196.204.0/22 IPv6: 2804:5aa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268786 Signature Algorithm: sha256WithRSAEncryption 33:c1:a5:53:84:97:be:26:1d:ad:f4:f2:4c:f3:07:10:70:0f: f1:aa:88:cd:0e:5f:2e:d7:8c:27:4d:6e:86:17:ef:22:b3:68: c1:25:ed:ab:7c:5a:1d:73:7c:eb:58:db:a0:50:4a:82:12:96: cf:2d:31:f3:8d:9c:d4:b4:58:4a:fd:e1:89:f8:4e:0b:7a:af: a5:f6:6e:0e:ca:61:7a:0b:e4:00:c2:c3:c7:43:ec:61:58:99: ab:ef:ce:ed:ea:3c:21:f3:36:b7:0a:5d:b7:22:b7:fb:7e:f2: 21:7f:02:bb:1b:60:9f:aa:02:fb:38:12:4f:8c:d1:6c:d5:b3: 6f:39:b6:a5:57:c4:d3:24:df:32:fa:cb:47:c5:1f:ab:87:e3: 3d:3b:89:9b:b3:e1:f2:75:28:fa:4f:b8:22:f0:f3:ac:ec:6d: 7b:1e:cc:7d:f9:ec:c3:81:d6:53:68:1b:4b:d7:14:bd:de:3c: 93:7d:27:ee:69:55:b4:63:93:e7:c3:fe:dc:47:46:78:5e:da: 6b:5a:25:6e:21:8f:f1:ad:7e:0f:39:43:04:71:da:eb:e1:76: 68:2f:43:22:2c:48:7e:ee:5f:88:d7:18:98:85:4e:f5:18:b3: de:4b:f1:f3:8e:11:2f:9b:65:25:02:b4:f1:15:bc:8b:90:78: b5:f7:11:34 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVQp/J0Ejta2bOzSs/nT+twRLcp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAyMDEwMDVaFw0yNjA0MjkyMDE1MDVaMDMxMTAvBgNV BAMTKEE4QTk1MkIyMTYwNEI1MDM5NTIwMjA0ODI3QThBQkEwODQyQ0JGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNc2fDCrRIHf6U/nEWoD0Y6DY qb81q6xJpaMGqQTtURs0sBnIfZpw/Wn11eaSmAwTfdaCxq9KMMiie++9Xz/5BpVC PAxAlPmPW/CznasMKEVKq28iYZmOqfYGhXBG0ONbWq7Vh953+crh1+DyESaGYpVG VJUn0xteYXsG7tTrbn1pvzhcrPvi22OKPMNlTX9gRyeyT+p0z+GTnOWu1UlFiU20 BKiAnZ46UuhE9l49mweESeXtvGJ94nlUqlX7vK7Vaff9QVgzgSW+psHqcE4p91cL jBApngdt+DIGkvvJqyL5+RdIivPLR0kbQLvie3CXDd9mpY5gc3uPFAWkgSqFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoqVKyFgS1A5Ug IEgnqKughCy/NjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHgz cXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3aDEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh4 M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAvQThB OTUyQjIxNjA0QjUwMzk1MjAyMDQ4MjdBOEFCQTA4NDJDQkYzNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLayoAwQCqMTMMA0EAgACMAcDBQAoBFqkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZ8jANBgkqhkiG9w0BAQsFAAOCAQEAM8GlU4SX viYdrfTyTPMHEHAP8aqIzQ5fLteMJ01uhhfvIrNowSXtq3xaHXN861jboFBKghKW zy0x842c1LRYSv3hifhOC3qvpfZuDsphegvkAMLDx0PsYViZq+/O7eo8IfM2twpd tyK3+37yIX8Cuxtgn6oC+zgST4zRbNWzbzm2pVfE0yTfMvrLR8Ufq4fjPTuJm7Ph 8nUo+k+4IvDzrOxtex7Mffnsw4HWU2gbS9cUvd48k30n7mlVtGOT58P+3EdGeF7a a1olbiGP8a1+DzlDBHHa6+F2aC9DIixIfu5fiNcYmIVO9Riz3kvx844RL5tlJQK0 8RW8i5B4tfcRNA== -----END CERTIFICATE-----Generated at Wed Nov 5 06:18:52 2025 by rpki-client