$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer File: BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer (raw, json) Hash identifier: INqoToslHs0/mU75KWJGtynsQpW/q1f/E83RItyUiWY= Subject key identifier: BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 41471D1064B09F4793A5E4938B57CE8D243C314F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft caRepository: rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 02 Sep 2025 18:26:23 +0000 Certificate not after: Tue 01 Sep 2026 18:31:23 +0000 Subordinate resources: AS: 262344 AS: 273772 IP: 177.125.128.0/22 IP: 187.19.0.0/20 IP: 189.113.208.0/21 IP: 2804:810::/32 IP: 2804:8bfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:47:1d:10:64:b0:9f:47:93:a5:e4:93:8b:57:ce:8d:24:3c:31:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 18:26:23 2025 GMT Not After : Sep 1 18:31:23 2026 GMT Subject: CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:2d:02:18:87:0d:85:0e:d6:2b:20:b7:91: ed:84:e1:65:06:e6:f3:a5:4e:38:85:4c:b9:e7:d2: b7:46:e0:13:58:c5:99:35:dd:4d:f2:f1:30:ff:e8: 5f:59:3f:8f:35:18:7d:c8:04:27:f2:b4:b8:4e:01: 01:6f:0e:32:33:07:10:e5:1e:72:13:08:bd:47:98: 46:9c:c2:5b:0e:20:36:5e:99:af:e0:56:50:9f:ce: db:31:aa:66:27:00:bf:44:2c:18:e0:31:fe:84:a0: fc:2d:e1:3c:03:fb:2e:df:6b:1d:84:16:f5:69:0e: c6:b7:30:0e:d9:32:31:6a:db:db:14:70:16:f5:4e: 4e:d3:04:a1:d0:ec:2e:29:59:89:c9:76:a1:a5:76: 35:e0:8a:cc:44:40:76:cb:a0:3e:af:5c:13:d0:b2: 2f:1a:91:23:e4:01:16:d8:0e:a9:98:68:2b:80:17: 43:fd:3d:06:6b:fe:3c:c0:fb:a9:fa:f7:3e:e5:36: 1c:f2:55:34:89:4f:3d:c6:23:73:96:4d:be:45:6d: 1b:fc:cf:8b:2b:af:bf:cc:d1:19:26:7d:d4:f8:eb: c7:0d:b2:92:9c:71:c8:66:c8:13:50:09:39:dc:64: db:37:cc:06:c0:bd:99:34:95:d4:f4:ee:0e:5a:aa: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.125.128.0/22 187.19.0.0/20 189.113.208.0/21 IPv6: 2804:810::/32 2804:8bfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262344 273772 Signature Algorithm: sha256WithRSAEncryption 04:56:cf:7c:32:64:be:14:7e:49:25:87:28:7a:85:30:25:26: a5:77:89:a3:4d:ea:ad:ca:17:dc:87:71:8d:81:92:f8:e5:da: bc:0e:9f:33:e9:03:5d:5d:24:4d:b2:4a:02:26:45:ff:41:30: 1b:17:cc:02:d3:44:ee:20:3a:5a:40:38:45:38:27:bc:e6:dc: fa:42:57:3f:15:8a:3a:57:7d:52:c9:bf:64:36:7a:f4:60:ce: 4d:df:5c:79:1a:38:40:9b:46:2e:ab:39:2b:25:a9:7c:e7:2d: f1:f7:67:b4:65:f7:11:ba:70:2f:1c:7b:11:7c:ac:d4:a4:cd: 97:7f:9c:10:a5:0b:01:d3:64:85:12:c4:63:a5:35:77:7c:2a: 6f:4e:03:ab:b6:1f:37:ff:9d:a6:c4:94:54:3b:0b:5a:05:4f: 5d:49:21:23:11:a8:7a:e7:d9:d0:19:61:00:99:28:bf:68:0a: 8d:5e:78:78:53:05:56:e0:1a:2d:9a:20:4a:4d:eb:f3:b7:aa: ea:0a:4f:f8:e6:d4:94:79:d3:a9:65:be:14:01:e1:06:0f:65: 36:b0:e4:04:b5:72:6c:56:e0:07:f6:3c:bb:a3:b1:6f:ea:5c: 94:e3:fe:3c:b3:e7:53:f3:65:7e:84:ee:e8:2d:4f:d4:85:78: 73:82:81:ff -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUQUcdEGSwn0eTpeSTi1fOjSQ8MU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDIxODI2MjNaFw0yNjA5MDExODMxMjNaMDMxMTAvBgNV BAMTKEJBNTIzMjNDMDRCMEE3MENFOEUzMTkxOUNFNkNDOEJGREEzRDI1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AC0CGIcNhQ7WKyC3ke2E4WUG 5vOlTjiFTLnn0rdG4BNYxZk13U3y8TD/6F9ZP481GH3IBCfytLhOAQFvDjIzBxDl HnITCL1HmEacwlsOIDZema/gVlCfztsxqmYnAL9ELBjgMf6EoPwt4TwD+y7fax2E FvVpDsa3MA7ZMjFq29sUcBb1Tk7TBKHQ7C4pWYnJdqGldjXgisxEQHbLoD6vXBPQ si8akSPkARbYDqmYaCuAF0P9PQZr/jzA+6n69z7lNhzyVTSJTz3GI3OWTb5FbRv8 z4srr7/M0RkmfdT468cNspKccchmyBNQCTncZNs3zAbAvZk0ldT07g5aqiOrAgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6UjI8BLCnDOjj GRnObMi/2j0lcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODZz TXNDMU1DVUNKYW84ZGtHa1c2U2pBQ1pjUXdNWGY4U2VyMVZlanJlRm0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg2 c01zQzFNQ1VDSmFvOGRrR2tXNlNqQUNaY1F3TVhmOFNlcjFWZWpyZUZtLzAvQkE1 MjMyM0MwNEIwQTcwQ0U4RTMxOTE5Q0U2Q0M4QkZEQTNEMjU3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEH AQH/BDIwMDAYBAIAATASAwQCsX2AAwQEuxMAAwQDvXHQMBQEAgACMA4DBQAoBAgQ AwUAKASL/DAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEAMgCAwQtbDANBgkqhkiG 9w0BAQsFAAOCAQEABFbPfDJkvhR+SSWHKHqFMCUmpXeJo03qrcoX3IdxjYGS+OXa vA6fM+kDXV0kTbJKAiZF/0EwGxfMAtNE7iA6WkA4RTgnvObc+kJXPxWKOld9Usm/ ZDZ69GDOTd9ceRo4QJtGLqs5KyWpfOct8fdntGX3EbpwLxx7EXys1KTNl3+cEKUL AdNkhRLEY6U1d3wqb04Dq7YfN/+dpsSUVDsLWgVPXUkhIxGoeufZ0BlhAJkov2gK jV54eFMFVuAaLZogSk3r87eq6gpP+ObUlHnTqWW+FAHhBg9lNrDkBLVybFbgB/Y8 u6Oxb+pclOP+PLPnU/NlfoTu6C1P1IV4c4KB/w== -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:43 2025 by rpki-client