$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer File: BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer (raw, json) Hash identifier: /Owgl0wg9O/84kvVXoVzslBBGRmjk1TDp93YZiJC5g4= Subject key identifier: BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 344F9C5DFCF92782B3B34AB7287E2EA40A4694FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft caRepository: rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 23 Mar 2025 17:09:58 +0000 Certificate not after: Sun 22 Mar 2026 17:14:58 +0000 Subordinate resources: AS: 270293 IP: 201.71.196.0/22 IP: 2804:69d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4f:9c:5d:fc:f9:27:82:b3:b3:4a:b7:28:7e:2e:a4:0a:46:94:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 17:09:58 2025 GMT Not After : Mar 22 17:14:58 2026 GMT Subject: CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:3a:84:c6:82:34:67:03:13:d0:d2:71:3f: 13:ef:21:cf:3e:86:cd:19:3d:5c:6b:5b:9f:2d:db: 74:26:d7:13:cf:b6:e0:27:26:e0:99:58:de:71:7a: 54:75:71:c0:78:98:15:e7:6d:57:8d:34:e3:f9:e2: 52:33:45:36:87:05:37:64:4d:68:0d:35:6d:67:df: 50:f4:36:bd:9f:6f:72:d1:ff:56:3c:9f:b4:48:e4: cf:19:c4:7f:3c:33:ff:85:ad:a3:f8:7d:00:b4:93: bb:c3:37:97:44:95:5c:aa:45:cd:83:43:6f:ab:00: a0:a1:54:07:fc:b2:11:6d:ce:17:37:d0:55:d6:b0: ca:74:bb:b1:b6:58:f8:bc:d8:c6:38:2c:81:6f:c4: 45:61:a8:0f:82:1a:e2:14:e9:b3:cd:61:f5:10:a6: d2:d2:a0:0f:e4:f6:eb:27:d1:4f:6e:8d:14:fd:65: 24:c3:de:88:62:55:d9:a4:a9:76:56:7c:af:ba:92: 20:f1:25:58:12:a5:6f:49:f3:ed:95:08:21:87:43: 37:df:00:81:ee:f0:db:97:bc:02:8d:ec:e5:30:a3: 58:cf:0e:c0:79:fc:26:a3:35:33:7d:72:28:b2:a9: 32:29:36:21:b6:c1:3b:a8:ee:e2:ac:dd:ae:22:ce: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.71.196.0/22 IPv6: 2804:69d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270293 Signature Algorithm: sha256WithRSAEncryption b0:2e:c9:98:df:17:b4:dd:ad:52:b3:5e:ee:d1:70:07:90:6c: 03:1f:40:89:0f:86:5f:24:21:f0:4e:4d:16:a7:1d:7a:00:bb: 83:d4:4d:13:5c:6f:3c:04:0b:56:72:1b:e5:2f:19:57:29:ea: af:e3:ab:7c:87:17:0c:01:b9:4c:d2:3a:fa:6b:a6:f6:0b:59: cc:85:b0:00:b5:95:06:c6:a0:d3:94:0f:e9:c3:d0:63:3b:fd: 17:6a:8a:c9:ba:86:53:64:18:96:d6:23:9e:05:a2:bb:71:15: 18:50:ad:91:60:86:39:1f:4f:2b:d6:c4:7a:83:50:30:6c:a7: 56:9b:13:54:c1:b4:4e:7a:42:a4:bb:7d:70:eb:eb:94:bd:f5: 7e:f5:65:bd:30:55:81:56:ee:1a:60:f4:8b:8b:1b:ca:9a:a5: ca:ca:80:6a:e1:09:11:00:4e:d1:42:da:69:e2:2e:02:13:8d: 43:c1:c2:a2:92:fc:81:5b:2a:fc:09:8d:2d:b7:38:ad:1e:e0: 54:74:ab:92:9d:e9:e8:e2:1e:51:a6:88:15:57:b3:9a:00:0b: 03:e2:07:44:8e:1f:28:0a:4b:b9:03:05:ef:4f:e7:9d:4d:22: 6a:fd:60:f6:9c:4d:0f:51:89:f2:f8:2c:00:de:46:1f:a9:14: c9:be:86:2d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNE+cXfz5J4Kzs0q3KH4upApGlPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjMxNzA5NThaFw0yNjAzMjIxNzE0NThaMDMxMTAvBgNV BAMTKEJBRTc2NTk3MkRBM0Q1MUY3QUI3MEExRDI3NzE2QUY1MEQ5NEM5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvETqExoI0ZwMT0NJxPxPvIc8+ hs0ZPVxrW58t23Qm1xPPtuAnJuCZWN5xelR1ccB4mBXnbVeNNOP54lIzRTaHBTdk TWgNNW1n31D0Nr2fb3LR/1Y8n7RI5M8ZxH88M/+FraP4fQC0k7vDN5dElVyqRc2D Q2+rAKChVAf8shFtzhc30FXWsMp0u7G2WPi82MY4LIFvxEVhqA+CGuIU6bPNYfUQ ptLSoA/k9usn0U9ujRT9ZSTD3ohiVdmkqXZWfK+6kiDxJVgSpW9J8+2VCCGHQzff AIHu8NuXvAKN7OUwo1jPDsB5/CajNTN9ciiyqTIpNiG2wTuo7uKs3a4izjMnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS652WXLaPVH3q3 Ch0ncWr1DZTJSzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHVM cHNiRnRQblFNWkdOREZZcWJIZDFrUktLRnFvSmhMYWU5NTd0UVF0UHgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh1 THBzYkZ0UG5RTVpHTkRGWXFiSGQxa1JLS0Zxb0poTGFlOTU3dFFRdFB4LzEvQkFF NzY1OTcyREEzRDUxRjdBQjcwQTFEMjc3MTZBRjUwRDk0Qzk0Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyUfEMA0EAgACMAcDBQAoBGnQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQf1TANBgkqhkiG9w0BAQsFAAOCAQEAsC7JmN8XtN2tUrNe 7tFwB5BsAx9AiQ+GXyQh8E5NFqcdegC7g9RNE1xvPAQLVnIb5S8ZVynqr+OrfIcX DAG5TNI6+mum9gtZzIWwALWVBsag05QP6cPQYzv9F2qKybqGU2QYltYjngWiu3EV GFCtkWCGOR9PK9bEeoNQMGynVpsTVMG0TnpCpLt9cOvrlL31fvVlvTBVgVbuGmD0 i4sbypqlysqAauEJEQBO0ULaaeIuAhONQ8HCopL8gVsq/AmNLbc4rR7gVHSrkp3p 6OIeUaaIFVezmgALA+IHRI4fKApLuQMF70/nnU0iav1g9pxND1GJ8vgsAN5GH6kU yb6GLQ== -----END CERTIFICATE-----Generated at Wed Nov 5 06:23:58 2025 by rpki-client