$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer File: C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer (raw, json) Hash identifier: JExguksVlF3CkDY6ScGt7XqWsqt2SA4l8lyqZXrEV+0= Subject key identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 086B975C2BEBC0D89FB396F48963673CD65B0F8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft caRepository: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Jul 2025 15:35:52 +0000 Certificate not after: Wed 29 Jul 2026 15:40:52 +0000 Subordinate resources: AS: 269704 IP: 45.189.160.0/22 IP: 45.191.104.0/22 IP: 2804:689c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6b:97:5c:2b:eb:c0:d8:9f:b3:96:f4:89:63:67:3c:d6:5b:0f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 15:35:52 2025 GMT Not After : Jul 29 15:40:52 2026 GMT Subject: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:bc:b8:8f:a9:b8:29:1e:1a:bb:ec:e8:fa: a9:aa:f3:5c:56:cb:01:11:65:85:3e:85:66:2b:d2: b5:ad:7b:33:2b:e1:82:dd:5d:03:ce:c8:48:42:87: b0:38:93:87:91:b1:8a:5c:9d:ff:e2:5a:52:da:0d: 77:b2:69:3d:55:bb:a4:79:9d:d2:2e:07:a3:5b:b0: d5:b9:9c:40:33:af:9f:39:09:a2:ac:c4:8f:36:9a: 9e:cb:ab:b5:15:9f:fa:e2:a3:3f:5a:b3:3a:e8:18: 61:66:b4:ab:ae:fa:90:6b:38:ec:8e:45:01:68:33: d8:a2:aa:81:1e:62:00:ba:3a:89:36:06:a6:ee:8f: f1:8a:76:89:be:0f:34:4a:75:0b:d3:1a:f5:67:7e: 94:83:0c:70:20:73:9c:3d:47:df:a1:5d:d1:2c:af: 92:43:ec:01:fe:21:88:db:a8:84:2b:a1:ca:13:a1: ed:16:88:8e:64:20:a9:9c:4e:35:f7:23:0d:2b:16: 77:83:be:5f:43:db:0a:62:2a:4d:0a:61:80:34:43: 2c:88:f0:cb:3f:91:19:8a:90:d2:ed:65:2a:e6:6b: a9:c5:66:f6:41:57:94:8c:fd:a1:ef:14:03:4e:5e: 52:8e:91:98:bd:9a:db:f1:a3:f2:3b:6f:88:c2:41: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.160.0/22 45.191.104.0/22 IPv6: 2804:689c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269704 Signature Algorithm: sha256WithRSAEncryption 0b:51:14:8b:5e:75:fb:4b:ed:71:6b:52:d8:12:1a:dd:21:f6: b0:e6:fe:92:b9:68:fd:37:e7:12:fd:9f:19:81:4d:60:0f:9a: b4:1a:26:0b:b3:47:cb:fc:ac:09:09:a3:9b:70:a1:57:b3:1a: b7:92:29:02:b8:7d:dc:a4:5b:6a:06:bb:c2:6e:a6:a2:ee:f4: af:27:95:08:c8:07:3d:86:eb:4d:6d:a5:72:b6:a4:95:a7:0c: 2c:bf:ed:ad:fe:fd:ad:5c:a1:ab:de:69:56:a9:59:53:1d:1d: a8:8c:39:64:d5:e5:88:b8:04:af:e1:11:96:9c:c0:23:49:bf: 20:54:31:79:7c:aa:ca:24:3c:67:4c:cd:a2:12:cf:ab:45:4e: 78:b3:cd:14:06:91:81:9a:80:01:fc:d1:b6:48:7c:0d:2c:84: 18:cf:15:8e:e7:09:6e:28:b7:10:4a:ce:5a:c8:92:2e:c2:38: f3:c9:ae:cd:0c:92:99:89:9e:bd:c8:1b:28:39:49:a9:7c:95: 13:a5:ad:36:8b:1f:13:d8:f8:68:55:a7:11:0d:06:13:d3:b7: f1:75:bd:8e:34:d2:80:ca:27:24:3a:58:20:36:e1:b7:af:4c: 5e:24:0d:4a:b4:11:7b:70:d6:56:f8:cc:8a:78:9e:fe:bf:66: 97:0b:49:dc -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCGuXXCvrwNifs5b0iWNnPNZbD48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzAxNTM1NTJaFw0yNjA3MjkxNTQwNTJaMDMxMTAvBgNV BAMTKEMyQzg2QzQ3RkMzOUU4MDhGOENGNUMwMEM2MkQ1N0Q4MDg1OEM3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVLy4j6m4KR4au+zo+qmq81xW ywERZYU+hWYr0rWtezMr4YLdXQPOyEhCh7A4k4eRsYpcnf/iWlLaDXeyaT1Vu6R5 ndIuB6NbsNW5nEAzr585CaKsxI82mp7Lq7UVn/rioz9aszroGGFmtKuu+pBrOOyO RQFoM9iiqoEeYgC6Ook2Bqbuj/GKdom+DzRKdQvTGvVnfpSDDHAgc5w9R9+hXdEs r5JD7AH+IYjbqIQrocoToe0WiI5kIKmcTjX3Iw0rFneDvl9D2wpiKk0KYYA0QyyI 8Ms/kRmKkNLtZSrma6nFZvZBV5SM/aHvFANOXlKOkZi9mtvxo/I7b4jCQdZjAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCyGxH/DnoCPjP XADGLVfYCFjHODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1py aWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZY0EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNa cmlrYTFxVVVQa0VmaTVZTlBWcUY1ZDNZamZmV3YyTmdLRVZzZDJIWWNBLzAvQzJD ODZDNDdGQzM5RTgwOEY4Q0Y1QzAwQzYyRDU3RDgwODU4QzczOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb2gAwQCLb9oMA0EAgACMAcDBQAoBGicMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQdiDANBgkqhkiG9w0BAQsFAAOCAQEAC1EUi151 +0vtcWtS2BIa3SH2sOb+krlo/TfnEv2fGYFNYA+atBomC7NHy/ysCQmjm3ChV7Ma t5IpArh93KRbaga7wm6mou70ryeVCMgHPYbrTW2lcraklacMLL/trf79rVyhq95p VqlZUx0dqIw5ZNXliLgEr+ERlpzAI0m/IFQxeXyqyiQ8Z0zNohLPq0VOeLPNFAaR gZqAAfzRtkh8DSyEGM8VjucJbii3EErOWsiSLsI488muzQySmYmevcgbKDlJqXyV E6WtNosfE9j4aFWnEQ0GE9O38XW9jjTSgMonJDpYIDbht69MXiQNSrQRe3DWVvjM inie/r9mlwtJ3A== -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:37 2025 by rpki-client