$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer File: E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer (raw, json) Hash identifier: Mk0omPeb8egnLK+GuaphMbnA/CB1jdipFqfjf8bjTac= Subject key identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36BAFEBA2797C607546CA084EB13893F724F3AB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft caRepository: rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 15:02:33 +0000 Certificate not after: Thu 06 Aug 2026 15:07:33 +0000 Subordinate resources: AS: 52862 AS: 266246 IP: 45.6.204.0/22 IP: 45.171.172.0/22 IP: 131.72.140.0/22 IP: 177.107.64.0/20 IP: 177.128.124.0/22 IP: 186.195.224.0/20 IP: 187.111.208.0/20 IP: 200.225.120.0/22 IP: 2804:db0::/32 IP: 2804:1918::/32 IP: 2804:3cfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 16:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ba:fe:ba:27:97:c6:07:54:6c:a0:84:eb:13:89:3f:72:4f:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 7 15:02:33 2025 GMT Not After : Aug 6 15:07:33 2026 GMT Subject: CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:73:23:20:47:a4:c6:0a:43:ec:43:3a:72: 49:d9:9d:3d:3c:75:6f:33:db:b3:69:90:79:44:98: e6:df:1f:dd:ca:b9:58:2c:de:1e:6e:34:5e:56:38: f3:c3:af:14:63:5f:ca:22:ec:ff:e6:91:62:39:d8: e8:5c:66:5f:31:9b:f8:b4:d9:5d:a3:39:dd:36:6c: 71:8d:43:f6:4f:98:79:be:19:79:dc:e6:77:2d:60: 98:67:9d:0d:3f:d6:74:d3:a9:ab:e2:7c:2d:eb:48: 01:48:49:a9:f0:bc:cb:bc:f9:b7:c8:27:f9:a3:fd: aa:51:91:76:0c:6e:18:12:b1:c9:42:c7:22:1f:c1: df:27:58:64:3e:24:b2:32:79:4e:59:7a:7a:37:c2: af:bd:67:02:eb:93:42:59:53:a2:2a:44:a2:3f:03: 28:da:74:a6:9a:a6:1a:d8:25:9c:a9:29:d2:d8:9f: d5:fd:b2:53:c7:13:42:60:45:33:7a:d0:99:56:4a: 94:35:d0:cb:32:a3:2e:bd:64:28:78:c2:9b:e7:1b: 88:9d:fb:d1:d3:2a:a0:d6:b8:a3:da:cf:20:ea:68: af:19:0d:39:43:75:aa:46:e4:75:9f:3c:91:63:8c: 74:20:f6:70:2c:f7:e7:e7:c1:e1:b9:92:36:23:8f: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.204.0/22 45.171.172.0/22 131.72.140.0/22 177.107.64.0/20 177.128.124.0/22 186.195.224.0/20 187.111.208.0/20 200.225.120.0/22 IPv6: 2804:db0::/32 2804:1918::/32 2804:3cfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52862 266246 Signature Algorithm: sha256WithRSAEncryption da:d1:88:21:dd:e3:99:a8:e5:33:fa:3b:a3:70:dd:b8:ca:a1: 0a:38:6d:c8:fd:d7:59:15:92:ef:3c:b0:dd:a5:77:19:1f:d5: 5c:d1:46:47:54:78:87:90:47:14:13:38:12:15:5b:82:0a:25: d6:68:6b:dc:42:8b:5f:9f:c2:48:44:f7:94:e9:09:b9:3e:27: 6f:2f:91:18:85:a2:cf:ac:5b:d8:08:6b:96:27:d0:d1:f3:49: f3:0d:51:49:86:65:d9:32:12:a0:c5:02:9f:7d:e8:6f:10:d3: d2:28:2c:a2:44:e8:44:21:59:42:9d:46:7e:d3:c0:d5:08:9a: 25:8a:63:4b:91:f9:18:73:5b:bf:30:58:78:26:b7:e1:fb:59: 9b:52:6e:81:72:2f:b0:2b:cf:fc:be:da:93:c7:3e:28:cc:35: 48:ed:ea:37:87:6d:bf:80:61:ba:c0:88:45:0d:2a:fa:ab:da: 6a:ab:3d:f8:e5:1e:37:de:3d:c7:f0:96:dd:03:d1:dd:15:92: bb:07:84:2a:ce:30:20:95:a5:18:9c:7e:6a:d6:f0:c2:a1:a9: 21:90:05:23:40:7f:41:4d:ed:58:c8:d3:e8:7b:75:36:e1:1b: 07:08:4a:65:1f:f5:c7:b9:69:ae:dd:a9:62:a5:08:8d:fa:ee: 3e:d3:52:b5 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUNrr+uieXxgdUbKCE6xOJP3JPOrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDcxNTAyMzNaFw0yNjA4MDYxNTA3MzNaMDMxMTAvBgNV BAMTKEU0RDIyODdBNTkyRDhCN0M2MTQ5RkNBMDIwQzJCRTY1MEQzMjdEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUXMjIEekxgpD7EM6cknZnT08 dW8z27NpkHlEmObfH93KuVgs3h5uNF5WOPPDrxRjX8oi7P/mkWI52OhcZl8xm/i0 2V2jOd02bHGNQ/ZPmHm+GXnc5nctYJhnnQ0/1nTTqavifC3rSAFISanwvMu8+bfI J/mj/apRkXYMbhgSsclCxyIfwd8nWGQ+JLIyeU5Zeno3wq+9ZwLrk0JZU6IqRKI/ AyjadKaaphrYJZypKdLYn9X9slPHE0JgRTN60JlWSpQ10Msyoy69ZCh4wpvnG4id +9HTKqDWuKPazyDqaK8ZDTlDdapG5HWfPJFjjHQg9nAs9+fnweG5kjYjjx59AgMB AAGjggN3MIIDczAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTk0ih6WS2LfGFJ /KAgwr5lDTJ9vDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODFn bVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQNGIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgx Z21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAvRTRE MjI4N0E1OTJEOEI3QzYxNDlGQ0EwMjBDMkJFNjUwRDMyN0RCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEH AQH/BFcwVTA2BAIAATAwAwQCLQbMAwQCLausAwQCg0iMAwQEsWtAAwQCsYB8AwQE usPgAwQEu2/QAwQCyOF4MBsEAgACMBUDBQAoBA2wAwUAKAQZGAMFACgEPPwwHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDAM5+AgMEEAYwDQYJKoZIhvcNAQELBQADggEB ANrRiCHd45mo5TP6O6Nw3bjKoQo4bcj911kVku88sN2ldxkf1VzRRkdUeIeQRxQT OBIVW4IKJdZoa9xCi1+fwkhE95TpCbk+J28vkRiFos+sW9gIa5Yn0NHzSfMNUUmG ZdkyEqDFAp996G8Q09IoLKJE6EQhWUKdRn7TwNUImiWKY0uR+RhzW78wWHgmt+H7 WZtSboFyL7Arz/y+2pPHPijMNUjt6jeHbb+AYbrAiEUNKvqr2mqrPfjlHjfePcfw lt0D0d0VkrsHhCrOMCCVpRicfmrW8MKhqSGQBSNAf0FN7VjI0+h7dTbhGwcISmUf 9ce5aa7dqWKlCI367j7TUrU= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:22 2025 by rpki-client