$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer File: 25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.cer (raw, json) Hash identifier: Q0Hq71uAwK0uVSKb2AvyYF2ndDCtqb3KpjHBWg2VTeQ= Subject key identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5DFE5ACF21DC9B1191902403B75C14EE89A93CEF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft caRepository: rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 27 Aug 2025 17:41:38 +0000 Certificate not after: Wed 26 Aug 2026 17:46:38 +0000 Subordinate resources: AS: 262453 IP: 170.247.100.0/22 IP: 177.52.240.0/22 IP: 2804:7b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fe:5a:cf:21:dc:9b:11:91:90:24:03:b7:5c:14:ee:89:a9:3c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 27 17:41:38 2025 GMT Not After : Aug 26 17:46:38 2026 GMT Subject: CN=25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:cc:d1:82:e6:c1:a3:d9:ba:0c:2a:17:8f: b3:74:a6:69:1c:94:e0:79:4c:68:df:cb:20:b1:fa: fd:1b:67:b7:4e:83:fa:5f:af:89:e6:03:99:1e:64: d8:3a:7c:95:43:a6:42:28:4e:93:d2:a9:82:f4:5e: b4:8a:79:c5:de:60:5f:ff:a2:c7:0e:09:65:a1:0d: 49:dd:19:43:0b:90:54:24:c3:eb:f5:9e:ed:41:40: 12:27:03:7e:10:ea:80:ec:f8:3b:02:28:8b:30:34: 0f:28:7d:9e:63:3b:6e:e6:a9:35:29:de:24:13:9e: 4d:dd:9d:09:2c:4f:dc:e7:98:a4:a2:0e:e6:d3:1c: 42:79:fd:d8:a7:c9:4d:3f:ea:01:11:71:d0:e7:71: 4d:92:84:4f:34:f0:93:b4:4b:33:c9:86:4b:52:3a: ec:d6:ba:e6:9a:3e:e0:f3:38:4e:c3:71:7f:25:01: 8b:70:3b:39:00:bb:de:10:a8:91:de:90:44:7b:32: 76:b6:27:a7:9f:77:9d:3f:6a:04:f7:ed:c3:6a:2d: 97:40:91:14:fc:c6:d3:0f:d4:08:d6:ac:2b:7b:c7: 16:6f:15:a0:74:05:ec:b7:9e:bd:59:cd:4e:66:fd: ef:85:28:c4:71:e2:b4:28:10:ed:0d:ee:8a:cf:c4: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:C5:4A:79:FB:81:17:C3:BC:74:B6:44:4C:04:A7:DE:AA:5D:49:BB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J6WmMbVbu9Gq2J7MFcW3JCXs6MFK4MYLAZ7BDhB5fkQ9/0/25C54A79FB8117C3BC74B6444C04A7DEAA5D49BB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.100.0/22 177.52.240.0/22 IPv6: 2804:7b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262453 Signature Algorithm: sha256WithRSAEncryption 9a:78:e9:41:fb:26:02:29:39:2a:ae:88:32:51:88:43:5c:ec: 6d:ac:b0:aa:43:73:a8:af:8e:fa:0e:1e:44:d9:95:76:e7:c8: 03:74:82:d9:93:1c:7a:eb:68:fb:d2:fa:13:e3:12:be:78:04: b7:a6:b1:4f:29:e4:f2:4f:dc:db:59:a0:e9:66:29:df:1a:21: ab:dc:43:7a:93:10:a5:f8:f1:2a:40:31:59:bb:1e:bc:66:d2: 84:7f:c8:37:62:39:c8:a8:4e:2c:f0:04:81:e2:93:54:03:18: a3:87:3d:30:97:88:b4:ad:7d:58:65:df:a9:60:60:c6:ad:60: d8:fd:31:63:43:19:9e:b5:d4:2c:2c:03:83:62:97:84:9c:d6: 3d:08:63:46:58:da:61:4d:fd:54:56:a2:b5:18:c5:7b:a5:32: 72:0e:60:42:b8:d4:d4:92:29:ce:45:85:8d:6c:18:f6:67:f2: 5b:92:87:60:e6:69:4b:94:4d:c9:7d:10:40:65:b8:f8:d9:f1: d8:52:85:53:a8:b4:9d:34:ad:a9:f1:61:43:df:f2:14:57:c6: a2:3e:18:92:9c:f4:0c:58:2e:a1:8c:6a:b7:1d:f5:9b:6b:e4: 42:29:0d:ff:74:23:f3:60:d6:16:b6:44:1b:f3:c1:cc:6c:78: 80:4f:8d:49 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXf5azyHcmxGRkCQDt1wU7ompPO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjcxNzQxMzhaFw0yNjA4MjYxNzQ2MzhaMDMxMTAvBgNV BAMTKDI1QzU0QTc5RkI4MTE3QzNCQzc0QjY0NDRDMDRBN0RFQUE1RDQ5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeczRgubBo9m6DCoXj7N0pmkc lOB5TGjfyyCx+v0bZ7dOg/pfr4nmA5keZNg6fJVDpkIoTpPSqYL0XrSKecXeYF// oscOCWWhDUndGUMLkFQkw+v1nu1BQBInA34Q6oDs+DsCKIswNA8ofZ5jO27mqTUp 3iQTnk3dnQksT9znmKSiDubTHEJ5/dinyU0/6gERcdDncU2ShE808JO0SzPJhktS OuzWuuaaPuDzOE7DcX8lAYtwOzkAu94QqJHekER7Mna2J6efd50/agT37cNqLZdA kRT8xtMP1AjWrCt7xxZvFaB0Bey3nr1ZzU5m/e+FKMRx4rQoEO0N7orPxOqpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlxUp5+4EXw7x0 tkRMBKfeql1JuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjZX bU1iVmJ1OUdxMko3TUZjVzNKQ1hzNk1GSzRNWUxBWjdCRGhCNWZrUTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o2 V21NYlZidTlHcTJKN01GY1czSkNYczZNRks0TVlMQVo3QkRoQjVma1E5LzAvMjVD NTRBNzlGQjgxMTdDM0JDNzRCNjQ0NEMwNEE3REVBQTVENDlCQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvdkAwQCsTTwMA0EAgACMAcDBQAoBAewMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBNTANBgkqhkiG9w0BAQsFAAOCAQEAmnjpQfsm Aik5Kq6IMlGIQ1zsbaywqkNzqK+O+g4eRNmVdufIA3SC2ZMceuto+9L6E+MSvngE t6axTynk8k/c21mg6WYp3xohq9xDepMQpfjxKkAxWbsevGbShH/IN2I5yKhOLPAE geKTVAMYo4c9MJeItK19WGXfqWBgxq1g2P0xY0MZnrXULCwDg2KXhJzWPQhjRlja YU39VFaitRjFe6Uycg5gQrjU1JIpzkWFjWwY9mfyW5KHYOZpS5RNyX0QQGW4+Nnx 2FKFU6i0nTStqfFhQ9/yFFfGoj4Ykpz0DFguoYxqtx31m2vkQikN/3Qj82DWFrZE G/PBzGx4gE+NSQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:30 2025 by rpki-client