$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer File: 4930CFE9CF816668BB4D76B60E1D1E09201266DA.cer (raw, json) Hash identifier: eV5uk5eE2quOdc4vjuaOyK6+dCs94mO8FXBikqa9HQ0= Subject key identifier: 49:30:CF:E9:CF:81:66:68:BB:4D:76:B6:0E:1D:1E:09:20:12:66:DA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A7F4DC026F470F9E26787F937E60597AA1CF3C6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.mft caRepository: rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Feb 2025 16:56:32 +0000 Certificate not after: Fri 27 Feb 2026 17:01:32 +0000 Subordinate resources: AS: 266435 IP: 45.187.164.0/22 IP: 170.82.76.0/22 IP: 2804:37c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7f:4d:c0:26:f4:70:f9:e2:67:87:f9:37:e6:05:97:aa:1c:f3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 28 16:56:32 2025 GMT Not After : Feb 27 17:01:32 2026 GMT Subject: CN=4930CFE9CF816668BB4D76B60E1D1E09201266DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:a0:75:15:21:a6:22:c2:e2:33:c7:e5:21: b1:34:0a:f1:b2:16:ee:fa:2a:b1:82:ae:62:20:5b: 4e:0c:b7:6e:69:16:83:d0:f3:5e:9f:fd:28:3d:14: b2:4c:8a:2b:3e:77:83:ec:e2:c7:5c:d9:4a:58:c0: c8:f4:d3:8d:e4:e6:61:1c:e1:94:95:00:32:d3:aa: 7e:81:b7:be:40:a6:27:be:14:87:f5:e1:3b:0e:cf: 6d:27:a3:6a:13:cb:c6:48:b7:ad:dd:c4:49:2c:83: 47:ed:f6:0e:ae:00:dc:ba:30:a5:10:0e:68:a1:49: d7:52:ca:d0:7d:4d:87:40:3c:3d:51:3a:8c:c8:4a: 78:d9:67:7f:47:05:2b:ed:6c:34:28:ca:14:ab:8a: 8b:84:da:30:7c:2b:be:07:e1:4c:d2:d5:50:76:77: 2f:00:9c:39:d0:b3:60:a0:2c:e8:e6:4e:35:bb:6b: ce:47:60:d4:94:d7:ff:cd:11:41:23:e8:e5:df:38: f4:2f:ad:2b:88:fc:bd:79:fc:fa:de:0f:58:74:01: 7b:9c:52:b9:67:0e:1a:47:5a:5f:c1:c4:28:f5:b5: c0:ee:5d:56:f9:75:22:f8:ab:34:a5:f7:b0:e8:4b: 7f:9d:c3:53:03:a9:bb:12:54:3e:dd:c8:63:35:2f: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:30:CF:E9:CF:81:66:68:BB:4D:76:B6:0E:1D:1E:09:20:12:66:DA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/4930CFE9CF816668BB4D76B60E1D1E09201266DA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.187.164.0/22 170.82.76.0/22 IPv6: 2804:37c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266435 Signature Algorithm: sha256WithRSAEncryption d1:5d:7a:49:93:e1:28:74:c3:a8:4e:42:b8:35:0d:72:7d:b6: 8b:41:cd:25:6e:86:7b:c3:6e:f2:f1:0d:09:4d:7d:bc:51:9d: ff:48:39:5f:3a:82:e8:37:09:47:c8:82:e0:e4:15:02:e7:01: 5e:5b:94:61:ef:5d:08:d4:8d:5b:17:5a:52:df:c6:17:68:e3: dd:78:7b:61:5d:97:8a:1d:3a:19:5e:2f:ef:95:fb:ee:3b:4c: 07:00:d7:3a:53:f0:3b:75:c3:e6:89:c1:f8:9f:c2:f4:21:ad: 86:e5:4d:43:90:23:8d:5a:cf:ae:02:fc:9c:94:87:4b:24:0c: 5d:15:b1:23:e3:d6:63:b8:bd:ab:a1:55:02:06:56:ec:0d:a4: 28:f0:d3:3f:1c:2f:ce:05:d1:e2:2f:ff:fc:05:5a:cf:82:59: a4:77:98:7a:83:ee:87:b6:67:fe:82:56:fb:72:15:18:2c:33: a6:1a:2a:bb:ba:f2:90:e5:7f:56:5d:2b:d3:df:7f:84:af:9d: 61:a8:48:6e:b3:d7:0d:d3:22:fa:f7:5f:9d:54:9d:35:fb:23: 05:d7:3a:d4:ce:0f:ef:92:96:7b:07:1d:fd:18:69:14:f8:8f: a1:18:16:ae:08:7f:9b:75:88:03:66:19:a6:2d:e7:05:cd:9e: 58:2b:c8:86 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSn9NwCb0cPniZ4f5N+YFl6oc88YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjgxNjU2MzJaFw0yNjAyMjcxNzAxMzJaMDMxMTAvBgNV BAMTKDQ5MzBDRkU5Q0Y4MTY2NjhCQjRENzZCNjBFMUQxRTA5MjAxMjY2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknaB1FSGmIsLiM8flIbE0CvGy Fu76KrGCrmIgW04Mt25pFoPQ816f/Sg9FLJMiis+d4Ps4sdc2UpYwMj0043k5mEc 4ZSVADLTqn6Bt75Apie+FIf14TsOz20no2oTy8ZIt63dxEksg0ft9g6uANy6MKUQ DmihSddSytB9TYdAPD1ROozISnjZZ39HBSvtbDQoyhSriouE2jB8K74H4UzS1VB2 dy8AnDnQs2CgLOjmTjW7a85HYNSU1//NEUEj6OXfOPQvrSuI/L15/PreD1h0AXuc UrlnDhpHWl/BxCj1tcDuXVb5dSL4qzSl97DoS3+dw1MDqbsSVD7dyGM1Lz5vAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJMM/pz4FmaLtN drYOHR4JIBJm2jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjJr U2dORHp4ZXVWWFdlckMyTGl1WVFUZHQzRzNuR0t2S1hxSmFqakhjN3kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Iy a1NnTkR6eGV1VlhXZXJDMkxpdVlRVGR0M0czbkdLdktYcUphampIYzd5LzAvNDkz MENGRTlDRjgxNjY2OEJCNEQ3NkI2MEUxRDFFMDkyMDEyNjZEQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbukAwQCqlJMMA0EAgACMAcDBQAoBDfEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQwzANBgkqhkiG9w0BAQsFAAOCAQEA0V16SZPh KHTDqE5CuDUNcn22i0HNJW6Ge8Nu8vENCU19vFGd/0g5XzqC6DcJR8iC4OQVAucB XluUYe9dCNSNWxdaUt/GF2jj3Xh7YV2Xih06GV4v75X77jtMBwDXOlPwO3XD5onB +J/C9CGthuVNQ5AjjVrPrgL8nJSHSyQMXRWxI+PWY7i9q6FVAgZW7A2kKPDTPxwv zgXR4i///AVaz4JZpHeYeoPuh7Zn/oJW+3IVGCwzphoqu7rykOV/Vl0r099/hK+d YahIbrPXDdMi+vdfnVSdNfsjBdc61M4P75KWewcd/RhpFPiPoRgWrgh/m3WIA2YZ pi3nBc2eWCvIhg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:01:24 2025 by rpki-client