$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer File: 4B994881FDDD6F476745B62FD48604002A6D30C5.cer (raw, json) Hash identifier: 2OBs0ezK5td6Cq9SbZ7FEwmtpaK0R1H2AUzyFOAH2Vo= Subject key identifier: 4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7510E7F02726B59D7A90EB229798463748819D08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 17:15:59 +0000 Certificate not after: Thu 30 Jul 2026 17:20:59 +0000 Subordinate resources: AS: 263256 IP: 170.247.200.0/22 IP: 198.58.8.0/22 IP: 2804:17e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:10:e7:f0:27:26:b5:9d:7a:90:eb:22:97:98:46:37:48:81:9d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 31 17:15:59 2025 GMT Not After : Jul 30 17:20:59 2026 GMT Subject: CN=4B994881FDDD6F476745B62FD48604002A6D30C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:cd:cc:0b:ce:5d:55:9a:ba:9a:cd:b8:83: 59:44:85:65:9e:68:fa:15:6d:8b:ca:ec:95:02:76: bc:ff:72:e9:01:ba:ed:c7:f6:f1:83:ad:6f:ab:da: e3:57:29:d7:ef:f2:37:88:d8:e9:38:cc:bf:97:5c: 7b:45:9e:5d:a0:4c:1b:7a:95:2e:bb:d6:7e:05:01: eb:8c:ff:6d:cd:29:54:98:f1:10:0c:fc:8d:1e:0b: 84:30:d1:d1:98:6f:3a:55:8c:5d:1e:77:90:b5:50: b8:a0:d5:a0:07:fe:db:c1:e6:55:87:1f:39:b7:85: d2:1f:29:13:01:3e:a6:02:95:15:1f:3d:b7:f9:c8: 53:32:01:b8:5d:c3:fa:df:c3:2b:ce:84:6f:d1:c4: da:ca:3e:31:3a:65:76:fa:39:31:2e:39:ba:35:8c: 9b:8f:59:ed:d2:90:d3:41:b5:c9:01:f2:76:e9:5b: 08:c4:9b:26:4a:f2:c9:b1:ab:3f:c7:62:46:22:ff: 7b:db:bc:19:de:09:bb:a5:bc:59:37:35:12:98:40: 49:62:e4:cb:31:64:25:06:5f:8b:44:97:96:10:e0: 4b:53:8e:cd:6d:44:76:6f:45:b6:79:01:35:02:9d: ad:45:20:65:23:8f:b2:08:e5:22:dc:74:13:62:e2: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.200.0/22 198.58.8.0/22 IPv6: 2804:17e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263256 Signature Algorithm: sha256WithRSAEncryption 4c:7e:8f:34:f6:6c:bb:fd:2d:d5:a6:bb:b8:1a:19:ce:31:5c: b9:6e:6d:9b:6c:ca:7e:ff:2c:02:cc:e0:15:dc:82:c1:5c:f8: d5:de:9c:f1:05:cc:52:1c:09:48:c8:76:e1:86:89:79:32:cf: 4b:ca:94:7f:fc:34:b2:42:5f:6e:af:1e:7b:03:b0:d3:3f:1f: c3:db:77:85:bd:4f:54:72:1c:98:71:29:1c:a2:8b:5d:b9:1c: 6f:9e:c2:aa:a6:52:5f:b6:30:86:c3:b5:19:b3:8f:3a:ce:c0: 5c:97:19:8b:ea:28:6f:a7:2e:85:06:b0:9d:16:80:23:e0:9a: 4c:5d:85:60:ea:5c:b8:90:8c:43:da:95:d9:fe:5e:af:dc:a3: 5c:f6:d9:f1:0f:f9:87:56:6c:e0:bf:64:c0:24:cc:d2:b4:b8: ad:1b:6f:aa:23:24:3c:30:8e:96:6d:1d:94:4f:39:94:ca:fe: 52:c7:87:84:f7:85:21:4c:84:23:d0:82:68:01:f1:22:0d:11: 9b:ca:40:d2:d7:25:6e:b1:6e:27:25:bb:ab:62:ee:a0:eb:71: 98:d8:6c:a7:e9:24:f5:fa:82:d3:dd:d0:b1:bf:78:76:92:eb: 98:db:82:f4:2e:06:f1:e4:a8:81:f9:ee:72:1b:dd:c3:81:ae: 9b:ec:f5:34 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdRDn8CcmtZ16kOsil5hGN0iBnQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzExNzE1NTlaFw0yNjA3MzAxNzIwNTlaMDMxMTAvBgNV BAMTKDRCOTk0ODgxRkRERDZGNDc2NzQ1QjYyRkQ0ODYwNDAwMkE2RDMwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ts3MC85dVZq6ms24g1lEhWWe aPoVbYvK7JUCdrz/cukBuu3H9vGDrW+r2uNXKdfv8jeI2Ok4zL+XXHtFnl2gTBt6 lS671n4FAeuM/23NKVSY8RAM/I0eC4Qw0dGYbzpVjF0ed5C1ULig1aAH/tvB5lWH Hzm3hdIfKRMBPqYClRUfPbf5yFMyAbhdw/rfwyvOhG/RxNrKPjE6ZXb6OTEuObo1 jJuPWe3SkNNBtckB8nbpWwjEmyZK8smxqz/HYkYi/3vbvBneCbulvFk3NRKYQEli 5MsxZCUGX4tEl5YQ4EtTjs1tRHZvRbZ5ATUCna1FIGUjj7II5SLcdBNi4rxtAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLmUiB/d1vR2dF ti/UhgQAKm0wxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3 UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvNEI5 OTQ4ODFGRERENkY0NzY3NDVCNjJGRDQ4NjA0MDAyQTZEMzBDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEATH6PNPZs u/0t1aa7uBoZzjFcuW5tm2zKfv8sAszgFdyCwVz41d6c8QXMUhwJSMh24YaJeTLP S8qUf/w0skJfbq8eewOw0z8fw9t3hb1PVHIcmHEpHKKLXbkcb57CqqZSX7YwhsO1 GbOPOs7AXJcZi+oob6cuhQawnRaAI+CaTF2FYOpcuJCMQ9qV2f5er9yjXPbZ8Q/5 h1Zs4L9kwCTM0rS4rRtvqiMkPDCOlm0dlE85lMr+UseHhPeFIUyEI9CCaAHxIg0R m8pA0tclbrFuJyW7q2LuoOtxmNhsp+kk9fqC093Qsb94dpLrmNuC9C4G8eSogfnu chvdw4Gum+z1NA== -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:36 2025 by rpki-client