$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer File: 4D619024AD8A4913FDD5314422929A34F6B4B740.cer (raw, json) Hash identifier: IvS/y/YtIwzCSFm0MQ8LYBMy0oYAZ90W0ZerNMzyM8o= Subject key identifier: 4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C75FBDDE257970FBB8E8B1729E6009205B27DBD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.mft caRepository: rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 12:12:39 +0000 Certificate not after: Tue 03 Nov 2026 12:17:39 +0000 Subordinate resources: AS: 264137 IP: 138.97.96.0/22 IP: 170.0.220.0/22 IP: 2804:2304::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:75:fb:dd:e2:57:97:0f:bb:8e:8b:17:29:e6:00:92:05:b2:7d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 12:12:39 2025 GMT Not After : Nov 3 12:17:39 2026 GMT Subject: CN=4D619024AD8A4913FDD5314422929A34F6B4B740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:de:69:a1:4c:0d:30:5d:05:27:05:dd:7f: 96:be:83:db:b8:b5:d0:0a:59:60:70:56:38:ac:c1: 32:5c:96:76:c0:05:00:7a:2a:d8:b1:31:36:b3:65: f9:4d:5d:17:da:fb:00:5e:30:86:5c:08:e2:08:41: c2:bb:fa:d9:b5:af:25:08:d6:96:0e:73:3c:12:ce: 23:4f:14:a7:aa:85:5c:58:58:4a:57:d1:30:df:e2: 42:3c:3f:05:cb:0f:4c:5b:f4:0e:31:38:7c:ca:68: 6a:d6:c4:64:97:7e:31:9a:5e:c7:cc:92:9e:a8:65: 31:bd:ea:99:6c:13:c5:3d:dc:7a:8c:32:11:03:c1: 3e:33:a4:fa:07:be:b8:3c:05:0e:28:4a:f0:4d:d1: 0f:16:8c:42:64:a1:b5:73:eb:ac:01:05:bd:1f:99: a1:14:91:60:9f:ab:fe:16:36:fb:30:cb:ac:99:97: 5b:70:de:4c:61:e1:1a:93:f1:0f:7c:e5:a9:b3:51: 68:2f:aa:88:b7:20:d6:73:f8:af:a2:9f:96:3c:e8: ff:1a:8c:ec:e7:00:fd:d8:e6:4b:db:aa:98:8f:ff: d2:67:20:09:e6:a1:1c:24:39:69:39:9b:ed:09:38: a7:b0:bf:ad:01:32:91:8e:34:6c:30:a7:0c:67:8a: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.96.0/22 170.0.220.0/22 IPv6: 2804:2304::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264137 Signature Algorithm: sha256WithRSAEncryption 38:34:60:84:8c:05:0a:34:ff:bf:c8:f8:81:ae:b2:c3:44:17: 68:ed:b0:d2:22:b2:51:42:65:65:e6:52:e7:75:10:21:07:64: 0d:3d:0e:47:a8:b3:9e:a4:13:af:02:ea:53:36:4a:01:f9:a2: 26:13:ce:8a:b8:0d:7d:03:20:e0:d1:4d:97:25:50:ec:af:6b: a5:1d:28:cd:b2:2c:95:d1:29:23:5f:dc:e4:ac:6c:f0:0c:4b: 89:30:d3:ca:7b:ee:a7:40:cf:81:a6:49:de:aa:de:5a:91:f9: a9:0e:40:39:47:ed:e1:54:50:74:46:03:02:a7:54:73:bf:84: e9:0d:f9:c2:c3:34:06:f1:19:6a:3f:a0:fb:c4:9c:39:a3:9a: 3b:f1:de:33:07:ec:b3:bd:e8:08:a5:9f:b3:d5:1a:ce:0f:bb: f6:d3:96:57:61:54:2c:95:b9:7d:ff:7b:8b:b0:11:60:4e:49: 16:b5:95:40:48:68:7a:0c:1d:cd:6a:9e:8b:92:62:25:ae:60: 40:08:38:5a:24:5f:98:74:91:87:9a:31:4f:3c:3a:07:27:05: 2b:22:a5:4a:d4:bf:a2:b3:dc:f9:d4:bc:54:03:58:d9:e2:69: ba:7e:9f:98:f3:9d:57:d2:bb:ee:54:19:78:cf:38:9d:72:24: 8a:1a:b4:9b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfHX73eJXlw+7josXKeYAkgWyfb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDQxMjEyMzlaFw0yNjExMDMxMjE3MzlaMDMxMTAvBgNV BAMTKDRENjE5MDI0QUQ4QTQ5MTNGREQ1MzE0NDIyOTI5QTM0RjZCNEI3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHt5poUwNMF0FJwXdf5a+g9u4 tdAKWWBwVjiswTJclnbABQB6KtixMTazZflNXRfa+wBeMIZcCOIIQcK7+tm1ryUI 1pYOczwSziNPFKeqhVxYWEpX0TDf4kI8PwXLD0xb9A4xOHzKaGrWxGSXfjGaXsfM kp6oZTG96plsE8U93HqMMhEDwT4zpPoHvrg8BQ4oSvBN0Q8WjEJkobVz66wBBb0f maEUkWCfq/4WNvswy6yZl1tw3kxh4RqT8Q985amzUWgvqoi3INZz+K+in5Y86P8a jOznAP3Y5kvbqpiP/9JnIAnmoRwkOWk5m+0JOKewv60BMpGONGwwpwxnih7FAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNYZAkrYpJE/3V MUQikpo09rS3QDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRE5R dVhBWFcxN3hSODQxdjlCYzVRbTVGZTZYRkNwQ3hjblllc3FhRm10WXQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RO UXVYQVhXMTd4Ujg0MXY5QmM1UW01RmU2WEZDcEN4Y25ZZXNxYUZtdFl0LzAvNEQ2 MTkwMjRBRDhBNDkxM0ZERDUzMTQ0MjI5MjlBMzRGNkI0Qjc0MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimFgAwQCqgDcMA0EAgACMAcDBQAoBCMEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHyTANBgkqhkiG9w0BAQsFAAOCAQEAODRghIwF CjT/v8j4ga6yw0QXaO2w0iKyUUJlZeZS53UQIQdkDT0OR6iznqQTrwLqUzZKAfmi JhPOirgNfQMg4NFNlyVQ7K9rpR0ozbIsldEpI1/c5Kxs8AxLiTDTynvup0DPgaZJ 3qreWpH5qQ5AOUft4VRQdEYDAqdUc7+E6Q35wsM0BvEZaj+g+8ScOaOaO/HeMwfs s73oCKWfs9Uazg+79tOWV2FULJW5ff97i7ARYE5JFrWVQEhoegwdzWqei5JiJa5g QAg4WiRfmHSRh5oxTzw6BycFKyKlStS/orPc+dS8VANY2eJpun6fmPOdV9K77lQZ eM84nXIkihq0mw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:54 2025 by rpki-client