$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer File: 698DD058CC44A7087C5B128356D10FB024C7D778.cer (raw, json) Hash identifier: S5yZQJoYeJ8QmZBtgD9Tpws27XObEx/TdpbmsdgUFOM= Subject key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 01D5B719080E68BF0F6B02B394636442597B25B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft caRepository: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 15:04:51 +0000 Certificate not after: Mon 02 Nov 2026 15:09:51 +0000 Subordinate resources: AS: 61797 IP: 138.36.68.0/22 IP: 143.137.0.0/22 IP: 170.246.232.0/22 IP: 200.225.140.0/22 IP: 2804:197c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d5:b7:19:08:0e:68:bf:0f:6b:02:b3:94:63:64:42:59:7b:25:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 15:04:51 2025 GMT Not After : Nov 2 15:09:51 2026 GMT Subject: CN=698DD058CC44A7087C5B128356D10FB024C7D778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:4c:aa:77:3a:75:85:2f:44:8a:80:e0:12: 87:86:39:58:02:4a:e4:e7:f1:a1:f2:14:96:95:b2: 25:38:b2:46:f1:1e:a1:ea:85:a3:e0:7e:db:dd:3c: 69:51:0b:e6:8b:f0:09:50:54:fc:65:b6:00:98:28: a1:8e:13:fa:2d:16:a1:2a:20:8d:b2:39:19:7a:1c: f9:c5:3f:ee:25:b1:72:ff:93:2c:bb:ec:82:0c:d9: b2:3a:ca:91:25:36:ac:f6:f6:8d:22:f1:78:21:93: 17:b2:04:a5:0a:9a:c4:b6:a8:9b:8d:8e:41:a3:c4: 03:9d:08:b4:dd:bc:f5:9c:e1:57:e6:81:63:f3:27: 5b:54:1d:03:e9:57:07:4d:5d:ec:67:fc:0d:29:d5: d9:dc:a3:ec:10:86:f8:d0:34:08:7a:c1:10:8a:37: ab:68:55:ce:d1:82:72:71:f8:c7:25:cc:1f:f2:46: 8c:df:b8:21:4c:c5:4e:b0:4e:30:d3:6a:44:a4:97: 92:37:80:e1:2b:bb:22:3f:7f:20:df:5e:b6:93:24: c2:b9:6a:9c:34:4e:32:62:3c:04:68:c2:c8:99:e7: b2:2f:30:e0:92:60:06:51:92:56:b6:46:d7:af:2b: ad:4d:b7:b7:fd:bc:17:e8:2e:15:d3:73:f6:98:7d: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.68.0/22 143.137.0.0/22 170.246.232.0/22 200.225.140.0/22 IPv6: 2804:197c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61797 Signature Algorithm: sha256WithRSAEncryption 46:15:17:f0:35:33:5f:2b:0c:b4:82:f0:55:c3:91:16:b1:ba: b0:c0:4f:43:22:25:d0:40:5b:76:d6:45:80:4f:40:c2:b5:de: 65:60:4a:70:fd:e1:a7:24:20:85:4d:11:fc:43:2c:d1:1f:27: cd:3a:a3:0f:3f:61:76:01:02:de:2b:37:ad:0d:3b:a8:ff:eb: ea:de:90:82:b9:75:f1:71:da:7f:48:c1:f4:e9:ef:af:80:fa: d2:34:a6:bf:34:2f:6c:e8:9e:da:9b:1a:1f:ff:5d:54:91:04: 69:34:41:af:9b:63:64:1c:17:be:46:d9:4a:66:d0:f9:2e:6c: 76:16:7f:28:77:f1:03:2a:d0:39:2c:ec:f9:11:94:ab:fd:d6: f0:52:bd:0a:64:88:27:24:66:27:18:49:6c:84:47:ec:82:0b: ec:00:01:ba:1b:4e:14:eb:62:38:c7:ac:44:73:d5:68:15:bf: 89:43:b9:d8:75:4b:90:ab:b2:bd:8f:24:79:69:d5:67:fa:a0: 1e:63:3c:bb:a2:78:ec:6a:ed:c2:24:04:d9:e5:88:0b:f5:80: 06:d8:32:80:34:2e:8c:96:4e:a4:c2:87:d9:55:2a:20:b1:58: ce:2c:02:c5:2d:6c:7a:65:c4:59:6c:e5:ca:d7:a2:8b:26:3b: 15:af:a5:7f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAdW3GQgOaL8PawKzlGNkQll7JbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMxNTA0NTFaFw0yNjExMDIxNTA5NTFaMDMxMTAvBgNV BAMTKDY5OEREMDU4Q0M0NEE3MDg3QzVCMTI4MzU2RDEwRkIwMjRDN0Q3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91Uyqdzp1hS9EioDgEoeGOVgC SuTn8aHyFJaVsiU4skbxHqHqhaPgftvdPGlRC+aL8AlQVPxltgCYKKGOE/otFqEq II2yORl6HPnFP+4lsXL/kyy77IIM2bI6ypElNqz29o0i8XghkxeyBKUKmsS2qJuN jkGjxAOdCLTdvPWc4VfmgWPzJ1tUHQPpVwdNXexn/A0p1dnco+wQhvjQNAh6wRCK N6toVc7RgnJx+MclzB/yRozfuCFMxU6wTjDTakSkl5I3gOEruyI/fyDfXraTJMK5 apw0TjJiPARowsiZ57IvMOCSYAZRkla2RtevK61Nt7f9vBfoLhXTc/aYfdVxAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpjdBYzESnCHxb EoNW0Q+wJMfXeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQU45 d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhGSjEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FO OXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAvNjk4 REQwNThDQzQ0QTcwODdDNUIxMjgzNTZEMTBGQjAyNEM3RDc3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCiiREAwQCj4kAAwQCqvboAwQCyOGMMA0EAgACMAcD BQAoBBl8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDxZTANBgkqhkiG9w0BAQsF AAOCAQEARhUX8DUzXysMtILwVcORFrG6sMBPQyIl0EBbdtZFgE9AwrXeZWBKcP3h pyQghU0R/EMs0R8nzTqjDz9hdgEC3is3rQ07qP/r6t6Qgrl18XHaf0jB9Onvr4D6 0jSmvzQvbOie2psaH/9dVJEEaTRBr5tjZBwXvkbZSmbQ+S5sdhZ/KHfxAyrQOSzs +RGUq/3W8FK9CmSIJyRmJxhJbIRH7IIL7AABuhtOFOtiOMesRHPVaBW/iUO52HVL kKuyvY8keWnVZ/qgHmM8u6J47GrtwiQE2eWIC/WABtgygDQujJZOpMKH2VUqILFY ziwCxS1semXEWWzlyteiiyY7Fa+lfw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:53 2025 by rpki-client