$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer File: 6B14EA342D84DC5B584613046E346F9A5722784F.cer (raw, json) Hash identifier: Jhyz1qGEWmdfRsCv0hSJuOkGn42Ae5D9TEGkSWpM7U4= Subject key identifier: 6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71702D312D852C19B4B75E096571E16C18446ECF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.mft caRepository: rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 19:32:08 +0000 Certificate not after: Mon 02 Nov 2026 19:37:08 +0000 Subordinate resources: AS: 264567 IP: 138.0.232.0/22 IP: 190.83.40.0 -- 190.83.42.255 IP: 2804:21b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:70:2d:31:2d:85:2c:19:b4:b7:5e:09:65:71:e1:6c:18:44:6e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 19:32:08 2025 GMT Not After : Nov 2 19:37:08 2026 GMT Subject: CN=6B14EA342D84DC5B584613046E346F9A5722784F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:0f:8d:dc:90:85:30:2a:80:4b:19:6d:61: 21:ab:51:f1:a6:94:0b:ab:31:30:af:cc:6b:e5:60: c4:fa:be:2b:21:7b:41:18:ad:68:e5:cf:25:47:01: 12:85:13:02:3d:25:80:9f:2c:94:ab:87:bd:d9:24: e4:be:6b:27:71:c9:2e:3b:28:ad:c3:7c:fa:ac:57: 62:e9:bd:92:cd:55:da:ba:e4:55:61:b7:69:2f:41: 2d:54:fb:9d:61:61:c9:0b:47:65:ab:a5:9f:b7:21: 48:fc:cc:78:9e:5b:66:9f:d6:1c:46:a7:98:55:a8: a7:c9:a3:a1:97:60:a8:32:75:7d:0f:e5:36:7a:a6: 4d:67:0a:d5:db:23:73:c7:b7:88:99:87:0e:35:e6: 3f:c6:b9:4d:ef:10:2a:fd:bd:00:ba:bf:9b:f8:bb: b3:8b:39:69:58:f3:73:db:fb:61:8d:30:a9:78:c0: 9c:0e:5a:77:f6:9f:4c:2e:57:f1:17:3d:80:48:5d: 16:88:52:3a:b8:9c:39:6d:83:4b:95:bf:8b:36:7a: 38:98:b9:40:19:c5:eb:61:70:21:d0:b7:26:4c:91: 97:5a:ba:f3:2a:b2:54:99:55:de:fb:c5:90:e5:ac: 3e:fb:06:9e:c6:53:41:b2:f2:ef:81:5a:39:ed:70: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.232.0/22 190.83.40.0-190.83.42.255 IPv6: 2804:21b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264567 Signature Algorithm: sha256WithRSAEncryption c9:b7:1f:a0:47:57:5f:2b:8c:c1:3e:43:d5:3a:05:ee:22:4c: c5:99:a6:2b:25:95:66:a8:97:46:57:45:ef:95:07:b9:fa:c6: 62:c2:e5:19:bd:59:09:ed:c3:5f:43:e9:eb:d6:95:22:bc:b5: 9f:38:62:11:a3:64:c3:9e:53:26:29:cd:b6:95:98:b3:fd:95: dc:df:5a:49:fb:0a:b8:18:86:b7:00:71:30:0a:f0:23:56:94: b9:a5:3c:f3:fa:eb:dd:05:4f:11:f7:9e:2e:6e:52:bd:c3:35: 48:17:d6:75:a8:fa:d6:cf:d4:88:bc:3b:cd:f4:73:e8:ed:84: 57:02:78:ac:1b:41:b6:ae:81:b5:18:b6:a3:c7:f0:f7:ed:e6: d3:eb:17:9e:b8:6b:63:53:bc:82:43:db:aa:e9:de:38:80:38: e0:67:aa:3f:83:67:a5:26:21:7a:3d:61:d4:e2:4b:3a:f4:95: 0f:c8:48:1f:b7:f7:f4:1b:73:6e:6d:d9:9b:4a:15:4d:f2:14: 3b:a7:d9:87:5e:71:0e:68:67:9a:a9:70:fd:ff:d6:39:6d:92: 52:dd:b5:c7:86:77:90:c0:55:72:21:a6:82:35:e5:75:39:0d: 7e:0b:f5:f5:e9:23:0b:ca:f3:92:44:9e:01:29:83:ce:07:bd: e5:b1:2c:65 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIUcXAtMS2FLBm0t14JZXHhbBhEbs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMxOTMyMDhaFw0yNjExMDIxOTM3MDhaMDMxMTAvBgNV BAMTKDZCMTRFQTM0MkQ4NERDNUI1ODQ2MTMwNDZFMzQ2RjlBNTcyMjc4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKw+N3JCFMCqASxltYSGrUfGm lAurMTCvzGvlYMT6vishe0EYrWjlzyVHARKFEwI9JYCfLJSrh73ZJOS+aydxyS47 KK3DfPqsV2LpvZLNVdq65FVht2kvQS1U+51hYckLR2WrpZ+3IUj8zHieW2af1hxG p5hVqKfJo6GXYKgydX0P5TZ6pk1nCtXbI3PHt4iZhw415j/GuU3vECr9vQC6v5v4 u7OLOWlY83Pb+2GNMKl4wJwOWnf2n0wuV/EXPYBIXRaIUjq4nDltg0uVv4s2ejiY uUAZxethcCHQtyZMkZdauvMqslSZVd77xZDlrD77Bp7GU0Gy8u+BWjntcFpJAgMB AAGjggNIMIIDRDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrFOo0LYTcW1hG EwRuNG+aVyJ4TzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUdO MmFNY3ZYVDc4UzlMQnhSMk56ZnNxVVBNekVFS3A1MnlMQnJicVh6WmQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVH TjJhTWN2WFQ3OFM5TEJ4UjJOemZzcVVQTXpFRUtwNTJ5TEJyYnFYelpkLzAvNkIx NEVBMzQyRDg0REM1QjU4NDYxMzA0NkUzNDZGOUE1NzIyNzg0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEH AQH/BC0wKzAaBAIAATAUAwQCigDoMAwDBAO+UygDBAC+UyowDQQCAAIwBwMFACgE IbAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAl3MA0GCSqGSIb3DQEBCwUAA4IB AQDJtx+gR1dfK4zBPkPVOgXuIkzFmaYrJZVmqJdGV0XvlQe5+sZiwuUZvVkJ7cNf Q+nr1pUivLWfOGIRo2TDnlMmKc22lZiz/ZXc31pJ+wq4GIa3AHEwCvAjVpS5pTzz +uvdBU8R954ublK9wzVIF9Z1qPrWz9SIvDvN9HPo7YRXAnisG0G2roG1GLajx/D3 7ebT6xeeuGtjU7yCQ9uq6d44gDjgZ6o/g2elJiF6PWHU4ks69JUPyEgft/f0G3Nu bdmbShVN8hQ7p9mHXnEOaGeaqXD9/9Y5bZJS3bXHhneQwFVyIaaCNeV1OQ1+C/X1 6SMLyvOSRJ4BKYPOB73lsSxl -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:38 2025 by rpki-client