$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer File: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer (raw, json) Hash identifier: Dc8pMQHISZCDtecYSDH0wHvG98j765/ydbVE6rZseDw= Subject key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6BD830395F72AA209226F6C5A518CAD917674274 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft caRepository: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 06 Sep 2025 12:26:47 +0000 Certificate not after: Sat 05 Sep 2026 12:31:47 +0000 Subordinate resources: AS: 267353 IP: 45.234.48.0/22 IP: 2804:4c28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:30:39:5f:72:aa:20:92:26:f6:c5:a5:18:ca:d9:17:67:42:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 6 12:26:47 2025 GMT Not After : Sep 5 12:31:47 2026 GMT Subject: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:1e:5c:f3:58:0a:16:54:b1:e0:f2:e1:8e: 24:53:00:cc:3f:84:d8:47:75:27:27:18:c6:72:28: d9:28:4d:7e:5a:b4:8d:4b:87:e6:3d:29:80:ba:92: e7:0e:98:ff:92:f5:5a:bd:6c:0d:16:67:f5:e0:c5: d0:a7:a4:6a:8f:18:6c:40:74:b5:b3:43:80:fe:59: 85:3a:3e:d4:bf:ff:2c:a5:f6:27:fc:94:14:1d:40: 65:af:a1:73:fd:ab:7e:d0:10:6a:fa:30:d9:43:46: 71:ea:b5:11:85:4a:b4:e3:87:23:02:84:5f:5e:08: d9:2f:a1:92:9b:b1:a4:d1:ec:3d:8e:1e:d3:c7:30: 6d:1a:c8:81:a3:d2:19:54:2c:ce:86:51:08:9a:dd: 37:d8:b6:1f:8a:48:fe:bc:39:a0:cc:af:91:12:84: ef:b2:fd:f5:ee:00:99:e0:8f:c5:e4:8d:53:a4:cb: 0d:92:0d:c5:d6:25:3b:83:d0:77:33:73:da:fc:91: e4:0e:f8:08:b7:22:3e:d2:38:fd:16:9b:18:7e:65: 95:a7:9c:d8:9b:3a:74:d0:3a:d7:18:d6:2f:3e:df: 58:6c:17:df:83:e4:87:9b:92:d0:d0:05:bf:55:2c: ab:21:ff:02:3f:6e:66:56:12:5b:f8:bf:1a:c7:78: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.48.0/22 IPv6: 2804:4c28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267353 Signature Algorithm: sha256WithRSAEncryption 32:49:1f:83:a9:1f:0b:27:9e:b4:94:53:97:61:22:b9:7d:a6: 4c:62:c5:27:80:8c:9e:3b:37:b1:36:b8:b9:54:02:d8:6e:67: 64:0a:77:8a:98:d8:63:7e:40:f2:cb:00:dc:3d:f5:87:de:30: 3f:c6:0c:da:af:ec:05:1d:47:6e:cd:52:45:28:5d:4d:e0:7c: a3:cd:f0:a8:f9:0d:14:5c:2d:e8:4a:ca:62:12:75:d2:47:49: 18:8f:a4:6a:6d:83:b5:d3:06:3b:6e:8f:57:a6:15:ce:d5:28: 34:e9:70:50:93:c0:72:96:4e:44:d9:df:fc:09:2d:00:11:82: 6d:85:6c:a7:a6:9c:62:83:c3:cd:ec:a0:28:d9:5b:d6:bf:d7: cb:39:d7:59:be:ee:94:10:94:2b:85:36:1e:16:24:b8:da:b2: b8:f3:3b:c4:88:2e:8d:bd:69:2f:40:70:96:22:67:c7:ba:75: 2a:bb:7a:64:ee:34:ef:3c:f2:23:f8:e9:e3:38:44:4b:6f:17: f6:21:f4:33:fa:c4:0d:18:54:c0:d4:4a:e5:f2:1f:df:a1:f7: 89:e2:61:57:e9:87:94:8b:7a:52:9d:74:64:9d:b0:b3:d1:31: 9c:ab:26:07:48:07:b1:00:c9:2b:2d:0a:a1:c1:5d:00:9e:d7: 21:93:d9:3b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUa9gwOV9yqiCSJvbFpRjK2RdnQnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDYxMjI2NDdaFw0yNjA5MDUxMjMxNDdaMDMxMTAvBgNV BAMTKDc0NDcyMDdFQTQzRTlDRUZEQkE3NEFEMkNENjZGODlDRTZBRjk4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ux5c81gKFlSx4PLhjiRTAMw/ hNhHdScnGMZyKNkoTX5atI1Lh+Y9KYC6kucOmP+S9Vq9bA0WZ/XgxdCnpGqPGGxA dLWzQ4D+WYU6PtS//yyl9if8lBQdQGWvoXP9q37QEGr6MNlDRnHqtRGFSrTjhyMC hF9eCNkvoZKbsaTR7D2OHtPHMG0ayIGj0hlULM6GUQia3TfYth+KSP68OaDMr5ES hO+y/fXuAJngj8XkjVOkyw2SDcXWJTuD0Hczc9r8keQO+Ai3Ij7SOP0Wmxh+ZZWn nNibOnTQOtcY1i8+31hsF9+D5IebktDQBb9VLKsh/wI/bmZWElv4vxrHeOB/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0RyB+pD6c79un StLNZvic5q+YFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlB6 bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3ZjOUUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJQ em03TFI5YWFRYnpGNVlYdEhhd3ZhU25iRGZYdWhhdzlRRUx1dHN2YzlFLzAvNzQ0 NzIwN0VBNDNFOUNFRkRCQTc0QUQyQ0Q2NkY4OUNFNkFGOTgxNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeowMA0EAgACMAcDBQAoBEwoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUWTANBgkqhkiG9w0BAQsFAAOCAQEAMkkfg6kfCyeetJRT l2EiuX2mTGLFJ4CMnjs3sTa4uVQC2G5nZAp3ipjYY35A8ssA3D31h94wP8YM2q/s BR1Hbs1SRShdTeB8o83wqPkNFFwt6ErKYhJ10kdJGI+kam2DtdMGO26PV6YVztUo NOlwUJPAcpZORNnf/AktABGCbYVsp6acYoPDzeygKNlb1r/XyznXWb7ulBCUK4U2 HhYkuNqyuPM7xIgujb1pL0BwliJnx7p1Krt6ZO407zzyI/jp4zhES28X9iH0M/rE DRhUwNRK5fIf36H3ieJhV+mHlIt6Up10ZJ2ws9ExnKsmB0gHsQDJKy0KocFdAJ7X IZPZOw== -----END CERTIFICATE-----Generated at Wed Nov 5 18:30:02 2025 by rpki-client