$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.cer File: 974965D6034789E12B9ECD4E4D0FF230C71D1E3B.cer (raw, json) Hash identifier: Zq95w8NJUU11AEWCpoMH+De6daYqWYrD6Lc+RurIKpg= Subject key identifier: 97:49:65:D6:03:47:89:E1:2B:9E:CD:4E:4D:0F:F2:30:C7:1D:1E:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 45C3B2A31D63E73D36E0A63EE3402CBF9BE954C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.mft caRepository: rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Jul 2025 13:27:37 +0000 Certificate not after: Tue 21 Jul 2026 13:32:37 +0000 Subordinate resources: AS: 268738 IP: 45.71.28.0/22 IP: 45.171.44.0/22 IP: 2804:59fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 16:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c3:b2:a3:1d:63:e7:3d:36:e0:a6:3e:e3:40:2c:bf:9b:e9:54:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 13:27:37 2025 GMT Not After : Jul 21 13:32:37 2026 GMT Subject: CN=974965D6034789E12B9ECD4E4D0FF230C71D1E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:c0:ff:ab:25:73:ee:be:51:76:f2:43:ae: 49:c8:27:ee:f7:57:88:f1:df:45:14:92:aa:72:92: 6e:32:51:9e:a3:0c:8d:9f:20:ca:98:be:39:9f:84: 48:c8:45:17:5a:b4:45:b9:51:e9:e0:b4:b4:31:73: a6:82:e3:06:36:90:6a:68:81:1a:c5:aa:80:c5:1f: 10:05:3e:08:1b:33:2d:58:51:92:98:53:04:84:20: 9a:88:d7:24:43:9f:16:2e:b3:2d:ba:97:3c:46:30: 60:09:2d:46:8d:6d:84:17:77:93:ba:fd:df:af:46: 91:d0:22:fe:48:b9:3d:fd:cd:d9:ec:e9:c1:3f:48: 7f:6a:b7:de:5c:1f:3e:99:1a:aa:33:27:9d:c9:cd: 6b:90:aa:d3:be:a0:32:f6:f4:e1:48:0a:5f:ce:3b: 2d:e0:0d:8e:27:e0:46:0f:0e:7e:46:c6:bb:b7:e4: 6d:df:3f:1f:3e:7e:c6:cb:bd:11:c7:c6:47:6a:f5: cc:b7:24:7c:c0:fd:23:a8:c0:35:5a:db:1c:73:b5: 36:62:a1:7f:d3:b4:d3:70:f8:fa:9e:b0:5b:70:d3: 5c:15:21:31:13:a8:75:44:de:a7:d6:b9:27:a1:2d: a0:07:72:6d:c5:d8:8e:5c:7c:ed:ac:8b:96:c3:d1: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:49:65:D6:03:47:89:E1:2B:9E:CD:4E:4D:0F:F2:30:C7:1D:1E:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/974965D6034789E12B9ECD4E4D0FF230C71D1E3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.28.0/22 45.171.44.0/22 IPv6: 2804:59fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268738 Signature Algorithm: sha256WithRSAEncryption ad:e7:bd:54:c6:d1:31:b8:11:95:17:9e:98:06:c8:ca:69:58: 36:0e:06:04:78:fc:da:93:cb:af:a8:e4:67:41:6d:e5:d4:43: 03:9d:b2:63:2d:fb:65:e5:3b:3d:17:2e:03:ed:2c:c6:78:6b: de:00:0e:29:dd:22:3f:78:39:04:e9:36:ff:1c:19:34:7d:e8: 37:f2:d5:9f:f2:ed:18:31:89:2e:81:79:de:f6:ad:50:f8:ee: b2:f3:13:b4:52:aa:e2:22:5f:02:66:1b:ca:88:f4:f7:96:5a: a8:2b:45:6d:90:b0:aa:3d:17:24:f6:18:83:04:c0:cf:90:2b: dc:9b:ed:42:30:e8:aa:fe:99:01:9e:56:da:ac:ca:61:1b:04: 3f:34:bc:e3:a5:51:2c:02:80:45:13:ca:61:d0:1d:47:9d:72: 20:9e:3c:79:00:0d:65:bf:e5:78:de:ba:53:a2:8a:65:e7:15: 5e:be:91:ec:0c:fb:72:18:43:0b:e1:30:81:bb:cd:e7:85:17: 7c:a1:5c:81:2f:91:d2:b5:50:99:08:f0:d8:c5:ee:c1:04:1c: f1:09:39:87:cc:4c:98:b7:2b:90:6d:b9:ef:87:35:19:49:c3: f9:6a:56:7e:40:50:8d:ac:1f:0e:4c:47:4a:ab:32:85:b9:e1: 4a:28:40:98 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIURcOyox1j5z024KY+40Asv5vpVMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjIxMzI3MzdaFw0yNjA3MjExMzMyMzdaMDMxMTAvBgNV BAMTKDk3NDk2NUQ2MDM0Nzg5RTEyQjlFQ0Q0RTREMEZGMjMwQzcxRDFFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNsD/qyVz7r5RdvJDrknIJ+73 V4jx30UUkqpykm4yUZ6jDI2fIMqYvjmfhEjIRRdatEW5UengtLQxc6aC4wY2kGpo gRrFqoDFHxAFPggbMy1YUZKYUwSEIJqI1yRDnxYusy26lzxGMGAJLUaNbYQXd5O6 /d+vRpHQIv5IuT39zdns6cE/SH9qt95cHz6ZGqozJ53JzWuQqtO+oDL29OFICl/O Oy3gDY4n4EYPDn5Gxru35G3fPx8+fsbLvRHHxkdq9cy3JHzA/SOowDVa2xxztTZi oX/TtNNw+PqesFtw01wVITETqHVE3qfWuSehLaAHcm3F2I5cfO2si5bD0bctAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXSWXWA0eJ4Sue zU5ND/Iwxx0eOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcVlj cTRjcnpmMWRBcnluYkF3UjdiVEdGdTd3ajYzcUNybXJHNmN1WlVCZC8wLzk3NDk2 NUQ2MDM0Nzg5RTEyQjlFQ0Q0RTREMEZGMjMwQzcxRDFFM0IubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAi1HHAMEAi2rLDANBAIAAjAHAwUAKARZ/DAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEGcIwDQYJKoZIhvcNAQELBQADggEBAK3nvVTG0TG4 EZUXnpgGyMppWDYOBgR4/NqTy6+o5GdBbeXUQwOdsmMt+2XlOz0XLgPtLMZ4a94A DindIj94OQTpNv8cGTR96Dfy1Z/y7RgxiS6Bed72rVD47rLzE7RSquIiXwJmG8qI 9PeWWqgrRW2QsKo9FyT2GIMEwM+QK9yb7UIw6Kr+mQGeVtqsymEbBD80vOOlUSwC gEUTymHQHUedciCePHkADWW/5XjeulOiimXnFV6+kewM+3IYQwvhMIG7zeeFF3yh XIEvkdK1UJkI8NjF7sEEHPEJOYfMTJi3K5Btue+HNRlJw/lqVn5AUI2sHw5MR0qr MoW54UooQJg= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:55 2025 by rpki-client