$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer File: E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer (raw, json) Hash identifier: ucMpWQ6H+pKIi+FsYSKHMET4czxY3nYDump43xPlj/M= Subject key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2F47275D7741EFF01C190C7E759C2CF45B19FC72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft caRepository: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 14:20:20 +0000 Certificate not after: Fri 25 Sep 2026 14:25:20 +0000 Subordinate resources: IP: 138.118.172.0/22 IP: 177.52.160.0/22 IP: 187.102.244.0/22 IP: 2804:b44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Oct 2025 12:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:47:27:5d:77:41:ef:f0:1c:19:0c:7e:75:9c:2c:f4:5b:19:fc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 26 14:20:20 2025 GMT Not After : Sep 25 14:25:20 2026 GMT Subject: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:9a:ff:f7:fd:d4:d8:69:fa:97:ce:92:0c: c5:25:02:30:86:2d:80:f7:ed:fb:c3:23:08:54:42: 93:16:09:83:26:7a:f8:1c:57:71:7f:eb:b3:11:07: 90:a8:5f:ab:c4:e3:1f:68:88:6a:b6:4c:3a:45:f0: a4:1b:cf:5f:9a:1c:f7:de:b8:49:fe:62:4b:47:5c: 70:e7:7a:b5:34:f7:bb:8d:07:24:9b:25:ec:c7:04: d6:5e:6b:ec:ef:f5:85:d9:dd:5f:e8:b5:67:72:5d: 06:fd:f1:6a:63:80:47:09:b5:1b:76:34:34:c2:e3: d2:73:40:bb:a8:a5:00:66:f6:53:64:a6:2a:a5:b3: 4b:53:6e:97:48:1b:3e:06:62:32:c1:fe:0d:14:a6: 62:a4:0a:77:1b:87:39:69:51:8a:7f:cf:29:10:1a: bf:c3:39:f2:bd:12:5a:52:3d:f4:ea:b9:28:46:12: 34:8c:e9:0a:33:52:c7:d7:a6:22:9c:b4:fa:bb:b2: 90:32:4c:d2:13:d5:dc:16:e0:b8:75:ec:e8:87:48: d0:10:26:43:1f:de:6a:df:61:7b:78:db:ec:41:9c: 69:00:62:9b:0d:ba:01:76:ff:ec:48:a0:42:ca:22: 00:c8:84:53:79:0a:65:1d:71:6d:d6:37:66:e5:cc: 20:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.172.0/22 177.52.160.0/22 187.102.244.0/22 IPv6: 2804:b44::/32 Signature Algorithm: sha256WithRSAEncryption d3:42:61:f5:6d:b7:09:84:4d:ae:89:70:32:57:25:ec:08:fb: a5:63:88:75:2b:62:15:ad:98:ee:47:50:32:93:4b:34:b4:0e: 9f:db:b7:2e:cd:55:c7:71:3e:a1:ab:db:65:9b:b6:78:db:a2: 29:51:46:8c:f4:e8:79:0d:5b:04:f8:25:60:12:4e:2a:6c:9e: 53:2c:e8:5a:5e:55:06:04:89:bb:69:c7:c6:17:10:14:7a:c6: 4d:90:e8:8a:d7:30:0b:4c:54:09:3e:16:92:1b:1e:ed:79:7d: 04:2c:fa:6d:f6:4c:ba:bd:fc:18:b1:20:61:36:5e:0e:16:57: f6:95:1f:e3:8e:8c:fd:a8:95:ab:6f:47:b0:92:37:67:00:b8: 9f:e4:a6:2d:80:56:b5:6c:55:7b:9d:d5:3e:26:cf:79:79:9f: 20:42:08:a8:83:23:10:62:ca:99:9a:a3:47:e7:5b:62:b2:0d: 06:90:a2:93:e2:82:a4:ab:5b:2c:cc:e3:c8:ce:c5:89:97:51: 5a:48:eb:91:bd:02:5f:40:18:b3:da:90:53:df:20:f7:d7:3c: 6e:1f:dc:5c:1a:ab:18:d3:c7:d4:8d:d2:75:1b:a5:13:58:03: 84:9d:03:3e:2c:72:f3:c6:95:1c:33:b5:c7:90:a7:07:1e:4c: 51:04:fa:73 -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgIUL0cnXXdB7/AcGQx+dZws9FsZ/HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjYxNDIwMjBaFw0yNjA5MjUxNDI1MjBaMDMxMTAvBgNV BAMTKEU3MTNENjUwRjFDQjRCNjMzNzdBRDlFNzY2MjhGQjIwQThFNzBCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOpr/9/3U2Gn6l86SDMUlAjCG LYD37fvDIwhUQpMWCYMmevgcV3F/67MRB5CoX6vE4x9oiGq2TDpF8KQbz1+aHPfe uEn+YktHXHDnerU097uNBySbJezHBNZea+zv9YXZ3V/otWdyXQb98WpjgEcJtRt2 NDTC49JzQLuopQBm9lNkpiqls0tTbpdIGz4GYjLB/g0UpmKkCncbhzlpUYp/zykQ Gr/DOfK9ElpSPfTquShGEjSM6QozUsfXpiKctPq7spAyTNIT1dwW4Lh17OiHSNAQ JkMf3mrfYXt42+xBnGkAYpsNugF2/+xIoELKIgDIhFN5CmUdcW3WN2blzCBLAgMB AAGjggMoMIIDJDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnE9ZQ8ctLYzd6 2edmKPsgqOcLwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vYTFT d2lDYjhxUG9iVW1hbllycVlqTlJvQ1JzaHd1aW1XaDJ0MTc2NEdmeS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vYTFT d2lDYjhxUG9iVW1hbllycVlqTlJvQ1JzaHd1aW1XaDJ0MTc2NEdmeS8wL0U3MTNE NjUwRjFDQjRCNjMzNzdBRDlFNzY2MjhGQjIwQThFNzBCQzEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB /wQrMCkwGAQCAAEwEgMEAop2rAMEArE0oAMEArtm9DANBAIAAjAHAwUAKAQLRDAN BgkqhkiG9w0BAQsFAAOCAQEA00Jh9W23CYRNrolwMlcl7Aj7pWOIdStiFa2Y7kdQ MpNLNLQOn9u3Ls1Vx3E+oavbZZu2eNuiKVFGjPToeQ1bBPglYBJOKmyeUyzoWl5V BgSJu2nHxhcQFHrGTZDoitcwC0xUCT4Wkhse7Xl9BCz6bfZMur38GLEgYTZeDhZX 9pUf446M/aiVq29HsJI3ZwC4n+SmLYBWtWxVe53VPibPeXmfIEIIqIMjEGLKmZqj R+dbYrINBpCik+KCpKtbLMzjyM7FiZdRWkjrkb0CX0AYs9qQU98g99c8bh/cXBqr GNPH1I3SdRulE1gDhJ0DPixy88aVHDO1x5CnBx5MUQT6cw== -----END CERTIFICATE-----Generated at Thu Oct 9 10:57:05 2025 by rpki-client