$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer File: 03D348CD504673CC24A6139BE73024EECBC0A420.cer (raw, json) Hash identifier: Fz3CZbggSLp3wi7YAa8JinDB4BHFku83rll6LBDK/sQ= Subject key identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A18F5D1731034B6CBC7AB719A3A5A66E8F85EF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft caRepository: rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Oct 2025 22:13:13 +0000 Certificate not after: Fri 23 Oct 2026 22:18:13 +0000 Subordinate resources: AS: 271441 IP: 181.233.92.0/24 IP: 181.233.94.0/24 IP: 2804:7b94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:18:f5:d1:73:10:34:b6:cb:c7:ab:71:9a:3a:5a:66:e8:f8:5e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 24 22:13:13 2025 GMT Not After : Oct 23 22:18:13 2026 GMT Subject: CN=03D348CD504673CC24A6139BE73024EECBC0A420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:24:c4:9d:8f:0c:4f:84:f1:b1:44:3e:b3: 7a:6b:dc:54:f4:a7:44:fe:e9:5a:29:80:34:86:56: db:15:92:f0:6e:7d:71:fe:09:91:4c:4c:9d:27:0e: 9f:04:cb:b8:c8:40:64:46:e2:ac:e8:b3:42:30:26: 18:c5:2c:d4:eb:41:91:7b:01:ba:6e:bb:7e:26:f5: f3:5f:a6:12:60:bc:3e:56:64:05:9b:b2:9d:fa:70: a9:73:7e:92:12:00:3f:3f:2a:d4:ac:01:06:ce:7e: 4b:ac:4b:0e:b0:61:17:e2:31:80:94:c8:5a:c5:12: 71:e3:6b:40:34:97:39:af:3e:83:2f:a8:2c:fc:0b: ba:8b:13:73:81:32:2b:32:43:ba:9c:41:5b:0a:d6: 5d:71:40:cc:a3:37:42:4b:19:ad:77:23:36:c4:a7: 96:f5:89:9a:64:87:a7:5d:d6:7d:fd:81:aa:12:ea: 56:56:58:2b:0e:76:ad:6e:af:5a:7a:5c:9d:8b:87: 85:69:89:d1:92:b4:21:e6:6a:73:80:0c:77:17:8c: fa:3d:f6:09:40:0b:f5:2a:16:11:92:84:34:eb:d2: 1b:cc:53:f2:eb:8f:1f:a5:d6:e3:f6:04:d3:64:37: 9a:98:48:1d:c1:c5:2e:30:c6:ee:ef:ed:2d:0d:11: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.92.0/24 181.233.94.0/24 IPv6: 2804:7b94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271441 Signature Algorithm: sha256WithRSAEncryption 85:bb:ba:ef:7a:61:94:5f:9c:3c:1e:c3:bb:9f:9a:0c:92:bb: 2d:3a:32:01:b9:42:dd:95:cf:d2:b2:55:cb:ff:11:e8:be:68: 5f:6d:89:09:26:c2:dc:e9:9c:e4:6f:59:76:db:a9:7e:0d:03: 54:a2:88:d7:a5:8a:d5:47:e5:0c:fa:b8:04:3e:53:5e:81:f2: 1f:36:6d:39:73:ea:bc:76:fc:3b:16:4e:58:5b:f3:50:6d:3f: 10:9e:ea:43:73:22:ef:cc:0f:88:85:38:1d:00:06:93:96:80: 5e:0d:d2:ee:38:d6:32:f9:0f:ec:02:2e:16:38:ed:68:32:79: de:60:8a:2a:06:69:76:8c:cb:f7:98:32:06:67:7f:8b:9a:7e: 70:d8:96:70:8a:17:72:0f:98:a7:94:e1:72:bd:a0:50:d3:0f: 53:9c:e2:6d:cd:d4:63:34:44:df:1c:1b:cd:26:ab:aa:e5:44: 2b:84:a7:dc:63:5e:91:b7:fa:3c:aa:d0:0b:63:cf:00:d1:c5: ff:7f:df:b5:2f:6b:ca:b2:f7:a1:f1:ac:c4:1a:62:cc:30:a6: be:04:fb:b1:13:62:29:ed:0d:1f:ac:e6:79:37:dd:ff:4f:53: 15:d4:3d:62:f0:b1:62:c6:55:7c:d3:6b:f9:5c:85:ef:ae:eb: 0f:be:40:e6 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUehj10XMQNLbLx6txmjpaZuj4XvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjQyMjEzMTNaFw0yNjEwMjMyMjE4MTNaMDMxMTAvBgNV BAMTKDAzRDM0OENENTA0NjczQ0MyNEE2MTM5QkU3MzAyNEVFQ0JDMEE0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtyTEnY8MT4TxsUQ+s3pr3FT0 p0T+6VopgDSGVtsVkvBufXH+CZFMTJ0nDp8Ey7jIQGRG4qzos0IwJhjFLNTrQZF7 Abpuu34m9fNfphJgvD5WZAWbsp36cKlzfpISAD8/KtSsAQbOfkusSw6wYRfiMYCU yFrFEnHja0A0lzmvPoMvqCz8C7qLE3OBMisyQ7qcQVsK1l1xQMyjN0JLGa13IzbE p5b1iZpkh6dd1n39gaoS6lZWWCsOdq1ur1p6XJ2Lh4VpidGStCHmanOADHcXjPo9 9glAC/UqFhGShDTr0hvMU/Lrjx+l1uP2BNNkN5qYSB3BxS4wxu7v7S0NEVE1AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQD00jNUEZzzCSm E5vnMCTuy8CkIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmV5 d2FtQUh0VHNidEZoekxQOEExZXMzdHE5WkxwR2F4U3dtYzhZdzR1aE4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmV5 d2FtQUh0VHNidEZoekxQOEExZXMzdHE5WkxwR2F4U3dtYzhZdzR1aE4vMS8wM0Qz NDhDRDUwNDY3M0NDMjRBNjEzOUJFNzMwMjRFRUNCQzBBNDIwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAC16VwDBAC16V4wDQQCAAIwBwMFACgEe5QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCRRMA0GCSqGSIb3DQEBCwUAA4IBAQCFu7rvemGU X5w8HsO7n5oMkrstOjIBuULdlc/SslXL/xHovmhfbYkJJsLc6Zzkb1l226l+DQNU oojXpYrVR+UM+rgEPlNegfIfNm05c+q8dvw7Fk5YW/NQbT8QnupDcyLvzA+IhTgd AAaTloBeDdLuONYy+Q/sAi4WOO1oMnneYIoqBml2jMv3mDIGZ3+Lmn5w2JZwihdy D5inlOFyvaBQ0w9TnOJtzdRjNETfHBvNJquq5UQrhKfcY16Rt/o8qtALY88A0cX/ f9+1L2vKsveh8azEGmLMMKa+BPuxE2Ip7Q0frOZ5N93/T1MV1D1i8LFixlV802v5 XIXvrusPvkDm -----END CERTIFICATE-----Generated at Mon Nov 3 05:31:32 2025 by rpki-client