$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer (raw, json) Hash identifier: Gh6dhwiGcmyHOMSJ/JOz/Qf0lCylENViYnmnB/Ue4a8= Subject key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AA3D363053AFF44B942E4CFE04BE014FFA60B61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft caRepository: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 24 Sep 2025 19:35:39 +0000 Certificate not after: Wed 23 Sep 2026 19:40:39 +0000 Subordinate resources: AS: 61756 IP: 131.100.72.0/22 IP: 2804:1be8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:d3:63:05:3a:ff:44:b9:42:e4:cf:e0:4b:e0:14:ff:a6:0b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 24 19:35:39 2025 GMT Not After : Sep 23 19:40:39 2026 GMT Subject: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:e5:d4:bc:8c:23:7a:98:00:b9:47:21:f1: bb:5c:03:bf:f5:a9:99:a7:65:e8:85:3c:0e:2a:83: b7:fd:96:ea:84:53:da:83:d4:3d:cb:d3:46:aa:2c: ab:3b:16:08:f0:22:3e:54:03:67:20:be:e0:3a:42: 00:24:07:44:f2:36:d5:86:44:f2:c6:28:c8:0b:c0: c3:20:5f:a8:8e:e7:e2:5c:2c:03:d5:aa:01:02:23: df:2b:b9:b1:87:e6:5c:b8:cb:90:81:b3:45:20:95: 4c:cb:c6:21:c0:f6:5e:30:97:24:1a:20:ad:9f:8c: 45:19:c3:c0:e2:67:9d:7c:a5:bc:ce:69:b3:f2:ea: ce:fe:59:67:16:06:de:ac:93:f9:83:88:53:a7:56: 44:2a:99:75:1b:88:ea:38:53:47:a2:51:71:35:81: 10:b7:29:8f:56:61:6d:37:1b:e0:43:fc:d2:34:3a: 08:a5:3e:5c:2f:09:c0:6d:77:be:21:06:3d:8f:71: 30:a4:13:11:63:cf:77:29:32:a9:82:b5:0a:65:c8: ff:0b:51:f4:1e:dc:f4:3b:1c:71:fa:78:cd:56:a1: 60:14:40:6a:4e:d8:69:9e:f2:df:38:fe:d5:6f:95: 34:f7:0a:75:a1:eb:53:61:47:ca:d7:cb:bc:36:a7: 66:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.72.0/22 IPv6: 2804:1be8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61756 Signature Algorithm: sha256WithRSAEncryption 2b:c3:68:f8:2c:97:da:f9:46:02:5b:d9:ba:85:7d:ad:06:67: 46:95:64:e2:49:cc:5b:38:12:2f:0c:bc:7f:1b:f4:5a:be:e7: 9b:5c:6b:10:79:6f:a9:c7:87:bc:ca:e0:6e:2b:54:8f:cd:eb: db:29:ce:ba:cb:49:48:83:46:2b:28:42:48:10:ea:f6:48:89: 82:eb:3d:23:7b:70:d0:66:a2:99:69:99:81:85:01:b3:b1:a8: 1a:76:c2:3e:2b:5d:f5:6d:2a:75:3f:12:8a:ab:e8:4b:68:ac: cb:e8:bf:6c:c3:f5:7c:1f:54:1d:6f:3a:d4:ad:57:0b:57:2e: 7d:8a:0c:f5:6c:17:0d:4c:49:8c:12:0e:f6:57:0a:7b:20:a6: a2:4a:4a:c0:96:36:29:86:8d:cf:50:49:f7:d4:32:bb:ad:ff: 1f:b1:32:ec:7d:f7:a1:c7:c4:ef:1f:91:ba:e0:da:76:61:c8: 14:fa:e3:73:76:ef:ae:f1:d7:af:ec:75:a2:cd:47:0f:5f:8e: d9:44:24:51:69:86:ce:a9:32:8e:e8:d7:31:4d:be:c2:c9:7b: 79:30:f5:0a:b0:a6:83:5a:b1:bc:6d:de:05:b4:15:a8:56:ae: 15:77:d5:89:bc:5c:ee:27:62:1b:28:01:0f:c2:35:66:a3:72: de:ce:ce:a0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOqPTYwU6/0S5QuTP4EvgFP+mC2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjQxOTM1MzlaFw0yNjA5MjMxOTQwMzlaMDMxMTAvBgNV BAMTKDA0MUZBMEE0MDhBRDU3RTkzODREQTMzMUIzMDQwQjkxRkRFMDBCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJy+XUvIwjepgAuUch8btcA7/1 qZmnZeiFPA4qg7f9luqEU9qD1D3L00aqLKs7FgjwIj5UA2cgvuA6QgAkB0TyNtWG RPLGKMgLwMMgX6iO5+JcLAPVqgECI98rubGH5ly4y5CBs0UglUzLxiHA9l4wlyQa IK2fjEUZw8DiZ518pbzOabPy6s7+WWcWBt6sk/mDiFOnVkQqmXUbiOo4U0eiUXE1 gRC3KY9WYW03G+BD/NI0OgilPlwvCcBtd74hBj2PcTCkExFjz3cpMqmCtQplyP8L UfQe3PQ7HHH6eM1WoWAUQGpO2Gme8t84/tVvlTT3CnWh61NhR8rXy7w2p2ZzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEH6CkCK1X6ThN ozGzBAuR/eAL4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1FY djdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NR WHY3VzNjU0pTNHl0ZDZocW0xQ0ZIVEZhampLWVVIdFg1WXFoeXhVb0E5LzAvMDQx RkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFGREUwMEJFMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg2RIMA0EAgACMAcDBQAoBBvoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxPDANBgkqhkiG9w0BAQsFAAOCAQEAK8No+CyX2vlGAlvZ uoV9rQZnRpVk4knMWzgSLwy8fxv0Wr7nm1xrEHlvqceHvMrgbitUj83r2ynOustJ SINGKyhCSBDq9kiJgus9I3tw0GaimWmZgYUBs7GoGnbCPitd9W0qdT8SiqvoS2is y+i/bMP1fB9UHW861K1XC1cufYoM9WwXDUxJjBIO9lcKeyCmokpKwJY2KYaNz1BJ 99Qyu63/H7Ey7H33ocfE7x+RuuDadmHIFPrjc3bvrvHXr+x1os1HD1+O2UQkUWmG zqkyjujXMU2+wsl7eTD1CrCmg1qxvG3eBbQVqFauFXfVibxc7idiGygBD8I1ZqNy 3s7OoA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:44 2025 by rpki-client