$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer File: 0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer (raw, json) Hash identifier: 5ZMyh9f3lhOQ1hFhBc1+yHbueIN0etdG8KAsn4ZXjSw= Subject key identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 60F922A2DF6888FD97D1815BCCF169907F52AB28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft caRepository: rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 14:33:32 +0000 Certificate not after: Thu 30 Jul 2026 14:38:32 +0000 Subordinate resources: AS: 264543 IP: 138.0.96.0/22 IP: 143.0.128.0/22 IP: 168.195.104.0/22 IP: 2804:2138::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f9:22:a2:df:68:88:fd:97:d1:81:5b:cc:f1:69:90:7f:52:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 31 14:33:32 2025 GMT Not After : Jul 30 14:38:32 2026 GMT Subject: CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:76:08:78:09:51:26:16:88:e5:65:2f:81: 54:6e:3a:10:41:8a:0c:9f:62:03:dc:2c:8a:51:9d: fc:e7:32:1e:d7:85:55:ca:60:d1:fa:51:2b:23:b3: 59:33:75:e2:64:4d:5d:b4:78:bb:47:d7:95:2f:11: 28:74:c7:06:34:cd:d6:9c:ef:ce:c4:37:af:b2:02: 77:91:f0:5f:a2:ad:92:7f:f0:5c:55:e8:b9:bc:74: 43:97:3d:10:09:a0:7f:02:02:05:83:8e:30:09:a5: c1:ac:0e:cd:6b:0c:ce:91:7b:99:68:e1:aa:46:32: 7d:e7:d2:7b:44:87:19:f2:34:47:77:61:a8:21:d5: 00:0d:13:c2:fd:10:28:ab:0c:44:b9:6b:7d:c3:6d: 34:df:a5:21:26:7e:5c:b1:b4:99:bc:04:cd:c3:6d: c0:2a:96:58:e7:fa:18:a8:3b:51:cc:fb:e9:b2:bd: d1:ed:b3:e6:ca:57:b8:03:70:82:65:7d:7e:bd:f9: 43:20:0a:80:1d:89:0e:1d:c9:6b:1b:37:c6:fb:26: cb:8f:67:6e:55:e1:c6:70:28:fc:e9:da:31:bc:6e: df:c9:3d:28:16:87:fe:8e:28:fd:b7:1d:a2:7a:51: 00:a9:71:02:8f:f9:99:7c:eb:20:0e:2c:bc:3a:bb: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.96.0/22 143.0.128.0/22 168.195.104.0/22 IPv6: 2804:2138::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264543 Signature Algorithm: sha256WithRSAEncryption 8b:a9:27:62:6d:85:2f:5d:87:2a:75:a9:c2:39:70:8f:90:c7: 0d:90:a0:82:6f:c7:7b:be:d3:7b:ec:21:77:96:c6:d1:5c:a5: 00:cd:49:d1:a6:7a:18:c8:bc:f8:5a:ae:14:67:5d:9e:cb:c4: 4e:c7:92:e8:c1:d4:ca:8a:1f:5c:b7:47:d6:ba:51:8b:6a:e2: 8b:e8:70:32:b1:db:31:3b:b5:0a:c9:5f:29:37:49:a9:e2:64: 79:64:40:e2:69:06:d4:a1:88:0e:e7:be:b1:9a:a5:00:5b:c6: a3:8e:b3:5a:ba:e4:e8:08:58:fd:bb:6b:3b:82:81:47:13:b9: 08:09:cb:c0:25:d3:2b:47:a6:96:a5:6b:11:7c:ad:86:e3:de: f9:de:11:fa:7a:05:f0:83:b0:57:2a:ba:ce:d9:f8:4a:7f:a3: 99:24:10:5d:ef:1b:db:f8:d2:8b:af:be:53:1c:28:0f:0b:86: a9:1a:a4:e3:c1:af:55:16:f4:3f:17:21:10:99:0d:dd:e5:48: ea:5e:fd:c5:fe:2c:ab:1b:fc:4a:70:b4:0f:b5:db:f0:e0:f2: ca:e9:9f:e3:6e:47:c5:a5:f0:42:2c:a6:a9:ad:cc:88:44:7f: c2:e9:31:0c:89:0f:27:db:70:42:86:c9:42:0c:7c:30:b8:39: fb:76:f1:33 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIUYPkiot9oiP2X0YFbzPFpkH9SqygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzExNDMzMzJaFw0yNjA3MzAxNDM4MzJaMDMxMTAvBgNV BAMTKDA5MzdCNUQ3NDM2QTM3RkE2MjM5NjU3RUI5MTYxRjFGOEY3NTY1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4HYIeAlRJhaI5WUvgVRuOhBB igyfYgPcLIpRnfznMh7XhVXKYNH6USsjs1kzdeJkTV20eLtH15UvESh0xwY0zdac 787EN6+yAneR8F+irZJ/8FxV6Lm8dEOXPRAJoH8CAgWDjjAJpcGsDs1rDM6Re5lo 4apGMn3n0ntEhxnyNEd3Yagh1QANE8L9ECirDES5a33DbTTfpSEmflyxtJm8BM3D bcAqlljn+hioO1HM++myvdHts+bKV7gDcIJlfX69+UMgCoAdiQ4dyWsbN8b7JsuP Z25V4cZwKPzp2jG8bt/JPSgWh/6OKP23HaJ6UQCpcQKP+Zl86yAOLLw6u6lPAgMB AAGjggNEMIIDQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJN7XXQ2o3+mI5 ZX65Fh8fj3VlrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vckt6 aEM0SGZMUEF2UzJhNHFNWE5mRW96b3o2OE5pQUh4YzJtcG9keHBhdi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vckt6 aEM0SGZMUEF2UzJhNHFNWE5mRW96b3o2OE5pQUh4YzJtcG9keHBhdi8wLzA5MzdC NUQ3NDM2QTM3RkE2MjM5NjU3RUI5MTYxRjFGOEY3NTY1QUUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB /wQrMCkwGAQCAAEwEgMEAooAYAMEAo8AgAMEAqjDaDANBAIAAjAHAwUAKAQhODAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECV8wDQYJKoZIhvcNAQELBQADggEBAIup J2JthS9dhyp1qcI5cI+Qxw2QoIJvx3u+03vsIXeWxtFcpQDNSdGmehjIvPharhRn XZ7LxE7HkujB1MqKH1y3R9a6UYtq4ovocDKx2zE7tQrJXyk3SaniZHlkQOJpBtSh iA7nvrGapQBbxqOOs1q65OgIWP27azuCgUcTuQgJy8Al0ytHppalaxF8rYbj3vne Efp6BfCDsFcqus7Z+Ep/o5kkEF3vG9v40ouvvlMcKA8LhqkapOPBr1UW9D8XIRCZ Dd3lSOpe/cX+LKsb/EpwtA+12/Dg8srpn+NuR8Wl8EIspqmtzIhEf8LpMQyJDyfb cEKGyUIMfDC4Oft28TM= -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:12 2025 by rpki-client