$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer File: 14F766039A22FDF037ECF0775453B10B73542821.cer (raw, json) Hash identifier: mDzay04T8uHhQRo8Ut3pAlhpNAG6/CkpHmdeeeK3Boo= Subject key identifier: 14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6713B788693B60401E97D8D45A9A981561BB0750 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft caRepository: rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 22:44:35 +0000 Certificate not after: Thu 05 Mar 2026 22:49:35 +0000 Subordinate resources: AS: 266553 IP: 160.238.148.0/22 IP: 2804:3dc8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:13:b7:88:69:3b:60:40:1e:97:d8:d4:5a:9a:98:15:61:bb:07:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 22:44:35 2025 GMT Not After : Mar 5 22:49:35 2026 GMT Subject: CN=14F766039A22FDF037ECF0775453B10B73542821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:b1:cb:88:ee:0b:77:9d:bc:28:54:4e:2a: f4:a5:86:ee:c3:b9:9a:37:f9:a6:d0:f2:22:8a:5c: fb:90:25:97:64:6d:d2:fc:44:cb:d7:b9:f3:69:ed: 51:b1:d0:13:99:3b:7c:d7:db:47:26:c5:cd:56:29: 52:0c:eb:18:f5:26:7e:41:e9:ed:97:1f:d8:45:31: 97:b6:d8:ab:73:e7:32:64:0b:e2:42:16:93:85:ae: d3:9c:a6:23:2c:2b:d6:53:7a:2b:e9:5f:d8:f4:22: 33:df:7f:8c:4b:71:1d:b0:a1:45:44:bb:02:3f:05: 45:7f:7a:01:53:2d:91:31:61:14:1a:d4:ea:b9:a2: 91:4c:43:06:2d:1d:c0:9a:d2:fc:cb:64:bb:4b:c4: 28:ee:89:75:25:d7:64:18:af:f9:0e:f7:0b:9c:59: 0f:74:da:3f:4a:d8:d1:71:99:f1:84:18:a7:b2:4a: 37:10:2d:27:71:b2:1e:1c:73:ae:89:83:8d:06:9f: 94:7d:e3:c0:4d:2c:0a:58:68:c8:74:8e:b3:5d:44: dc:37:1a:14:26:b4:d6:d0:65:4e:16:2c:51:40:81: 4b:d5:93:94:17:5f:b1:2d:8e:ea:51:a0:5d:e5:78: 77:81:df:34:51:c8:d8:0d:2a:5d:d2:d7:e6:35:b7: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.148.0/22 IPv6: 2804:3dc8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266553 Signature Algorithm: sha256WithRSAEncryption c8:2e:cb:8b:50:06:dc:38:95:87:e9:b9:1b:66:2d:9c:b0:97: 7e:13:54:9e:2e:e1:4b:b9:a7:74:55:a1:bd:b0:d4:e1:49:cf: 2b:da:7d:2a:f9:1a:81:ef:7e:12:dc:3f:8a:94:28:c6:3d:b3: 48:1b:b4:e0:73:34:0f:70:37:b2:45:0b:56:c6:5f:ee:e4:3c: be:5c:06:84:4b:a2:c1:ff:77:84:fd:c8:e5:24:58:13:33:e2: f3:1b:3e:fd:f8:61:ac:7a:4e:0d:e3:58:f8:56:55:bf:9c:18: 25:69:8a:b7:b8:eb:48:81:dc:f8:c8:0f:a1:2c:83:bd:84:f1: 68:2e:2b:2e:8e:3c:1e:45:ac:f1:e2:06:f2:23:bf:ce:af:c9: f9:28:84:38:48:3a:b0:04:6d:2f:c4:3b:b4:9c:62:7d:4e:12: bc:9a:6f:11:5f:47:d0:b4:90:03:d5:de:c0:03:1b:6a:b5:36: 0b:cc:b6:f3:bc:ee:ea:48:43:86:95:18:17:76:72:f1:a0:98: 45:4d:ee:08:4c:37:19:71:70:4c:2a:a0:97:82:5f:97:4e:c6: d6:1e:da:87:fd:55:33:9a:46:88:49:df:19:e8:fd:90:5a:45: 6f:ea:96:71:74:3b:32:4c:ba:20:14:86:7d:7c:be:94:94:6b: 9d:55:f6:7d -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUZxO3iGk7YEAel9jUWpqYFWG7B1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMjQ0MzVaFw0yNjAzMDUyMjQ5MzVaMDMxMTAvBgNV BAMTKDE0Rjc2NjAzOUEyMkZERjAzN0VDRjA3NzU0NTNCMTBCNzM1NDI4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQ7HLiO4Ld528KFROKvSlhu7D uZo3+abQ8iKKXPuQJZdkbdL8RMvXufNp7VGx0BOZO3zX20cmxc1WKVIM6xj1Jn5B 6e2XH9hFMZe22Ktz5zJkC+JCFpOFrtOcpiMsK9ZTeivpX9j0IjPff4xLcR2woUVE uwI/BUV/egFTLZExYRQa1Oq5opFMQwYtHcCa0vzLZLtLxCjuiXUl12QYr/kO9wuc WQ902j9K2NFxmfGEGKeySjcQLSdxsh4cc66Jg40Gn5R948BNLApYaMh0jrNdRNw3 GhQmtNbQZU4WLFFAgUvVk5QXX7EtjupRoF3leHeB3zRRyNgNKl3S1+Y1t6OfAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU92YDmiL98Dfs 8HdUU7ELc1QoITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTF4 VENpU3hYS1hmbmN4NXhSbzhiTXNmV1JHV1R2NUY3YUNTNFNHaVVRUU0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTF4 VENpU3hYS1hmbmN4NXhSbzhiTXNmV1JHV1R2NUY3YUNTNFNHaVVRUU0vMS8xNEY3 NjYwMzlBMjJGREYwMzdFQ0YwNzc1NDUzQjEwQjczNTQyODIxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKg7pQwDQQCAAIwBwMFACgEPcgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBE5MA0GCSqGSIb3DQEBCwUAA4IBAQDILsuLUAbcOJWH6bkb Zi2csJd+E1SeLuFLuad0VaG9sNThSc8r2n0q+RqB734S3D+KlCjGPbNIG7TgczQP cDeyRQtWxl/u5Dy+XAaES6LB/3eE/cjlJFgTM+LzGz79+GGsek4N41j4VlW/nBgl aYq3uOtIgdz4yA+hLIO9hPFoLisujjweRazx4gbyI7/Or8n5KIQ4SDqwBG0vxDu0 nGJ9ThK8mm8RX0fQtJAD1d7AAxtqtTYLzLbzvO7qSEOGlRgXdnLxoJhFTe4ITDcZ cXBMKqCXgl+XTsbWHtqH/VUzmkaISd8Z6P2QWkVv6pZxdDsyTLogFIZ9fL6UlGud VfZ9 -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:43 2025 by rpki-client