$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer File: 17B735526DB022F03734B18CC48645C010E4442A.cer (raw, json) Hash identifier: pqXYsIy4V2VlZx1P/Mxu+AhTBiQlS0xTwfAzFseUQmI= Subject key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B2C8447A6DE5A0A3F36A59F39BC9AE4ECF7E802 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft caRepository: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 04 Aug 2025 13:47:43 +0000 Certificate not after: Mon 03 Aug 2026 13:52:43 +0000 Subordinate resources: AS: 263541 IP: 191.5.164.0/22 IP: 191.241.20.0/22 IP: 2804:1398::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2c:84:47:a6:de:5a:0a:3f:36:a5:9f:39:bc:9a:e4:ec:f7:e8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 4 13:47:43 2025 GMT Not After : Aug 3 13:52:43 2026 GMT Subject: CN=17B735526DB022F03734B18CC48645C010E4442A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:e8:07:64:bf:7e:fb:f7:91:2c:7c:b4:28: dc:14:81:4a:61:35:cf:2d:17:67:76:76:32:79:60: aa:26:45:19:35:0a:36:f7:e9:2e:c5:58:8e:8e:57: 23:30:f3:46:38:8a:87:a2:eb:90:c7:fe:25:d7:c1: 48:d4:08:10:20:a9:fe:00:4b:6a:2a:0c:bb:87:d5: 94:fa:17:a7:39:87:44:f6:f7:96:55:c3:89:b8:6a: 93:3b:5b:6d:c1:2f:94:5d:70:08:86:e4:77:a0:68: 71:65:e1:d4:20:d3:63:b3:e6:00:04:b4:ff:36:bb: dc:12:e1:9c:6f:23:4f:7d:d7:51:2a:97:d3:93:2e: 0b:54:50:e6:88:f3:9b:53:b3:ef:b9:a8:a9:d9:be: a5:48:be:e5:1b:ed:70:f8:d5:65:58:b6:67:b7:aa: f9:0c:fd:b5:32:8d:68:fa:0c:92:d0:00:13:ad:5d: ac:1a:6c:64:d4:0f:25:bf:96:46:cc:e8:fe:2a:71: 67:87:a4:0e:d6:ec:c1:58:8f:74:03:c6:2c:44:db: b0:7b:f9:7d:42:5c:be:53:cf:8a:d0:9d:da:ea:78: d8:33:62:3b:ea:65:6e:1e:26:7f:58:de:f9:f7:e6: b8:df:e2:59:18:90:72:69:15:8b:ae:83:5b:61:93: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.5.164.0/22 191.241.20.0/22 IPv6: 2804:1398::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263541 Signature Algorithm: sha256WithRSAEncryption 39:7c:6b:f3:3f:fc:da:ba:ca:49:b5:0d:b7:95:76:ad:aa:48: cc:a7:60:01:53:ce:78:03:7f:2e:55:71:b7:a0:e1:fa:84:8f: fb:23:dc:f1:af:8c:b8:3d:24:8b:3c:7a:5b:f7:dc:8c:19:2c: 55:f3:a4:26:c6:7b:30:4d:25:96:07:15:d6:ba:90:cf:b1:f0: 5c:44:30:2b:74:0b:6c:62:de:60:51:d2:25:be:5e:5d:88:72: 2b:83:5f:af:e9:61:b7:a1:a4:ba:84:09:5e:1d:cf:62:d2:04: a8:a1:0f:75:c2:8b:55:ab:57:56:f4:73:2f:5b:8f:a3:6b:9d: 06:de:e6:8e:1f:c2:d5:b2:d4:54:0b:a4:f9:59:3f:88:8e:40: 1e:5b:ce:21:83:1b:c1:fd:5d:c2:c7:d2:de:d5:6b:09:50:b8: 7a:26:87:ee:cd:fd:29:1a:b3:e1:01:10:be:f1:9d:25:92:e4: 93:b5:42:d3:4b:2f:f1:a8:0d:fc:c6:ae:8b:fa:b0:19:d8:d1: 15:b8:4e:89:2f:27:51:e6:79:1a:3c:37:44:da:e8:f6:87:0b: 86:dc:c4:e6:14:13:0c:75:db:da:fc:54:2b:09:b8:d2:29:b5: 3c:be:a0:dc:39:f9:5f:1f:40:c9:08:a9:b2:26:a8:6c:0e:cc: ac:e0:e4:97 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUayyER6beWgo/NqWfObya5Oz36AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDQxMzQ3NDNaFw0yNjA4MDMxMzUyNDNaMDMxMTAvBgNV BAMTKDE3QjczNTUyNkRCMDIyRjAzNzM0QjE4Q0M0ODY0NUMwMTBFNDQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAugHZL9++/eRLHy0KNwUgUph Nc8tF2d2djJ5YKomRRk1Cjb36S7FWI6OVyMw80Y4ioei65DH/iXXwUjUCBAgqf4A S2oqDLuH1ZT6F6c5h0T295ZVw4m4apM7W23BL5RdcAiG5HegaHFl4dQg02Oz5gAE tP82u9wS4ZxvI09911Eql9OTLgtUUOaI85tTs++5qKnZvqVIvuUb7XD41WVYtme3 qvkM/bUyjWj6DJLQABOtXawabGTUDyW/lkbM6P4qcWeHpA7W7MFYj3QDxixE27B7 +X1CXL5Tz4rQndrqeNgzYjvqZW4eJn9Y3vn35rjf4lkYkHJpFYuug1thk2vHAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXtzVSbbAi8Dc0 sYzEhkXAEOREKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2lh enB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6U1UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Np YXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAvMTdC NzM1NTI2REIwMjJGMDM3MzRCMThDQzQ4NjQ1QzAxMEU0NDQyQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCvwWkAwQCv/EUMA0EAgACMAcDBQAoBBOYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFdTANBgkqhkiG9w0BAQsFAAOCAQEAOXxr8z/8 2rrKSbUNt5V2rapIzKdgAVPOeAN/LlVxt6Dh+oSP+yPc8a+MuD0kizx6W/fcjBks VfOkJsZ7ME0llgcV1rqQz7HwXEQwK3QLbGLeYFHSJb5eXYhyK4Nfr+lht6GkuoQJ Xh3PYtIEqKEPdcKLVatXVvRzL1uPo2udBt7mjh/C1bLUVAuk+Vk/iI5AHlvOIYMb wf1dwsfS3tVrCVC4eiaH7s39KRqz4QEQvvGdJZLkk7VC00sv8agN/Maui/qwGdjR FbhOiS8nUeZ5Gjw3RNro9ocLhtzE5hQTDHXb2vxUKwm40im1PL6g3Dn5Xx9AyQip siaobA7MrODklw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:41 2025 by rpki-client