$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer File: 1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer (raw, json) Hash identifier: obr3bQTBdJYGtE2OgwkAMqyQZPvdIBcq7Stz7C4ZgcA= Subject key identifier: 1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F91A8D0009674C7ED169031530F7500B710AE32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft caRepository: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 19:39:26 +0000 Certificate not after: Wed 29 Apr 2026 19:44:26 +0000 Subordinate resources: AS: 264091 IP: 143.208.128.0/22 IP: 2804:2abc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:91:a8:d0:00:96:74:c7:ed:16:90:31:53:0f:75:00:b7:10:ae:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 19:39:26 2025 GMT Not After : Apr 29 19:44:26 2026 GMT Subject: CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:94:4c:f8:bf:55:2e:4b:8a:4b:c2:54:6d: 66:43:ac:33:b5:75:47:f4:2b:bb:41:63:45:13:8b: 24:c1:d4:61:ef:78:59:20:68:cc:e3:56:4a:a1:b4: d2:65:d9:17:88:fa:bb:53:0d:a4:3e:bc:b4:1b:6c: 4a:fe:a0:f1:0a:53:cf:b2:ab:e2:96:2f:e6:c6:59: 16:47:ab:91:70:89:b2:a6:3f:1e:59:b0:5a:75:40: 7e:c4:b7:54:7b:3b:3f:f6:3c:92:00:d8:39:0d:b2: b8:3f:a5:d2:03:a8:9b:03:80:a0:ba:44:3f:48:20: 1f:58:0a:8a:96:c4:ce:c8:30:39:f6:1f:d2:3b:33: 21:90:59:5b:c5:2f:3b:a3:03:7f:01:fd:91:cc:c5: 0b:c4:aa:c0:3f:50:a7:88:bf:da:ae:1a:1f:98:55: 87:9f:5d:06:1f:d9:a0:32:93:29:4c:74:20:26:07: f7:70:d9:a8:d9:a0:58:b3:52:1b:2e:b0:1a:60:0f: 38:09:48:ab:68:53:09:66:94:9c:a0:88:5c:f5:51: f3:dc:f3:48:dc:ff:68:2d:ef:ec:0d:53:98:bd:3a: e7:33:63:6f:40:f3:dc:c5:bc:87:09:9f:65:e1:0f: 68:42:20:11:a9:42:43:88:40:ab:a0:61:6b:32:49: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.128.0/22 IPv6: 2804:2abc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264091 Signature Algorithm: sha256WithRSAEncryption a8:03:96:5e:a6:ff:a6:da:a7:f7:f4:86:75:d2:a8:09:cb:ae: 46:21:4e:5f:35:c7:7f:68:c6:80:91:ae:8f:c8:77:16:90:fc: 75:45:74:dd:0a:f5:b3:29:f4:5c:f9:99:ef:12:f5:12:94:71: 00:23:f2:f6:7f:f0:0b:5f:da:f8:a1:67:fc:32:46:56:b4:70: 5f:03:41:2a:8f:49:7b:05:5a:0f:1d:8b:16:b7:b1:25:e5:6a: 64:2c:d2:2c:89:55:fa:c1:1c:69:5e:42:37:80:99:4e:94:bf: 7f:27:14:ac:5c:a6:cf:18:84:7a:f9:03:66:b4:0c:82:65:07: ba:61:ad:8f:0d:04:5b:c8:ed:77:05:01:d2:8b:76:88:75:67: 8c:07:d4:b2:89:6d:e2:bf:26:68:f2:b2:a9:2b:49:4c:42:b7: f9:8f:a4:4c:86:be:dd:20:e4:1b:ab:39:ea:76:da:f0:3d:a3: d2:9a:81:56:be:5e:c4:f3:06:84:2c:59:e9:9b:7a:30:1b:55: 91:4e:70:58:8c:fd:04:38:65:58:40:6b:1f:16:75:51:6b:6e: 62:0f:fa:62:33:6d:1e:93:66:aa:79:21:29:77:34:7d:e1:28: d6:0b:e4:1e:d3:42:84:c8:5f:c3:35:2c:3e:1e:f6:55:d1:97: c8:8e:4d:31 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX5Go0ACWdMftFpAxUw91ALcQrjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxOTM5MjZaFw0yNjA0MjkxOTQ0MjZaMDMxMTAvBgNV BAMTKDFBNTdGMDA0NkE4OThFNkI3RDU2ODk1NDEyQjIxRDhGQjFERUY3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpR5RM+L9VLkuKS8JUbWZDrDO1 dUf0K7tBY0UTiyTB1GHveFkgaMzjVkqhtNJl2ReI+rtTDaQ+vLQbbEr+oPEKU8+y q+KWL+bGWRZHq5FwibKmPx5ZsFp1QH7Et1R7Oz/2PJIA2DkNsrg/pdIDqJsDgKC6 RD9IIB9YCoqWxM7IMDn2H9I7MyGQWVvFLzujA38B/ZHMxQvEqsA/UKeIv9quGh+Y VYefXQYf2aAykylMdCAmB/dw2ajZoFizUhsusBpgDzgJSKtoUwlmlJygiFz1UfPc 80jc/2gt7+wNU5i9OuczY29A89zFvIcJn2XhD2hCIBGpQkOIQKugYWsySesHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQaV/AEaomOa31W iVQSsh2Psd73BTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQktI RnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdwYTUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JL SEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAvMUE1 N0YwMDQ2QTg5OEU2QjdENTY4OTU0MTJCMjFEOEZCMURFRjcwNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj9CAMA0EAgACMAcDBQAoBCq8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHmzANBgkqhkiG9w0BAQsFAAOCAQEAqAOWXqb/ptqn9/SG ddKoCcuuRiFOXzXHf2jGgJGuj8h3FpD8dUV03Qr1syn0XPmZ7xL1EpRxACPy9n/w C1/a+KFn/DJGVrRwXwNBKo9JewVaDx2LFrexJeVqZCzSLIlV+sEcaV5CN4CZTpS/ fycUrFymzxiEevkDZrQMgmUHumGtjw0EW8jtdwUB0ot2iHVnjAfUsolt4r8maPKy qStJTEK3+Y+kTIa+3SDkG6s56nba8D2j0pqBVr5exPMGhCxZ6Zt6MBtVkU5wWIz9 BDhlWEBrHxZ1UWtuYg/6YjNtHpNmqnkhKXc0feEo1gvkHtNChMhfwzUsPh72VdGX yI5NMQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:01 2025 by rpki-client