$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer File: 2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer (raw, json) Hash identifier: wwxrcKTX80AU9LFItX2+gcohM2KKoveBd8AaD0bN9Oc= Subject key identifier: 2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A1A9186191D1BB38F3A4AD1A29C393AF3D12FC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft caRepository: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 31 Mar 2025 13:44:21 +0000 Certificate not after: Mon 30 Mar 2026 13:49:21 +0000 Subordinate resources: AS: 266032 IP: 170.245.248.0/22 IP: 2804:3974::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1a:91:86:19:1d:1b:b3:8f:3a:4a:d1:a2:9c:39:3a:f3:d1:2f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 31 13:44:21 2025 GMT Not After : Mar 30 13:49:21 2026 GMT Subject: CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:32:a1:bf:7f:50:bc:96:28:9f:58:d1:9a: ab:83:c3:03:8c:a4:9d:f4:06:36:34:a8:bb:78:b2: 6f:35:ad:af:20:ec:88:5b:4c:4b:5e:98:d0:7a:87: 5b:f5:b4:50:45:d7:91:cc:5c:e2:3b:73:00:1c:84: 28:a4:20:74:56:8f:3d:3b:3a:19:de:be:70:50:6e: 1a:29:62:e3:66:56:4c:7b:4e:2f:ee:84:5e:d2:98: 78:be:21:67:df:d8:a6:6c:dd:e1:e3:f1:a0:5e:c5: 9a:74:05:ce:74:bc:bb:fb:77:64:2e:83:c8:c1:99: 2d:82:7f:1f:c3:0a:eb:ab:a6:6c:2c:b6:1f:31:18: 52:b0:ae:e7:87:46:32:46:74:e4:ea:9e:98:b8:09: 77:7b:0b:3c:0b:a9:41:a6:d3:93:14:05:3f:e9:95: 23:b5:10:ac:b0:8f:d8:71:a6:77:68:cc:42:9e:26: 95:39:58:38:f3:47:ea:15:0c:75:e5:36:b6:f6:29: 5c:bb:1f:91:c1:a9:78:89:e9:e0:c6:e8:ba:ce:b2: 68:a1:73:35:11:a8:80:05:e8:fc:01:44:c6:aa:dd: 96:63:b6:77:2a:15:9b:b4:94:d7:1d:9b:d4:8c:a9: 1f:32:ca:67:57:b2:8a:c9:86:65:19:b8:b9:51:61: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.248.0/22 IPv6: 2804:3974::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266032 Signature Algorithm: sha256WithRSAEncryption 2f:0d:f4:a7:26:aa:4f:97:a4:85:72:48:ba:df:13:d7:35:5b: 65:04:db:88:5e:71:5c:ce:8b:d1:3a:ba:af:80:d3:a2:38:97: 4c:b0:37:9b:c6:c9:05:05:6b:fe:53:9e:52:03:29:03:df:f1: bb:25:49:a6:59:50:66:44:f8:3f:50:eb:b9:10:8d:51:a5:d4: 32:31:f9:76:b3:8d:d5:7e:d6:8b:6b:cd:8d:e4:05:0c:18:d0: 16:35:15:93:68:c7:d6:30:56:32:64:20:84:76:db:ba:9c:a1: cc:55:4f:b1:0a:00:f1:20:81:d4:ef:1d:e5:f1:9d:4c:4f:dc: 2c:41:5e:2e:3d:e8:43:e1:e1:98:35:bf:90:fc:d2:10:b7:61: f3:9d:bf:35:22:f7:6a:39:31:b4:15:66:69:06:97:51:ad:38: ca:75:66:51:0a:cd:32:36:d9:ed:1c:a7:dd:bc:b9:e7:6b:7d: c3:c7:76:62:ed:de:05:06:ae:1f:58:20:f8:9b:c6:eb:35:74: 8c:1b:75:41:df:98:f7:bb:83:34:4e:e5:d9:eb:6e:bf:86:d2: 17:24:7a:3b:96:78:98:fd:3e:dc:d5:28:5d:62:81:38:77:91: 8a:22:4c:67:63:1a:91:48:0d:94:68:49:f5:4e:98:83:70:3f: 9c:b2:ee:4e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGhqRhhkdG7OPOkrRopw5OvPRL8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMzExMzQ0MjFaFw0yNjAzMzAxMzQ5MjFaMDMxMTAvBgNV BAMTKDJDNEY0MTZBRDlGMDZBMTlCMjFFMDQ4Mzc3MkY3NkJCQUEwODM3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoDKhv39QvJYon1jRmquDwwOM pJ30BjY0qLt4sm81ra8g7IhbTEtemNB6h1v1tFBF15HMXOI7cwAchCikIHRWjz07 OhnevnBQbhopYuNmVkx7Ti/uhF7SmHi+IWff2KZs3eHj8aBexZp0Bc50vLv7d2Qu g8jBmS2Cfx/DCuurpmwsth8xGFKwrueHRjJGdOTqnpi4CXd7CzwLqUGm05MUBT/p lSO1EKywj9hxpndozEKeJpU5WDjzR+oVDHXlNrb2KVy7H5HBqXiJ6eDG6LrOsmih czURqIAF6PwBRMaq3ZZjtncqFZu0lNcdm9SMqR8yymdXsorJhmUZuLlRYfLPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsT0Fq2fBqGbIe BIN3L3a7qgg3nTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVL SmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3azcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hV S0praDZMc3Z5a2VwdG1CcXFVcGpBWWtaQTlvMm0xQXpLVDlIdzJ2d2s3LzAvMkM0 RjQxNkFEOUYwNkExOUIyMUUwNDgzNzcyRjc2QkJBQTA4Mzc5RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvX4MA0EAgACMAcDBQAoBDl0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPMDANBgkqhkiG9w0BAQsFAAOCAQEALw30pyaqT5ekhXJI ut8T1zVbZQTbiF5xXM6L0Tq6r4DTojiXTLA3m8bJBQVr/lOeUgMpA9/xuyVJpllQ ZkT4P1DruRCNUaXUMjH5drON1X7Wi2vNjeQFDBjQFjUVk2jH1jBWMmQghHbbupyh zFVPsQoA8SCB1O8d5fGdTE/cLEFeLj3oQ+HhmDW/kPzSELdh852/NSL3ajkxtBVm aQaXUa04ynVmUQrNMjbZ7Ryn3by552t9w8d2Yu3eBQauH1gg+JvG6zV0jBt1Qd+Y 97uDNE7l2etuv4bSFyR6O5Z4mP0+3NUoXWKBOHeRiiJMZ2MakUgNlGhJ9U6Yg3A/ nLLuTg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:32 2025 by rpki-client