$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer File: 40EA943B9928A2416D417FB39A392494904FD334.cer (raw, json) Hash identifier: /3o2r5Un+ZIBh/7CmedcxBF9vkeH5x4TqNgkzS9gvZ4= Subject key identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75DC7CA67740EF3373208157FA0BD990382024D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft caRepository: rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 18:08:10 +0000 Certificate not after: Thu 13 Aug 2026 18:13:10 +0000 Subordinate resources: AS: 266060 IP: 45.4.224.0/22 IP: 2804:39f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:dc:7c:a6:77:40:ef:33:73:20:81:57:fa:0b:d9:90:38:20:24:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 14 18:08:10 2025 GMT Not After : Aug 13 18:13:10 2026 GMT Subject: CN=40EA943B9928A2416D417FB39A392494904FD334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:49:d5:a9:25:50:85:15:22:90:08:ab:0b: fd:99:4c:d9:ea:77:59:a1:df:c1:f9:23:86:1e:05: 32:58:ab:9b:b8:df:67:4f:ec:68:01:28:fe:2f:b9: 84:5d:b5:02:85:b3:4f:a5:87:38:fd:1b:e5:a2:05: 07:83:38:39:1f:f6:71:df:1d:9c:95:c1:ff:46:19: 74:2c:a0:f9:bd:58:8f:f8:36:37:44:df:6d:40:e2: ab:a6:a9:6b:f7:a0:19:3e:13:91:28:7b:e0:bf:7d: bf:b8:59:a0:7b:46:6f:d5:7c:e2:96:09:85:f3:30: 53:dd:43:04:e2:b9:bd:42:cd:68:0e:5a:8d:27:8d: 92:b9:d4:ac:10:02:80:47:3e:92:ca:61:35:4e:55: df:d8:45:c3:06:62:43:f3:f8:45:df:e5:66:1c:74: b8:3a:11:3c:93:89:b0:67:a3:61:80:75:b9:b6:e5: cd:f1:dc:6e:79:f8:a1:88:88:28:ec:a4:1a:9a:30: ea:89:f7:af:5b:f4:a2:de:b7:ba:dc:10:da:30:aa: 48:e2:e3:47:8d:00:52:1a:23:9d:63:54:40:97:28: 89:9b:d3:cc:e6:16:c1:36:51:93:16:7c:83:bd:18: 9d:16:c1:53:8d:f6:84:be:45:f0:ca:e1:0f:6c:17: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.224.0/22 IPv6: 2804:39f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266060 Signature Algorithm: sha256WithRSAEncryption 6e:24:3b:02:db:fb:22:28:f6:13:90:ba:e7:9b:e3:f4:22:6b: 45:f8:73:05:88:fc:1a:ff:37:24:00:2e:ab:0e:0a:ef:a0:4f: 31:e1:56:32:ae:ae:9d:cb:4f:10:ed:d7:4d:e1:53:69:1e:c1: 81:34:fc:49:82:22:99:8f:79:2d:9d:f3:23:20:d0:48:bc:33: cf:f1:97:a1:5e:91:9b:e4:21:7f:1a:e8:bf:84:af:53:3d:f5: bd:3d:b3:b1:49:aa:09:df:57:64:a2:73:99:f4:f7:a2:3a:86: d1:6e:06:41:07:cf:09:60:54:17:a0:7b:3a:6a:e6:6c:15:58: 65:f7:f7:78:fb:4d:82:8c:41:84:ea:2b:39:15:a4:c4:cf:3e: d5:1b:69:56:08:12:29:3d:c2:e0:e1:a5:e6:42:fa:0d:25:d1: 3d:9b:c0:5d:8b:46:d6:62:7e:1d:62:b6:d7:17:69:e9:76:d2: 13:19:65:e5:51:88:88:df:e1:4c:cc:e1:b2:6a:78:43:99:80: cb:20:f4:3b:a0:b4:b7:9e:89:27:42:49:3c:47:4c:5a:ae:7c: df:5f:94:b9:35:46:15:34:b3:fa:6b:43:43:da:10:43:06:c9: 09:ca:fa:73:f0:cb:4b:db:f2:cc:1e:2f:d6:88:53:ba:56:60: b0:e6:27:93 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUddx8pndA7zNzIIFX+gvZkDggJNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTQxODA4MTBaFw0yNjA4MTMxODEzMTBaMDMxMTAvBgNV BAMTKDQwRUE5NDNCOTkyOEEyNDE2RDQxN0ZCMzlBMzkyNDk0OTA0RkQzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLP0nVqSVQhRUikAirC/2ZTNnq d1mh38H5I4YeBTJYq5u432dP7GgBKP4vuYRdtQKFs0+lhzj9G+WiBQeDODkf9nHf HZyVwf9GGXQsoPm9WI/4NjdE321A4qumqWv3oBk+E5Eoe+C/fb+4WaB7Rm/VfOKW CYXzMFPdQwTiub1CzWgOWo0njZK51KwQAoBHPpLKYTVOVd/YRcMGYkPz+EXf5WYc dLg6ETyTibBno2GAdbm25c3x3G55+KGIiCjspBqaMOqJ969b9KLet7rcENowqkji 40eNAFIaI51jVECXKImb08zmFsE2UZMWfIO9GJ0WwVON9oS+RfDK4Q9sF3V7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRA6pQ7mSiiQW1B f7OaOSSUkE/TNDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNL c1VOZUFid25oYzNKUWdVcmdYWkM5cEY3VzVkUU1rUzJBTFphWFNTRWEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fz S3NVTmVBYnduaGMzSlFnVXJnWFpDOXBGN1c1ZFFNa1MyQUxaYVhTU0VhLzAvNDBF QTk0M0I5OTI4QTI0MTZENDE3RkIzOUEzOTI0OTQ5MDRGRDMzNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQTgMA0EAgACMAcDBQAoBDnwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPTDANBgkqhkiG9w0BAQsFAAOCAQEAbiQ7Atv7Iij2E5C6 55vj9CJrRfhzBYj8Gv83JAAuqw4K76BPMeFWMq6unctPEO3XTeFTaR7BgTT8SYIi mY95LZ3zIyDQSLwzz/GXoV6Rm+Qhfxrov4SvUz31vT2zsUmqCd9XZKJzmfT3ojqG 0W4GQQfPCWBUF6B7OmrmbBVYZff3ePtNgoxBhOorORWkxM8+1RtpVggSKT3C4OGl 5kL6DSXRPZvAXYtG1mJ+HWK21xdp6XbSExll5VGIiN/hTMzhsmp4Q5mAyyD0O6C0 t56JJ0JJPEdMWq5831+UuTVGFTSz+mtDQ9oQQwbJCcr6c/DLS9vyzB4v1ohTulZg sOYnkw== -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:10 2025 by rpki-client