$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.cer File: 41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.cer (raw, json) Hash identifier: BfNwmhdEqBqdZ2V7RJJXmUot5FeNPsSc9/xylcd0WJw= Subject key identifier: 41:17:2F:08:E7:A6:9B:90:83:4C:E0:BA:0E:5F:1B:01:C3:FD:54:3C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 723282E97463F1CE3E1EE6F49C3F169B860D4D32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft caRepository: rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:22 +0000 Certificate not after: Fri 06 Mar 2026 14:42:22 +0000 Subordinate resources: AS: 270429 IP: 190.111.148.0/22 IP: 2804:6bd8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:32:82:e9:74:63:f1:ce:3e:1e:e6:f4:9c:3f:16:9b:86:0d:4d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:22 2025 GMT Not After : Mar 6 14:42:22 2026 GMT Subject: CN=41172F08E7A69B90834CE0BA0E5F1B01C3FD543C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:e6:a4:53:4d:2b:ba:44:2a:ac:da:68:70: c3:2d:b6:6e:39:36:65:a6:93:61:3b:14:7b:7e:e3: 29:f0:57:55:d7:b6:42:a1:b7:0b:11:b2:37:03:39: c5:52:c3:8a:53:ee:cc:5e:c8:92:ce:af:6e:20:f6: 77:3f:74:51:94:9c:de:4f:65:2e:51:a5:ba:d9:1f: e8:9b:14:be:f2:5f:56:47:db:65:13:5f:39:44:56: 16:bb:d8:0f:1f:52:f1:8d:df:33:dc:fa:5a:fa:c4: 09:7e:4b:63:3a:a6:5f:a2:d4:99:45:90:49:58:3c: 5d:84:3d:8d:6a:53:c9:2c:82:c0:6b:69:97:1e:8a: 21:93:17:d6:a0:2b:b0:47:76:b2:8b:ab:b5:bb:ae: 88:3d:87:11:35:d1:b9:20:93:fb:e9:79:47:c5:00: 7a:fa:85:56:da:75:60:f0:b0:ea:58:60:16:26:00: fe:a2:24:4e:38:cf:c5:8a:cf:1a:d9:03:f3:ff:fb: 10:d1:8b:e1:64:7f:ad:10:46:44:7c:51:a1:5d:61: 5a:53:ff:51:29:31:af:a7:61:80:ff:6f:f9:8f:a3: ce:3d:c8:1e:b3:5a:83:c9:f1:9c:78:fe:22:6e:72: 67:3b:4b:b9:84:fc:f0:a6:4f:6c:b1:f6:c3:e9:57: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:17:2F:08:E7:A6:9B:90:83:4C:E0:BA:0E:5F:1B:01:C3:FD:54:3C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/41172F08E7A69B90834CE0BA0E5F1B01C3FD543C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.148.0/22 IPv6: 2804:6bd8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270429 Signature Algorithm: sha256WithRSAEncryption b6:ba:2c:1b:db:48:9c:60:9f:fc:8e:9c:9e:59:20:42:0c:9e: fa:71:2d:b6:a3:59:2f:df:01:66:a6:93:87:98:9e:3d:2f:ec: 85:41:b0:e2:29:09:72:df:f2:5f:63:57:6a:ae:22:6d:1e:2a: 21:ae:36:68:b5:44:f0:63:8a:ee:38:ef:91:40:24:2f:21:c1: b6:58:92:4c:38:08:4d:c1:9f:20:19:72:29:dc:9d:18:a6:ae: 5e:7e:70:26:09:39:a1:3f:07:86:82:79:6e:a8:8c:e4:dc:e3: 93:cf:23:32:fd:ae:ae:ec:f5:39:21:fe:91:56:cb:f0:08:1f: c4:4c:4a:31:0b:aa:a6:68:5a:45:76:92:ab:33:7c:31:12:1a: 1f:9f:a9:71:67:1e:13:97:31:fa:e2:56:c0:c9:a1:88:eb:92: f2:0f:2e:2c:53:09:f5:48:44:9b:59:67:4e:d9:12:eb:4f:f8: 3d:00:c4:79:74:74:29:df:62:c9:d9:ff:bf:39:7e:59:a6:62: 41:df:36:22:e1:fe:46:90:2f:35:07:db:a5:dc:95:81:a6:26: d0:8b:d1:6f:45:94:7d:a7:4b:86:94:03:a3:94:a4:23:37:ad: cc:8c:1b:e3:eb:76:46:97:94:e4:e7:8a:b2:dc:02:c8:69:95: 9d:fc:d3:5f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcjKC6XRj8c4+Hub0nD8Wm4YNTTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MjJaFw0yNjAzMDYxNDQyMjJaMDMxMTAvBgNV BAMTKDQxMTcyRjA4RTdBNjlCOTA4MzRDRTBCQTBFNUYxQjAxQzNGRDU0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9juakU00rukQqrNpocMMttm45 NmWmk2E7FHt+4ynwV1XXtkKhtwsRsjcDOcVSw4pT7sxeyJLOr24g9nc/dFGUnN5P ZS5RpbrZH+ibFL7yX1ZH22UTXzlEVha72A8fUvGN3zPc+lr6xAl+S2M6pl+i1JlF kElYPF2EPY1qU8ksgsBraZceiiGTF9agK7BHdrKLq7W7rog9hxE10bkgk/vpeUfF AHr6hVbadWDwsOpYYBYmAP6iJE44z8WKzxrZA/P/+xDRi+Fkf60QRkR8UaFdYVpT /1EpMa+nYYD/b/mPo849yB6zWoPJ8Zx4/iJucmc7S7mE/PCmT2yx9sPpV9JvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBFy8I56abkINM 4LoOXxsBw/1UPDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzE2 VUY1clFqUmh2ZDI5alBzMUh0ZEZOcndqVmRBRWRTQ1pvU0Q2Y2lpbVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcx NlVGNXJRalJodmQyOWpQczFIdGRGTnJ3alZkQUVkU0Nab1NENmNpaW1aLzAvNDEx NzJGMDhFN0E2OUI5MDgzNENFMEJBMEU1RjFCMDFDM0ZENTQzQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvm+UMA0EAgACMAcDBQAoBGvYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgXTANBgkqhkiG9w0BAQsFAAOCAQEAtrosG9tInGCf/I6c nlkgQgye+nEttqNZL98BZqaTh5iePS/shUGw4ikJct/yX2NXaq4ibR4qIa42aLVE 8GOK7jjvkUAkLyHBtliSTDgITcGfIBlyKdydGKauXn5wJgk5oT8HhoJ5bqiM5Nzj k88jMv2uruz1OSH+kVbL8AgfxExKMQuqpmhaRXaSqzN8MRIaH5+pcWceE5cx+uJW wMmhiOuS8g8uLFMJ9UhEm1lnTtkS60/4PQDEeXR0Kd9iydn/vzl+WaZiQd82IuH+ RpAvNQfbpdyVgaYm0IvRb0WUfadLhpQDo5SkIzetzIwb4+t2RpeU5OeKstwCyGmV nfzTXw== -----END CERTIFICATE-----Generated at Sun Nov 2 23:01:28 2025 by rpki-client