$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer File: 43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.cer (raw, json) Hash identifier: vhXNMvvLwOR07YsHsQ792pBY4ddHlswbjhKnUiilxFM= Subject key identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 78899F20CB290FCFABBF65D64B660E2BD54EF8B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft caRepository: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 12:01:17 +0000 Certificate not after: Wed 01 Jul 2026 12:06:17 +0000 Subordinate resources: AS: 53225 IP: 177.137.16.0/20 IP: 186.251.128.0/20 IP: 2804:644::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 21:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:89:9f:20:cb:29:0f:cf:ab:bf:65:d6:4b:66:0e:2b:d5:4e:f8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 2 12:01:17 2025 GMT Not After : Jul 1 12:06:17 2026 GMT Subject: CN=43ACDADE4CE6CA21A0CDB98750F35D60FADD989B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:9c:9e:31:34:a8:29:47:2b:79:f5:8c:0b: 26:94:5f:02:f9:d5:03:80:1a:af:49:9f:9f:e4:a3: c5:97:67:6c:8e:f2:31:78:53:92:09:3d:53:8a:78: a1:ab:f1:73:f9:94:a7:7b:34:54:a8:54:57:0e:da: 4b:fb:9c:cf:db:d4:bb:cb:c3:30:dc:cd:9a:c5:31: ca:c6:d2:bf:2c:46:fe:63:64:94:59:f6:2b:96:46: 7f:dd:c0:3d:3b:84:06:8a:b9:f7:87:78:68:83:8e: 6e:99:99:5a:d5:39:4d:fa:19:76:b4:4a:4a:25:4a: 4b:7f:c0:e0:6c:dd:74:26:94:db:18:6f:b0:72:23: 47:19:78:32:4f:1e:70:72:c0:38:da:d6:05:01:94: 4e:2e:64:b3:4d:e3:07:ff:b9:84:9b:3f:f3:9b:9c: 53:10:00:eb:72:a0:53:bf:48:a9:46:2e:cd:17:29: 04:a5:51:84:38:eb:c4:6b:77:4d:91:5b:4d:a3:aa: 80:db:39:29:5d:21:16:59:8c:ee:cc:d1:e8:c8:19: 40:73:d1:6e:15:c5:48:6b:5d:b1:13:49:f4:97:36: 3f:ff:0c:e7:06:20:fe:1e:60:d6:49:dc:e4:de:ad: b3:4d:41:fc:5f:65:7d:93:66:1e:e5:8b:27:09:4d: e4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:AC:DA:DE:4C:E6:CA:21:A0:CD:B9:87:50:F3:5D:60:FA:DD:98:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/2/43ACDADE4CE6CA21A0CDB98750F35D60FADD989B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.137.16.0/20 186.251.128.0/20 IPv6: 2804:644::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53225 Signature Algorithm: sha256WithRSAEncryption 0e:9f:b9:07:da:ae:d0:ef:04:9c:6a:a9:a6:3b:fc:e5:79:aa: 99:bc:9b:4d:e9:ab:b5:44:8c:d9:3d:c2:4a:42:2d:69:26:69: 54:c3:52:ce:39:75:39:d9:22:78:75:97:f7:24:bc:41:dc:10: ed:dd:b8:f0:b0:6f:39:e9:ff:90:f8:e1:16:dc:ee:28:1d:f2: 89:0f:50:d7:3e:1b:b6:f4:be:0a:99:e8:cc:68:d9:ee:a7:bb: 4e:d8:a9:43:23:72:0c:eb:be:27:d7:52:4e:7b:b4:0b:27:b9: 81:38:f7:be:b0:b0:06:28:84:b5:82:6b:4a:28:49:ed:ad:36: a6:2c:1c:cf:e2:a2:51:c8:7e:60:55:87:9c:df:d5:28:e3:37: 09:a8:d9:f5:a1:79:a8:7a:b2:7a:1e:0d:e0:b3:ac:16:49:89: 12:42:75:96:fa:07:cc:ab:6d:ab:88:57:a1:86:47:0b:82:05: 7c:20:58:5c:22:ff:58:af:0e:cb:60:1b:89:37:39:4e:6c:5c: 79:8a:ff:79:4d:ab:a2:de:9a:58:35:77:66:f1:76:24:be:05: a0:a2:82:75:ac:c5:20:91:54:dc:c6:10:2d:64:e6:95:d7:35: 82:6a:24:3f:77:56:50:9d:ea:10:26:c3:c1:8d:35:fd:1d:29: dd:9a:b4:32 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUeImfIMspD8+rv2XWS2YOK9VO+LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDIxMjAxMTdaFw0yNjA3MDExMjA2MTdaMDMxMTAvBgNV BAMTKDQzQUNEQURFNENFNkNBMjFBMENEQjk4NzUwRjM1RDYwRkFERDk4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfL5yeMTSoKUcrefWMCyaUXwL5 1QOAGq9Jn5/ko8WXZ2yO8jF4U5IJPVOKeKGr8XP5lKd7NFSoVFcO2kv7nM/b1LvL wzDczZrFMcrG0r8sRv5jZJRZ9iuWRn/dwD07hAaKufeHeGiDjm6ZmVrVOU36GXa0 SkolSkt/wOBs3XQmlNsYb7ByI0cZeDJPHnBywDja1gUBlE4uZLNN4wf/uYSbP/Ob nFMQAOtyoFO/SKlGLs0XKQSlUYQ468Rrd02RW02jqoDbOSldIRZZjO7M0ejIGUBz 0W4VxUhrXbETSfSXNj//DOcGIP4eYNZJ3OTerbNNQfxfZX2TZh7liycJTeRpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDrNreTObKIaDN uYdQ811g+t2YmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlNm b2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZTUFEvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZT Zm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzIvNDNB Q0RBREU0Q0U2Q0EyMUEwQ0RCOTg3NTBGMzVENjBGQUREOTg5Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsYkQAwQEuvuAMA0EAgACMAcDBQAoBAZEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDP6TANBgkqhkiG9w0BAQsFAAOCAQEADp+5B9qu 0O8EnGqppjv85XmqmbybTemrtUSM2T3CSkItaSZpVMNSzjl1OdkieHWX9yS8QdwQ 7d248LBvOen/kPjhFtzuKB3yiQ9Q1z4btvS+CpnozGjZ7qe7TtipQyNyDOu+J9dS Tnu0Cye5gTj3vrCwBiiEtYJrSihJ7a02piwcz+KiUch+YFWHnN/VKOM3CajZ9aF5 qHqyeh4N4LOsFkmJEkJ1lvoHzKttq4hXoYZHC4IFfCBYXCL/WK8Oy2AbiTc5Tmxc eYr/eU2rot6aWDV3ZvF2JL4FoKKCdazFIJFU3MYQLWTmldc1gmokP3dWUJ3qECbD wY01/R0p3Zq0Mg== -----END CERTIFICATE-----Generated at Wed Oct 22 20:12:31 2025 by rpki-client