$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.cer (raw, json) Hash identifier: NhI09J3djA/lJfbGDHaNlpCuMWsxLh99cjwfhF+17cs= Subject key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0625FC688DFE6BFFED320D62AB940C70E259F297 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft caRepository: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Mar 2025 17:19:45 +0000 Certificate not after: Wed 25 Mar 2026 17:24:45 +0000 Subordinate resources: AS: 53088 IP: 177.21.80.0/20 IP: 187.33.208.0/20 IP: 2804:360::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:25:fc:68:8d:fe:6b:ff:ed:32:0d:62:ab:94:0c:70:e2:59:f2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 17:19:45 2025 GMT Not After : Mar 25 17:24:45 2026 GMT Subject: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:d3:21:3d:6e:ea:31:59:39:3f:42:f6:2e: 08:77:e5:77:55:ee:29:70:d2:c6:f0:50:18:88:3b: a0:c9:1e:a1:da:f8:b3:4d:85:ce:47:1b:61:d2:50: ef:29:ec:7a:79:eb:da:21:9d:d5:9a:9e:35:cd:43: 83:62:92:de:36:4e:9d:a9:0f:df:e6:8d:fc:e0:e4: b4:29:ba:53:f0:f8:0c:a3:bc:e4:27:7f:1f:ea:66: 1a:6b:0e:4a:af:09:b1:4c:89:0b:fc:7f:86:41:82: 55:2f:c4:9a:75:46:22:48:8a:8d:1d:85:54:80:2c: 36:0a:9d:12:52:7b:2c:16:0e:36:04:5e:ae:70:2f: 08:b2:6f:9c:5d:bf:67:6c:89:9e:dd:70:d7:e2:29: 28:d3:79:08:8d:e3:89:87:eb:8b:62:67:ad:9d:bc: fa:60:42:e3:71:86:54:96:c8:3f:75:2a:c8:a0:3c: e6:6a:a2:d0:6b:17:c9:9c:4a:93:96:7f:ba:7f:39: 1e:b1:f6:2d:ac:26:5e:7a:f9:cb:97:0c:2b:5a:c6: f7:40:0c:eb:9d:86:cd:a6:b1:49:32:8b:48:35:54: df:fd:b3:17:7d:28:31:27:e5:70:69:e7:61:4c:ea: 35:20:0d:ce:22:87:0d:b6:90:53:01:fb:0e:a0:8b: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.21.80.0/20 187.33.208.0/20 IPv6: 2804:360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53088 Signature Algorithm: sha256WithRSAEncryption 26:01:c1:cc:ad:06:08:43:e4:5a:9f:c8:42:05:b6:cc:d0:63: 0e:82:b3:f0:09:e9:d5:21:32:55:6b:b2:0d:4c:77:1b:3e:fa: 3f:b5:7a:5d:ae:41:e7:85:f2:a9:39:ea:7a:30:6f:56:68:f5: 79:01:4f:08:ec:bb:78:9e:ff:db:c5:c1:19:37:02:e6:17:00: 24:f1:81:d0:a8:14:3d:8d:da:ef:f9:0e:c4:2a:7f:82:fb:24: bc:b0:31:08:80:66:af:71:a6:33:22:c0:4e:21:d9:fa:31:d9: c6:3e:c7:9a:96:d0:7d:3b:af:06:73:78:b7:e8:fd:d9:d1:b6: 80:0f:cb:f0:b1:6a:ef:7e:5a:a7:52:f0:b1:31:62:56:66:6c: 29:4d:28:a9:e8:a9:a9:bc:96:ba:6b:0a:c3:7d:34:7b:cb:e7: f8:fd:56:59:ba:9e:0b:3a:97:14:a8:25:b8:20:be:43:02:76: 23:23:88:9f:21:a1:01:1c:b9:3a:e5:63:e5:0d:50:6d:1b:cc: b7:53:9e:02:12:55:98:8d:da:b1:ae:b0:78:f8:ed:31:97:99: 17:89:73:26:19:c2:c2:97:86:7c:94:e5:bf:1a:dc:49:5c:4b: 92:1a:1d:64:90:1c:57:41:2d:0c:a2:74:2b:40:5a:5a:21:8e: 70:9f:3b:f1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBiX8aI3+a//tMg1iq5QMcOJZ8pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjYxNzE5NDVaFw0yNjAzMjUxNzI0NDVaMDMxMTAvBgNV BAMTKDQ4NTZGMUEzQjMwRDVDNzg4MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreNMhPW7qMVk5P0L2Lgh35XdV 7ilw0sbwUBiIO6DJHqHa+LNNhc5HG2HSUO8p7Hp569ohndWanjXNQ4Nikt42Tp2p D9/mjfzg5LQpulPw+AyjvOQnfx/qZhprDkqvCbFMiQv8f4ZBglUvxJp1RiJIio0d hVSALDYKnRJSeywWDjYEXq5wLwiyb5xdv2dsiZ7dcNfiKSjTeQiN44mH64tiZ62d vPpgQuNxhlSWyD91KsigPOZqotBrF8mcSpOWf7p/OR6x9i2sJl56+cuXDCtaxvdA DOudhs2msUkyi0g1VN/9sxd9KDEn5XBp52FM6jUgDc4ihw22kFMB+w6gi1F9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIVvGjsw1ceIHa hwGABeXUIEFPyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWNo ZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVj aGV5eFRuR0RudnV3enhNMzhGNHRvWUM3M1VIWjZVNml6VXlvUnJHc2d0LzAvNDg1 NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQyMDQxNEZDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsRVQAwQEuyHQMA0EAgACMAcDBQAoBANgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPYDANBgkqhkiG9w0BAQsFAAOCAQEAJgHBzK0G CEPkWp/IQgW2zNBjDoKz8Anp1SEyVWuyDUx3Gz76P7V6Xa5B54XyqTnqejBvVmj1 eQFPCOy7eJ7/28XBGTcC5hcAJPGB0KgUPY3a7/kOxCp/gvskvLAxCIBmr3GmMyLA TiHZ+jHZxj7HmpbQfTuvBnN4t+j92dG2gA/L8LFq735ap1LwsTFiVmZsKU0oqeip qbyWumsKw300e8vn+P1WWbqeCzqXFKgluCC+QwJ2IyOInyGhARy5OuVj5Q1QbRvM t1OeAhJVmI3asa6wePjtMZeZF4lzJhnCwpeGfJTlvxrcSVxLkhodZJAcV0EtDKJ0 K0BaWiGOcJ878Q== -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:17 2025 by rpki-client