$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer File: 4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer (raw, json) Hash identifier: HCNSaZRYjURv3eqm+8Xl/NQAQVPxZivGX8RCzt0ayJo= Subject key identifier: 4C:59:5B:73:7E:C6:F6:BB:05:5D:A0:AA:92:C7:7B:32:CB:CA:5A:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D3B80F822676DD6B441B56489CAE9394F2EF6EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.mft caRepository: rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 02:00:35 +0000 Certificate not after: Thu 17 Sep 2026 02:05:35 +0000 Subordinate resources: AS: 61604 IP: 201.131.98.0/23 IP: 2804:7754::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 18:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3b:80:f8:22:67:6d:d6:b4:41:b5:64:89:ca:e9:39:4f:2e:f6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 02:00:35 2025 GMT Not After : Sep 17 02:05:35 2026 GMT Subject: CN=4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:b2:4b:35:33:10:9e:8c:08:07:d2:49:d7: d0:77:7c:d9:1d:92:e9:c2:4f:8f:bf:4c:ae:3f:43: ab:c0:f5:c3:f3:db:e2:4e:29:35:a2:3a:e5:23:5d: aa:d4:00:a4:c8:46:e4:f1:92:b7:bb:0f:56:08:c7: 16:99:17:9b:13:e7:7a:7e:98:a8:5d:dc:a0:3e:7f: b4:23:7c:64:7f:0a:e9:f4:56:0f:f9:2b:0d:8a:36: 5e:ab:a3:1c:7d:3f:9f:de:51:a0:99:e3:1c:aa:a7: 03:74:00:54:0f:2c:81:cc:2e:79:26:3d:89:4d:3a: 83:8e:97:9c:e9:42:df:2e:0f:5d:d8:de:ba:c7:7c: b0:d8:e1:52:27:c9:92:4a:62:a3:79:38:c8:dd:db: 1a:ec:5a:e8:a3:41:37:45:ec:4b:97:45:cf:cb:60: b8:6d:4e:71:04:e7:48:b1:38:cf:58:ef:0b:d2:41: e7:3d:d3:fa:8e:5c:fe:2f:77:6d:4d:b3:89:c7:72: a6:cc:99:07:fa:9f:90:51:d0:55:ec:9d:9d:47:82: 09:a2:50:cf:be:45:f6:fe:05:66:41:40:23:a7:15: 5a:de:3d:4e:de:ab:da:76:25:fc:3c:54:84:0f:5f: 54:8f:ed:55:b6:95:28:40:6b:a0:a1:da:9d:ca:a7: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:59:5B:73:7E:C6:F6:BB:05:5D:A0:AA:92:C7:7B:32:CB:CA:5A:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.98.0/23 IPv6: 2804:7754::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61604 Signature Algorithm: sha256WithRSAEncryption 40:13:66:aa:ff:12:51:e4:24:44:8d:b4:a5:59:ff:ba:cc:6d: da:02:43:fd:25:27:f7:4d:e5:86:0c:11:47:9c:b7:c6:dd:aa: 3c:ed:24:f8:56:de:db:1d:c0:70:61:6f:dd:1f:9f:42:13:c6: 85:fd:2f:b1:b1:9e:95:20:c3:df:6f:eb:d6:1c:8b:90:6b:45: b0:19:40:3e:b4:09:c2:35:2c:a5:f4:e7:63:e5:e6:bf:d2:66: 9f:0a:16:82:5a:35:f1:06:da:7f:9d:00:d0:8f:50:4b:89:80: 01:19:da:d5:43:96:96:9f:5b:8a:7a:fa:b9:fd:ca:bd:db:a0: 7b:7b:92:d1:8c:f0:ae:39:23:5b:c0:5c:0b:8b:25:b3:fd:85: 81:88:f7:1e:13:cc:39:2c:27:02:22:1a:d1:54:6b:a6:8f:12: 45:ab:e6:83:8f:18:fc:1e:0d:30:0e:31:98:7f:cf:7c:c8:d2: 55:e4:90:62:90:e0:2a:cf:b6:b4:70:e3:0d:ae:2f:03:c5:44: ae:02:3b:17:af:8c:b0:8d:dd:16:0b:31:46:3a:ac:b6:f5:e8: 21:40:5a:c2:05:82:79:23:99:64:68:ff:7c:1a:db:ee:e3:23: fa:f5:08:3c:09:29:34:da:3b:1d:6e:bb:29:99:76:50:1e:9d: 51:d2:bf:78 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXTuA+CJnbda0QbVkicrpOU8u9uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgwMjAwMzVaFw0yNjA5MTcwMjA1MzVaMDMxMTAvBgNV BAMTKDRDNTk1QjczN0VDNkY2QkIwNTVEQTBBQTkyQzc3QjMyQ0JDQTVBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM0rJLNTMQnowIB9JJ19B3fNkd kunCT4+/TK4/Q6vA9cPz2+JOKTWiOuUjXarUAKTIRuTxkre7D1YIxxaZF5sT53p+ mKhd3KA+f7QjfGR/Cun0Vg/5Kw2KNl6roxx9P5/eUaCZ4xyqpwN0AFQPLIHMLnkm PYlNOoOOl5zpQt8uD13Y3rrHfLDY4VInyZJKYqN5OMjd2xrsWuijQTdF7EuXRc/L YLhtTnEE50ixOM9Y7wvSQec90/qOXP4vd21Ns4nHcqbMmQf6n5BR0FXsnZ1Hggmi UM++Rfb+BWZBQCOnFVrePU7eq9p2Jfw8VIQPX1SP7VW2lShAa6Ch2p3Kp7G/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMWVtzfsb2uwVd oKqSx3syy8pajTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFFk NHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZSTGcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RR ZDRxN0Jwc3RjTExtTGthckNZS2FEV2V1OUNwblN3WVdiYUJzTkVWUkxnLzAvNEM1 OTVCNzM3RUM2RjZCQjA1NURBMEFBOTJDNzdCMzJDQkNBNUE4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQByYNiMA0EAgACMAcDBQAoBHdUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDwpDANBgkqhkiG9w0BAQsFAAOCAQEAQBNmqv8SUeQkRI20 pVn/usxt2gJD/SUn903lhgwRR5y3xt2qPO0k+Fbe2x3AcGFv3R+fQhPGhf0vsbGe lSDD32/r1hyLkGtFsBlAPrQJwjUspfTnY+Xmv9JmnwoWglo18Qbaf50A0I9QS4mA ARna1UOWlp9binr6uf3Kvduge3uS0YzwrjkjW8BcC4sls/2FgYj3HhPMOSwnAiIa 0VRrpo8SRavmg48Y/B4NMA4xmH/PfMjSVeSQYpDgKs+2tHDjDa4vA8VErgI7F6+M sI3dFgsxRjqstvXoIUBawgWCeSOZZGj/fBrb7uMj+vUIPAkpNNo7HW67KZl2UB6d UdK/eA== -----END CERTIFICATE-----Generated at Fri Sep 19 16:01:52 2025 by rpki-client