$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer File: 5704C8A4F0A08E97025D71F1C624C9280EDADDD4.cer (raw, json) Hash identifier: SBctTskzncYS1XEDYn2rVHxIHKLrOJAoUyj3zF9adiI= Subject key identifier: 57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A42BA8BA2E0EEAE9B6FDF01F7E8429822B98CF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft caRepository: rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 21:03:35 +0000 Certificate not after: Fri 03 Jul 2026 21:08:35 +0000 Subordinate resources: AS: 266071 IP: 45.4.120.0/22 IP: 2804:3a1c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:42:ba:8b:a2:e0:ee:ae:9b:6f:df:01:f7:e8:42:98:22:b9:8c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 4 21:03:35 2025 GMT Not After : Jul 3 21:08:35 2026 GMT Subject: CN=5704C8A4F0A08E97025D71F1C624C9280EDADDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:cf:da:fa:67:a9:0c:44:53:cc:f6:86:ae: 3a:70:63:c5:3c:66:a3:19:8e:50:51:e5:3f:2e:e7: 3f:5f:ae:cf:05:43:ab:c3:00:d5:e9:66:f7:88:d7: f2:40:c2:a4:40:19:e8:af:50:36:f5:b1:de:0f:12: 8a:26:f9:92:c0:f8:f2:e3:6d:b4:32:c5:7e:5f:87: 2a:ed:fa:2a:87:d8:05:32:5f:ab:1c:26:f9:c8:e8: aa:e6:be:bf:37:de:4d:72:b0:98:33:1c:d5:d3:20: ea:fa:a9:df:65:d6:aa:b1:f0:0c:de:5f:5a:80:15: 7e:26:2e:dc:4f:2d:a7:27:16:46:bf:47:de:63:11: bf:c5:e1:fd:7d:9c:96:4d:1a:76:bc:d2:50:87:8e: fa:e3:2b:6a:32:a9:2c:88:0b:ef:f9:18:5a:0f:b8: 9d:71:e6:03:2e:37:e7:a9:e2:30:74:a2:03:4f:d1: d3:8f:03:04:ad:c2:ec:76:3c:fd:c8:db:23:c2:11: c9:cf:61:96:55:6e:d0:01:49:50:9d:04:e4:d8:b7: de:45:fc:5f:a6:69:8d:00:86:53:25:d2:25:90:15: 15:d6:a7:77:07:62:89:6f:c7:68:b4:66:8f:d8:25: 58:e3:e0:f8:10:82:7f:57:3f:b0:a7:5a:80:ab:f2: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:04:C8:A4:F0:A0:8E:97:02:5D:71:F1:C6:24:C9:28:0E:DA:DD:D4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/1/5704C8A4F0A08E97025D71F1C624C9280EDADDD4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.120.0/22 IPv6: 2804:3a1c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266071 Signature Algorithm: sha256WithRSAEncryption 48:70:2a:1c:11:ee:91:0d:c6:1d:d1:0d:09:64:bf:cd:88:36: 9b:8a:f8:c8:46:8e:59:e4:6d:8b:eb:cc:3d:a6:d7:74:cc:24: 4b:a8:32:2d:c5:fc:c5:de:81:9b:4c:00:20:66:8a:69:26:d8: 86:ca:8f:51:4e:74:25:df:8c:99:1c:e7:72:0c:14:99:7b:92: 7d:73:9d:90:52:88:2b:bf:54:f2:7f:df:b8:5a:e5:1b:76:c0: ca:d6:ec:28:a8:87:27:3f:d0:2f:85:5d:28:2e:e5:47:79:e5: fa:07:6e:d9:42:49:23:b4:11:2d:43:94:6c:02:4c:3b:28:80: 96:eb:7a:f2:ec:d6:8e:57:ff:f1:e9:3a:fd:e5:f2:5f:4c:19: 51:8c:f8:7e:cc:ba:49:3b:2d:fc:6b:08:97:78:73:86:68:41: db:a9:55:94:76:90:38:31:88:ae:45:56:4d:5b:3e:75:48:36: 17:06:7e:0b:eb:fd:45:e4:eb:ca:3e:df:f3:c4:3c:61:4f:fc: d2:8a:b0:fc:f9:e7:fd:ae:38:c0:8b:9e:30:45:05:75:d4:c8: 2a:fc:c0:08:1c:81:5e:52:24:29:a3:45:b1:0c:4c:29:3d:a1: b8:fc:6c:2c:68:ae:1a:df:69:bf:1a:62:8f:46:0d:06:c6:2d: 3d:c2:80:ed -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOkK6i6Lg7q6bb98B9+hCmCK5jPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDQyMTAzMzVaFw0yNjA3MDMyMTA4MzVaMDMxMTAvBgNV BAMTKDU3MDRDOEE0RjBBMDhFOTcwMjVENzFGMUM2MjRDOTI4MEVEQURERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFs/a+mepDERTzPaGrjpwY8U8 ZqMZjlBR5T8u5z9frs8FQ6vDANXpZveI1/JAwqRAGeivUDb1sd4PEoom+ZLA+PLj bbQyxX5fhyrt+iqH2AUyX6scJvnI6Krmvr833k1ysJgzHNXTIOr6qd9l1qqx8Aze X1qAFX4mLtxPLacnFka/R95jEb/F4f19nJZNGna80lCHjvrjK2oyqSyIC+/5GFoP uJ1x5gMuN+ep4jB0ogNP0dOPAwStwux2PP3I2yPCEcnPYZZVbtABSVCdBOTYt95F /F+maY0AhlMl0iWQFRXWp3cHYolvx2i0Zo/YJVjj4PgQgn9XP7CnWoCr8gXLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXBMik8KCOlwJd cfHGJMkoDtrd1DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2ZF VjNHUngyQU5OY2lWOVJoTXhiUlM5YU5VdXBwTkdmV0htbmoycWhydlcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdm RVYzR1J4MkFOTmNpVjlSaE14YlJTOWFOVXVwcE5HZldIbW5qMnFocnZXLzEvNTcw NEM4QTRGMEEwOEU5NzAyNUQ3MUYxQzYyNEM5MjgwRURBRERENC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQR4MA0EAgACMAcDBQAoBDocMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPVzANBgkqhkiG9w0BAQsFAAOCAQEASHAqHBHukQ3GHdEN CWS/zYg2m4r4yEaOWeRti+vMPabXdMwkS6gyLcX8xd6Bm0wAIGaKaSbYhsqPUU50 Jd+MmRzncgwUmXuSfXOdkFKIK79U8n/fuFrlG3bAytbsKKiHJz/QL4VdKC7lR3nl +gdu2UJJI7QRLUOUbAJMOyiAlut68uzWjlf/8ek6/eXyX0wZUYz4fsy6STst/GsI l3hzhmhB26lVlHaQODGIrkVWTVs+dUg2FwZ+C+v9ReTryj7f88Q8YU/80oqw/Pnn /a44wIueMEUFddTIKvzACByBXlIkKaNFsQxMKT2huPxsLGiuGt9pvxpij0YNBsYt PcKA7Q== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:05 2025 by rpki-client