$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer (raw, json) Hash identifier: tPW2amBxqsIw8hlAJMdMAHWaOpN/AkFHKiVqt6ANMc0= Subject key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 310E250DD06BCD8116F41275373320E13A6CBE4C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft caRepository: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 13:23:38 +0000 Certificate not after: Fri 19 Mar 2027 13:28:38 +0000 Subordinate resources: AS: 264182 IP: 138.97.104.0/22 IP: 2804:23c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Mar 2026 23:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0e:25:0d:d0:6b:cd:81:16:f4:12:75:37:33:20:e1:3a:6c:be:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 13:23:38 2026 GMT Not After : Mar 19 13:28:38 2027 GMT Subject: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:65:10:2f:da:ce:e5:42:52:b9:41:86:ec: 42:3b:e3:9f:87:52:c9:aa:f3:f9:66:de:8c:30:66: 2f:c5:00:a3:f3:d7:aa:07:8b:b2:cf:05:92:b3:3d: 87:45:50:ff:3c:96:c1:ed:1b:7d:59:8e:3e:03:76: 9d:4a:7a:cd:2e:9d:69:ee:06:1b:b6:3b:aa:7c:8f: 5e:77:f3:f9:b0:1e:56:af:ea:0a:f2:cb:91:ce:ad: 09:e3:68:0f:b4:d7:d6:e7:18:84:22:6f:4d:14:2d: c0:f1:de:61:e7:a3:99:e1:57:7f:98:8f:4e:65:bd: 47:cb:24:94:a3:36:31:3a:a2:75:0c:07:6d:60:cc: 85:a0:6d:66:b4:5d:a2:5b:84:2b:9c:96:70:e8:41: f9:b6:e6:20:57:48:39:0d:ca:98:be:df:37:0e:87: 08:de:81:20:da:bf:32:0b:20:c2:20:6e:1a:b9:b6: 52:96:d2:ef:d8:a0:78:26:74:33:8e:83:ee:3a:0e: 56:1d:4e:40:8b:e4:91:3c:8b:0e:53:01:26:d0:ca: 25:9c:ae:d2:ef:53:52:ff:7d:3f:33:58:0a:ba:9a: 25:f8:55:63:5e:29:ff:85:96:38:6d:80:2a:96:b8: 81:4a:b9:a9:7f:56:c7:93:3b:6e:7b:f1:d4:66:94: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.104.0/22 IPv6: 2804:23c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264182 Signature Algorithm: sha256WithRSAEncryption 26:2f:0c:b5:3c:ab:60:de:ac:a9:83:ee:1b:c7:62:b7:0c:bb: 2d:01:28:3c:bb:81:3e:f5:bf:1d:1a:4b:2c:08:1c:0c:17:ba: 40:d3:49:69:52:05:8b:33:19:7a:26:41:66:aa:b6:7e:90:84: 05:9e:21:e5:93:27:18:3c:a9:c8:b6:60:49:3a:ea:1f:a2:75: 90:01:ca:cd:3b:e1:5c:99:ae:ec:e5:67:cc:66:6b:be:b4:9c: 8b:a3:e5:90:12:fa:b6:32:70:aa:42:53:38:8f:22:6c:1d:04: 5b:42:71:c1:e2:d4:5f:59:5d:19:7e:e9:e0:bb:02:b9:9e:33: 6d:ae:a0:94:41:de:36:a6:41:c2:3a:45:df:7c:36:35:7f:29: 6b:d6:5c:02:d0:e5:37:94:a2:a9:19:9b:f7:b2:88:c8:14:88: 89:18:cc:e6:37:c0:6f:db:a4:cf:96:27:fc:01:a6:3a:90:fb: 03:e7:2d:12:97:80:3a:d4:a9:f4:8d:a6:b0:5e:0c:44:47:68: fa:8e:fc:31:ff:08:bb:da:cd:f1:0d:57:b9:24:37:62:7a:3b: 80:1a:a1:02:1c:78:3b:1c:be:0b:a7:c5:2e:94:0a:a3:61:fa: c0:87:10:78:26:7a:1a:0c:3a:2d:b7:f8:b8:24:58:87:f0:9d: b6:e0:25:67 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMQ4lDdBrzYEW9BJ1NzMg4TpsvkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjAxMzIzMzhaFw0yNzAzMTkxMzI4MzhaMDMxMTAvBgNV BAMTKDcxMjVCRURERkVDMjlDMEE0Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA2UQL9rO5UJSuUGG7EI745+H Usmq8/lm3owwZi/FAKPz16oHi7LPBZKzPYdFUP88lsHtG31Zjj4Ddp1Kes0unWnu Bhu2O6p8j1538/mwHlav6gryy5HOrQnjaA+019bnGIQib00ULcDx3mHno5nhV3+Y j05lvUfLJJSjNjE6onUMB21gzIWgbWa0XaJbhCuclnDoQfm25iBXSDkNypi+3zcO hwjegSDavzILIMIgbhq5tlKW0u/YoHgmdDOOg+46DlYdTkCL5JE8iw5TASbQyiWc rtLvU1L/fT8zWAq6miX4VWNeKf+FljhtgCqWuIFKual/VseTO2578dRmlCVnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxJb7d/sKcCkz1 keXrQIOL/jx6wTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEhn SnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hI Z0pxeG9kWnRudTJLaXJUaFI4c3A3S1F2RENyaVhRSkVmUGZGQzVUYnpLLzEvNzEy NUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJGRTNDN0FDMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCimFoMA0EAgACMAcDBQAoBCPIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQH9jANBgkqhkiG9w0BAQsFAAOCAQEAJi8MtTyrYN6sqYPu G8ditwy7LQEoPLuBPvW/HRpLLAgcDBe6QNNJaVIFizMZeiZBZqq2fpCEBZ4h5ZMn GDypyLZgSTrqH6J1kAHKzTvhXJmu7OVnzGZrvrSci6PlkBL6tjJwqkJTOI8ibB0E W0JxweLUX1ldGX7p4LsCuZ4zba6glEHeNqZBwjpF33w2NX8pa9ZcAtDlN5SiqRmb 97KIyBSIiRjM5jfAb9ukz5Yn/AGmOpD7A+ctEpeAOtSp9I2msF4MREdo+o78Mf8I u9rN8Q1XuSQ3Yno7gBqhAhx4Oxy+C6fFLpQKo2H6wIcQeCZ6Ggw6Lbf4uCRYh/Cd tuAlZw== -----END CERTIFICATE-----Generated at Tue Mar 24 00:21:45 2026 by rpki-client