$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer File: 847841B2315E0F72742EF9258D692AD085C734A9.cer (raw, json) Hash identifier: wh2iQ+FR5kyPXtwZgEv3f7m4omsTvqct7O9owfDkKp0= Subject key identifier: 84:78:41:B2:31:5E:0F:72:74:2E:F9:25:8D:69:2A:D0:85:C7:34:A9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 54D6B013D4D676118DB80FEDDC5FBB9CFCCE31B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.mft caRepository: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 13:41:07 +0000 Certificate not after: Wed 07 Oct 2026 13:46:07 +0000 Subordinate resources: AS: 264001 IP: 143.0.200.0/22 IP: 170.0.24.0/22 IP: 170.246.188.0/22 IP: 2804:2948::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d6:b0:13:d4:d6:76:11:8d:b8:0f:ed:dc:5f:bb:9c:fc:ce:31:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 13:41:07 2025 GMT Not After : Oct 7 13:46:07 2026 GMT Subject: CN=847841B2315E0F72742EF9258D692AD085C734A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9d:f5:5d:17:9b:0e:cc:f1:46:51:0b:0c:1c: dc:98:22:9a:73:48:1f:e4:a9:60:7e:48:11:af:63: 70:3d:6c:a5:ad:87:a4:dd:15:9d:28:61:78:52:66: e9:a5:f6:80:dc:a1:6d:71:40:17:d5:b2:89:39:6d: e4:22:2b:e2:43:cb:d4:7a:c0:2e:27:05:5d:18:bd: 15:f4:fd:25:a0:b7:83:46:59:27:f3:04:cb:ae:43: 85:a2:53:cc:5f:be:40:c5:b4:6e:f8:96:ee:16:68: ce:bc:ef:47:ed:44:76:f5:e1:07:eb:0b:c0:de:6f: ed:26:5e:ff:72:12:a8:c0:49:4a:d6:7a:12:cc:a6: cb:eb:55:43:87:cf:45:2b:76:43:dc:c7:50:15:37: dc:5c:18:79:e7:12:5f:10:17:60:a2:73:f4:6a:f3: 35:e1:14:62:a2:ab:1e:9d:cd:eb:2c:0a:07:fd:09: a6:32:c0:ec:93:8b:40:2c:33:24:81:58:e4:a4:e2: 5a:68:45:5b:4a:a6:ba:7d:9b:cd:75:03:74:f7:35: 0d:55:0f:6a:84:21:b6:50:de:71:69:ed:b2:82:a4: 51:58:02:87:5b:5b:06:6c:57:91:43:8c:7d:ce:83: 43:7e:8f:6d:f4:f7:d4:b0:65:09:a1:97:df:b3:77: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:78:41:B2:31:5E:0F:72:74:2E:F9:25:8D:69:2A:D0:85:C7:34:A9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.200.0/22 170.0.24.0/22 170.246.188.0/22 IPv6: 2804:2948::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264001 Signature Algorithm: sha256WithRSAEncryption a8:77:bf:91:1d:f6:15:92:85:8f:12:84:0f:d1:60:e6:7f:68: 36:c6:14:47:dc:72:43:47:e3:98:57:4e:03:b5:41:86:c7:3d: fd:e1:60:14:c3:a6:5d:1b:52:e5:9c:9c:25:fa:b0:f2:0a:be: 5e:7a:19:75:07:1b:95:6d:84:cd:0e:ba:c9:74:ae:c0:c2:8e: 4f:a8:74:c9:6b:2b:ae:e4:66:09:1d:f4:42:ab:bb:58:fa:ca: c2:01:b8:3b:a1:04:00:fb:90:79:45:65:31:f4:7e:cc:f5:5f: a9:ac:af:74:0d:d4:8e:44:66:99:4a:82:84:8c:7b:a2:4a:d9: aa:08:38:f0:5b:92:0c:3b:77:22:c2:d5:8f:14:21:d5:34:a0: 84:22:a0:07:14:0e:8e:a4:c8:be:54:ca:1f:f2:af:49:55:3b: 8a:c4:b2:b5:3a:9a:51:34:ee:93:cb:e8:89:0c:98:53:9f:c2: 20:af:97:aa:45:cd:ec:ac:3b:bb:89:b0:30:40:04:65:cd:57: 98:18:b4:86:b6:a8:e5:8d:d1:83:22:db:74:c5:70:1d:b9:fe: b2:37:d8:07:01:e5:63:fd:c3:b4:7d:35:31:e5:7e:78:e9:50: 40:d5:92:48:c2:33:2c:ef:84:1c:b2:7d:27:ac:3f:02:07:5b: 30:bd:e3:ad -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUVNawE9TWdhGNuA/t3F+7nPzOMbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDgxMzQxMDdaFw0yNjEwMDcxMzQ2MDdaMDMxMTAvBgNV BAMTKDg0Nzg0MUIyMzE1RTBGNzI3NDJFRjkyNThENjkyQUQwODVDNzM0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnfVdF5sOzPFGUQsMHNyYIppz SB/kqWB+SBGvY3A9bKWth6TdFZ0oYXhSZuml9oDcoW1xQBfVsok5beQiK+JDy9R6 wC4nBV0YvRX0/SWgt4NGWSfzBMuuQ4WiU8xfvkDFtG74lu4WaM6870ftRHb14Qfr C8Deb+0mXv9yEqjASUrWehLMpsvrVUOHz0UrdkPcx1AVN9xcGHnnEl8QF2Cic/Rq 8zXhFGKiqx6dzessCgf9CaYywOyTi0AsMySBWOSk4lpoRVtKprp9m811A3T3NQ1V D2qEIbZQ3nFp7bKCpFFYAodbWwZsV5FDjH3Og0N+j23099SwZQmhl9+zd5xbAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEeEGyMV4PcnQu +SWNaSrQhcc0qTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREc5 cURBZHZQbkJxMnJNeFQ4NEVOUG51WU5RRzZ5RDlyS1NYeDNrNmlCOGovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RH OXFEQWR2UG5CcTJyTXhUODRFTlBudVlOUUc2eUQ5cktTWHgzazZpQjhqLzAvODQ3 ODQxQjIzMTVFMEY3Mjc0MkVGOTI1OEQ2OTJBRDA4NUM3MzRBOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCjwDIAwQCqgAYAwQCqva8MA0EAgACMAcDBQAoBClI MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHQTANBgkqhkiG9w0BAQsFAAOCAQEA qHe/kR32FZKFjxKED9Fg5n9oNsYUR9xyQ0fjmFdOA7VBhsc9/eFgFMOmXRtS5Zyc Jfqw8gq+XnoZdQcblW2EzQ66yXSuwMKOT6h0yWsrruRmCR30Qqu7WPrKwgG4O6EE APuQeUVlMfR+zPVfqayvdA3UjkRmmUqChIx7okrZqgg48FuSDDt3IsLVjxQh1TSg hCKgBxQOjqTIvlTKH/KvSVU7isSytTqaUTTuk8voiQyYU5/CIK+XqkXN7Kw7u4mw MEAEZc1XmBi0hrao5Y3RgyLbdMVwHbn+sjfYBwHlY/3DtH01MeV+eOlQQNWSSMIz LO+EHLJ9J6w/AgdbML3jrQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:00:21 2025 by rpki-client