$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer File: 98300A2AA67A942B94CBC198EA8F7537002C0480.cer (raw, json) Hash identifier: gegt9JAaUR1RdmAQcYQ5BWhTNwntLUiwxaQgTl5ozWM= Subject key identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6EAB6D1D1765F6BBE510E96426FE7289F363DD36 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft caRepository: rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:12 +0000 Certificate not after: Wed 04 Mar 2026 18:40:12 +0000 Subordinate resources: AS: 52996 IP: 138.117.104.0/22 IP: 186.232.247.0/24 IP: 2801:80:1f0::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ab:6d:1d:17:65:f6:bb:e5:10:e9:64:26:fe:72:89:f3:63:dd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:12 2025 GMT Not After : Mar 4 18:40:12 2026 GMT Subject: CN=98300A2AA67A942B94CBC198EA8F7537002C0480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:3a:74:b8:f1:59:bb:60:87:ee:01:9e:a7: e4:84:0c:b6:7f:cf:7f:6d:e3:83:78:cc:f3:34:de: f8:ce:d1:f7:b8:19:bd:de:74:49:b1:b0:e5:cc:ae: 7f:de:7e:28:74:fb:8d:c1:47:5d:71:53:ec:da:eb: e6:b8:f3:56:b5:78:5c:a5:37:f4:36:24:ff:da:5b: 88:f6:1a:2d:20:3f:03:6f:87:a0:bb:63:ba:7f:11: 7a:e3:df:4e:cb:cd:9a:e7:97:40:4c:5e:de:54:b3: ca:ea:6c:b8:a5:8b:54:24:e4:66:b1:66:8e:9a:b0: 4f:36:89:62:f5:6e:77:90:e3:72:a2:18:77:5c:e7: e9:87:ed:dc:13:bd:df:b4:22:28:98:44:6c:92:40: 4b:04:91:53:b3:3c:15:12:2d:5e:91:6f:01:76:7f: 40:10:e4:45:9d:3f:36:8d:f1:89:e5:69:d7:72:b5: 3d:35:0b:c1:74:f5:b6:31:9b:b2:92:b2:2b:4d:35: de:c1:0a:ad:50:59:1e:27:0d:13:6e:a4:dc:ab:93: 36:f2:6b:3d:1c:f7:8a:c2:16:cf:64:9d:ab:9e:fe: a7:95:f6:a2:66:ad:22:90:6e:50:d4:b8:fc:09:05: 4c:04:71:4d:2b:68:17:34:ba:d7:5f:ff:dc:a3:26: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.104.0/22 186.232.247.0/24 IPv6: 2801:80:1f0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52996 Signature Algorithm: sha256WithRSAEncryption 4f:29:00:31:06:71:de:a9:54:73:78:bf:23:3d:5c:a4:ad:b7: 81:6c:a4:30:d0:93:3a:7b:b0:a2:54:16:46:81:6d:9f:2d:55: d9:c1:ac:d4:81:ec:fa:25:46:62:ef:be:4e:50:57:36:73:6a: a4:f4:89:68:f0:1b:25:2f:10:33:80:47:a5:01:5c:d6:0d:6b: 4f:64:c8:be:c9:14:84:f5:f0:db:b2:16:50:18:ed:08:5b:5f: 94:6a:24:0a:94:09:a4:01:a4:6d:2f:9f:5f:ea:50:8d:19:33: 98:ed:06:a6:03:06:d0:6d:36:ed:9a:b4:46:9a:d7:b0:2b:df: ed:32:18:6e:a7:d1:5f:54:48:b9:e3:15:0f:fe:10:9a:09:ae: 2d:df:a7:57:f1:65:16:cf:f2:f6:56:1e:c6:ed:f7:bc:89:33: 3e:3e:82:36:36:70:57:9d:bc:1f:84:2d:ae:69:72:90:50:15: 9b:84:c3:14:cf:27:f5:e4:70:53:1c:e6:a5:43:09:c1:45:67: 36:8d:4c:e0:aa:d1:1f:55:60:02:9a:43:c0:63:ca:fd:86:98: af:14:0b:e0:5e:9f:bb:bb:99:cb:8d:b9:d7:9e:4c:01:e9:e2: c6:a1:af:7d:88:14:fb:20:5a:9c:51:7d:a4:c4:9d:66:9f:3f: b0:14:ca:2e -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUbqttHRdl9rvlEOlkJv5yifNj3TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MTJaFw0yNjAzMDQxODQwMTJaMDMxMTAvBgNV BAMTKDk4MzAwQTJBQTY3QTk0MkI5NENCQzE5OEVBOEY3NTM3MDAyQzA0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dzp0uPFZu2CH7gGep+SEDLZ/ z39t44N4zPM03vjO0fe4Gb3edEmxsOXMrn/efih0+43BR11xU+za6+a481a1eFyl N/Q2JP/aW4j2Gi0gPwNvh6C7Y7p/EXrj307LzZrnl0BMXt5Us8rqbLili1Qk5Gax Zo6asE82iWL1bneQ43KiGHdc5+mH7dwTvd+0IiiYRGySQEsEkVOzPBUSLV6RbwF2 f0AQ5EWdPzaN8YnladdytT01C8F09bYxm7KSsitNNd7BCq1QWR4nDRNupNyrkzby az0c94rCFs9knaue/qeV9qJmrSKQblDUuPwJBUwEcU0raBc0utdf/9yjJs9TAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYMAoqpnqUK5TL wZjqj3U3ACwEgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2dL WVJBdTdFNDVXOUVHcXprcktqeG9HZ1M1dW1NTTRMVTczbjZibXBjdncvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dn S1lSQXU3RTQ1VzlFR3F6a3JLanhvR2dTNXVtTU00TFU3M242Ym1wY3Z3LzEvOTgz MDBBMkFBNjdBOTQyQjk0Q0JDMTk4RUE4Rjc1MzcwMDJDMDQ4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTASBAIAATAMAwQCinVoAwQAuuj3MA8EAgACMAkDBwAoAQCAAfAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAM8EMA0GCSqGSIb3DQEBCwUAA4IBAQBPKQAx BnHeqVRzeL8jPVykrbeBbKQw0JM6e7CiVBZGgW2fLVXZwazUgez6JUZi775OUFc2 c2qk9Ilo8BslLxAzgEelAVzWDWtPZMi+yRSE9fDbshZQGO0IW1+UaiQKlAmkAaRt L59f6lCNGTOY7QamAwbQbTbtmrRGmtewK9/tMhhup9FfVEi54xUP/hCaCa4t36dX 8WUWz/L2Vh7G7fe8iTM+PoI2NnBXnbwfhC2uaXKQUBWbhMMUzyf15HBTHOalQwnB RWc2jUzgqtEfVWACmkPAY8r9hpivFAvgXp+7u5nLjbnXnkwB6eLGoa99iBT7IFqc UX2kxJ1mnz+wFMou -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:53 2025 by rpki-client