$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer File: B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer (raw, json) Hash identifier: WwBurT7Rx/zQ9cfYyAz31nLx7nqz3mOUHmWjAJXWOi4= Subject key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75D2945A02B7356962C4FCFFC92C9E4F70645BDC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft caRepository: rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:15 +0000 Certificate not after: Wed 04 Mar 2026 18:41:15 +0000 Subordinate resources: AS: 61855 IP: 131.0.4.0/22 IP: 2804:1a58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d2:94:5a:02:b7:35:69:62:c4:fc:ff:c9:2c:9e:4f:70:64:5b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:15 2025 GMT Not After : Mar 4 18:41:15 2026 GMT Subject: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:bd:42:94:e8:8f:db:44:32:de:19:bd:cf: d7:3b:55:7b:42:25:81:05:6d:2a:3e:8a:2a:f8:fe: 1c:94:52:35:81:4e:de:c8:40:86:b0:4d:09:6c:b2: 59:bd:20:e3:7b:9b:c4:6c:35:f9:56:4f:47:49:ba: 1c:df:bc:02:a2:45:e0:ec:27:5b:97:e2:ab:5a:1a: ea:93:b8:8f:14:19:ed:5c:16:13:cb:40:64:b0:65: 47:8b:ce:c5:4d:4d:b4:12:42:6f:3a:38:88:ae:ca: 0e:87:20:99:06:a7:aa:9f:81:66:c0:fc:38:2b:cb: 76:c3:c7:a9:a6:22:77:1f:1d:e6:3c:ab:b6:ff:bc: 95:d4:b4:21:97:46:75:cb:dd:d6:82:5c:0b:e9:96: c2:a3:fe:60:c1:ca:f2:ef:6d:eb:ca:1a:59:cf:5f: c7:89:5a:de:d2:71:40:81:9f:6d:fd:62:50:3e:32: 74:7d:c4:ea:0e:43:4d:cd:7e:91:cd:07:8c:59:ba: 08:13:d4:63:0e:21:da:76:9a:7a:dd:b0:74:f2:72: 20:9d:ca:4e:67:13:62:aa:bb:59:f7:b5:0c:5e:0c: a2:04:41:f7:71:3e:a3:90:f5:bf:5d:97:8c:02:53: ad:09:ae:9f:b6:72:99:55:0b:5c:c7:48:9c:9b:a2: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.4.0/22 IPv6: 2804:1a58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61855 Signature Algorithm: sha256WithRSAEncryption a7:27:68:ca:23:9c:9a:8d:e6:4d:7f:f1:62:a5:af:9a:e0:05: 90:ad:01:12:fb:42:b9:e9:c8:8d:8e:57:42:5d:4b:8e:d6:a6: f2:d3:40:5c:e1:3b:b7:3a:d2:2a:5b:98:ba:53:9f:a5:72:2d: 33:26:01:92:41:2e:e6:a7:b4:ef:dc:28:f6:7c:1a:e5:94:50: 97:61:2e:8c:f6:5a:d6:1a:0a:dd:50:1d:b5:49:ad:fb:6e:1f: e6:18:83:a5:0b:9c:40:ce:21:fc:a6:70:1b:25:4a:bf:50:92: 91:65:37:52:b1:bf:2e:f9:d3:fe:d6:35:3b:55:85:f1:f0:dd: 65:ce:82:3d:07:c1:e6:a6:e9:d6:ef:cb:25:df:cf:5b:d1:df: d3:e7:cb:60:f1:21:51:9b:db:91:e8:3e:66:17:1a:81:d0:12: e4:d2:7f:65:31:60:3b:6d:ae:a3:3f:53:44:f7:c0:bd:89:86: 30:ef:d7:f6:da:15:84:b5:d0:e7:ef:a6:f7:be:88:ad:d6:1e: 36:b1:12:44:3f:e8:23:46:dd:c6:e6:64:84:5d:86:0d:31:a7: 67:ba:0a:c5:ef:cd:88:9e:27:b0:f3:0a:f1:b0:d3:91:34:36: 58:46:00:b4:1a:7b:2a:be:45:b3:84:d9:13:1b:74:11:f7:66: 3b:9e:37:02 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUddKUWgK3NWlixPz/ySyeT3BkW9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2MTVaFw0yNjAzMDQxODQxMTVaMDMxMTAvBgNV BAMTKEI0NTY4M0MxQkI0MzQ0QkVBQ0Q3MjgzMERENjE3NUQzMTg4RDhCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXr1ClOiP20Qy3hm9z9c7VXtC JYEFbSo+iir4/hyUUjWBTt7IQIawTQlsslm9ION7m8RsNflWT0dJuhzfvAKiReDs J1uX4qtaGuqTuI8UGe1cFhPLQGSwZUeLzsVNTbQSQm86OIiuyg6HIJkGp6qfgWbA /Dgry3bDx6mmIncfHeY8q7b/vJXUtCGXRnXL3daCXAvplsKj/mDByvLvbevKGlnP X8eJWt7ScUCBn239YlA+MnR9xOoOQ03NfpHNB4xZuggT1GMOIdp2mnrdsHTyciCd yk5nE2Kqu1n3tQxeDKIEQfdxPqOQ9b9dl4wCU60Jrp+2cplVC1zHSJybohw9AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0VoPBu0NEvqzX KDDdYXXTGI2LCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRT UEtMdTh2ZGRVdHk0cXMybngxYmE0RFEzaG1qb2VEaTl4UW1YY3BnQjgvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRT UEtMdTh2ZGRVdHk0cXMybngxYmE0RFEzaG1qb2VEaTl4UW1YY3BnQjgvMS9CNDU2 ODNDMUJCNDM0NEJFQUNENzI4MzBERDYxNzVEMzE4OEQ4QjBBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKDAAQwDQQCAAIwBwMFACgEGlgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPGfMA0GCSqGSIb3DQEBCwUAA4IBAQCnJ2jKI5yajeZNf/Fi pa+a4AWQrQES+0K56ciNjldCXUuO1qby00Bc4Tu3OtIqW5i6U5+lci0zJgGSQS7m p7Tv3Cj2fBrllFCXYS6M9lrWGgrdUB21Sa37bh/mGIOlC5xAziH8pnAbJUq/UJKR ZTdSsb8u+dP+1jU7VYXx8N1lzoI9B8HmpunW78sl389b0d/T58tg8SFRm9uR6D5m FxqB0BLk0n9lMWA7ba6jP1NE98C9iYYw79f22hWEtdDn76b3voit1h42sRJEP+gj Rt3G5mSEXYYNMadnugrF782Iniew8wrxsNORNDZYRgC0GnsqvkWzhNkTG3QR92Y7 njcC -----END CERTIFICATE-----Generated at Mon Nov 3 05:35:16 2025 by rpki-client