$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer File: C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer (raw, json) Hash identifier: YTeRTXR8O6DJYaqBg7IrlqlOFCdnJxzNr91USp+5kHQ= Subject key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F5765BABE8E51BFC355FC8B4E6F798C63111758 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft caRepository: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 13 May 2025 18:43:16 +0000 Certificate not after: Tue 12 May 2026 18:48:16 +0000 Subordinate resources: AS: 61900 IP: 138.97.32.0/22 IP: 170.247.4.0/22 IP: 177.74.172.0/22 IP: 191.243.8.0/22 IP: 2804:12a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:57:65:ba:be:8e:51:bf:c3:55:fc:8b:4e:6f:79:8c:63:11:17:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 13 18:43:16 2025 GMT Not After : May 12 18:48:16 2026 GMT Subject: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:c5:99:dd:7b:a0:34:52:a9:9b:48:7e:55: f0:38:61:74:08:25:eb:d9:d4:09:78:fa:84:ce:14: 6b:ef:84:2b:10:11:fe:2d:da:9f:50:d7:cb:55:97: 30:22:dc:29:59:b2:4c:b5:3e:e2:73:8b:7d:d0:5e: f2:eb:34:84:33:0b:80:1d:38:ac:56:7e:5d:39:a1: 3f:e0:2d:72:9b:16:ae:fd:51:fe:ab:61:72:d5:24: 9a:70:3a:23:8b:72:54:03:ab:46:1d:ef:4e:9a:62: 14:f7:2d:f9:bf:e1:56:fa:55:b0:34:94:f8:07:29: 6f:44:83:b8:2e:da:5d:f5:c8:16:a3:7a:a8:f6:e8: ea:14:37:27:b4:d0:20:0e:87:f7:c0:1c:6a:15:bb: 94:03:4c:af:dd:5b:58:9b:0d:7b:7d:08:a4:99:72: 85:a7:f1:01:ba:2e:13:de:f1:fe:14:70:98:72:ab: 0d:d6:0e:ff:f2:44:ec:34:06:99:20:8a:92:e0:f4: 2c:44:52:f7:a1:be:f8:00:c0:bf:cc:25:d8:11:95: 07:61:a6:22:6e:07:7e:c2:66:48:77:15:f3:05:2f: 85:eb:9c:52:2e:04:ce:be:b5:71:52:b1:c6:d1:1b: b2:ff:aa:b7:68:8e:55:68:0e:ba:af:98:6f:c5:68: e7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.32.0/22 170.247.4.0/22 177.74.172.0/22 191.243.8.0/22 IPv6: 2804:12a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61900 Signature Algorithm: sha256WithRSAEncryption 78:33:ad:97:be:58:9e:05:e1:bb:a1:82:86:01:a2:7c:9a:5b: 69:13:a4:03:4d:62:7e:16:7c:39:58:c2:b5:c1:42:9e:ab:a8: 76:0b:c1:61:47:25:d5:24:51:f0:2a:f1:91:0c:16:c5:55:3d: 6c:0a:4c:13:6f:38:a0:1a:32:bf:68:d2:8e:8b:c7:c8:8e:ac: ca:be:90:3a:32:b0:b4:94:41:ac:19:8f:33:b4:31:42:72:bc: e7:39:36:cc:69:7a:b1:4f:6d:c3:58:1a:51:43:85:90:8c:7b: 41:54:b7:e8:e0:fb:55:c4:d6:e1:f4:4a:55:e7:95:12:3f:9c: b2:28:10:52:d6:b1:bf:f9:5d:ca:2d:7a:ab:de:61:59:32:21: 3e:d1:ac:ba:17:f5:5d:ee:b5:f2:b5:c9:6c:4b:49:da:d6:ff: ed:9a:07:b0:73:63:d0:20:f9:c0:89:0d:c0:aa:41:b3:fc:74: 73:87:09:ee:43:51:af:e2:e3:21:fa:42:6f:74:a6:f4:81:6d: e3:96:a9:74:0f:d9:60:5c:88:25:ae:37:5f:b9:fd:66:68:de: f2:2d:28:bf:49:d1:62:a4:4f:56:5e:ec:4d:59:46:74:ca:c0: f8:a6:50:48:0b:4e:92:1a:64:96:83:0f:4c:7f:3a:ac:86:a6: 01:a1:f1:e6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUD1dlur6OUb/DVfyLTm95jGMRF1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTMxODQzMTZaFw0yNjA1MTIxODQ4MTZaMDMxMTAvBgNV BAMTKEMwRDVGM0FDMUY5NjRDNkExQTZGMzdGMzlFNUVBNTI3QzYzOThDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8MWZ3XugNFKpm0h+VfA4YXQI JevZ1Al4+oTOFGvvhCsQEf4t2p9Q18tVlzAi3ClZsky1PuJzi33QXvLrNIQzC4Ad OKxWfl05oT/gLXKbFq79Uf6rYXLVJJpwOiOLclQDq0Yd706aYhT3Lfm/4Vb6VbA0 lPgHKW9Eg7gu2l31yBajeqj26OoUNye00CAOh/fAHGoVu5QDTK/dW1ibDXt9CKSZ coWn8QG6LhPe8f4UcJhyqw3WDv/yROw0BpkgipLg9CxEUvehvvgAwL/MJdgRlQdh piJuB37CZkh3FfMFL4XrnFIuBM6+tXFSscbRG7L/qrdojlVoDrqvmG/FaOeHAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA1fOsH5ZMahpv N/OeXqUnxjmM/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG80 MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQSlgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRv NDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAvQzBE NUYzQUMxRjk2NEM2QTFBNkYzN0YzOUU1RUE1MjdDNjM5OENGQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCimEgAwQCqvcEAwQCsUqsAwQCv/MIMA0EAgACMAcD BQAoBBKgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDxzDANBgkqhkiG9w0BAQsF AAOCAQEAeDOtl75YngXhu6GChgGifJpbaROkA01ifhZ8OVjCtcFCnquodgvBYUcl 1SRR8CrxkQwWxVU9bApME284oBoyv2jSjovHyI6syr6QOjKwtJRBrBmPM7QxQnK8 5zk2zGl6sU9tw1gaUUOFkIx7QVS36OD7VcTW4fRKVeeVEj+csigQUtaxv/ldyi16 q95hWTIhPtGsuhf1Xe618rXJbEtJ2tb/7ZoHsHNj0CD5wIkNwKpBs/x0c4cJ7kNR r+LjIfpCb3Sm9IFt45apdA/ZYFyIJa43X7n9Zmje8i0ov0nRYqRPVl7sTVlGdMrA +KZQSAtOkhpkloMPTH86rIamAaHx5g== -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:44 2025 by rpki-client