$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer File: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer (raw, json) Hash identifier: qaw3jGE+0AoRemPO1Qxu3WnZMCt80zJFc3SDZ7dxEyI= Subject key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 764865C586F9941D656916A98BB5CD09ED1B34C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft caRepository: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 19:54:56 +0000 Certificate not after: Wed 29 Apr 2026 19:59:56 +0000 Subordinate resources: AS: 271423 IP: 200.36.196.0/22 IP: 2804:7b4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:48:65:c5:86:f9:94:1d:65:69:16:a9:8b:b5:cd:09:ed:1b:34:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 19:54:56 2025 GMT Not After : Apr 29 19:59:56 2026 GMT Subject: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:ba:07:f9:e9:9b:7a:d4:64:3c:7e:c9:a1: e2:6a:78:bc:7e:14:02:fd:37:d0:8c:35:90:35:89: 36:cb:05:52:38:44:61:e2:a4:d6:a8:f6:c0:10:9b: 24:53:ca:1f:bf:8c:8b:70:c0:71:75:91:6e:86:61: 49:9d:69:e8:d7:b2:3d:04:d3:6c:c4:5e:8d:ca:9c: 1e:55:db:af:b3:52:3c:3c:fc:82:54:50:7c:5c:16: b5:4c:ae:ea:0a:e1:2b:0d:18:8b:c7:9a:fb:b9:85: c7:bf:de:47:98:ca:7a:11:90:93:ec:46:93:6c:61: 14:92:7c:3a:8e:84:37:9c:26:36:70:be:ca:55:01: 48:46:69:bf:92:b6:be:86:41:5b:26:b5:91:37:63: c2:fc:08:f5:ba:16:78:78:23:50:cf:f1:85:3b:bf: d9:04:bc:ae:02:bd:76:a6:ca:d8:e4:65:e2:a3:65: 57:ce:cf:a7:f1:a9:7f:cd:29:f7:1c:fd:73:6f:27: cf:00:0f:45:c9:1e:90:e0:23:24:ea:e6:9d:a2:71: b0:93:46:30:cc:a8:f8:4c:d8:3b:bc:42:04:84:05: c8:10:82:73:ec:15:41:a7:6a:28:33:75:d4:37:ce: c9:db:16:e6:f7:25:f6:e3:0d:3c:fd:14:44:5f:c8: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.36.196.0/22 IPv6: 2804:7b4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271423 Signature Algorithm: sha256WithRSAEncryption 43:7d:8b:95:bc:00:55:91:9c:94:fe:e1:ff:2a:e8:97:f2:b8: 8b:f7:d3:fa:f3:da:25:95:c0:89:82:bf:ed:d1:89:43:72:9e: a1:2f:fb:54:e8:d6:7d:23:d3:68:da:83:2e:ab:75:f1:bc:2c: ae:8b:44:a9:ad:39:ae:3d:4a:60:1f:ed:25:13:d2:9a:97:9b: a9:d0:88:ea:16:d8:b2:c1:26:6d:bb:10:72:d6:8a:df:d3:8a: ac:f7:32:c2:6e:65:9e:9e:ce:37:65:2b:b0:69:28:91:08:a3: b9:7a:b9:55:fb:72:41:7f:34:32:6b:65:fd:3c:f8:74:e4:dd: b4:9f:ec:04:ee:5a:c9:09:dd:88:56:1d:2c:86:64:c3:7c:f5: 1d:24:ac:09:68:54:c5:b9:88:ad:63:b2:c8:d9:a5:9a:f3:41: f2:0f:eb:a1:91:61:18:c4:fb:67:30:3f:bc:6f:9f:23:ab:4e: 68:b6:0a:91:ef:41:7a:e8:63:21:8d:a6:3e:25:35:8c:2b:8d: a7:2c:21:70:90:7a:60:23:60:5c:0c:08:e4:4c:d5:12:30:4e: 36:45:66:1f:e9:95:6e:c0:26:c7:d8:dd:f8:81:e7:40:5b:44: 6d:23:94:05:7a:f7:62:68:b1:58:63:22:f4:89:ba:06:6c:0b: 2c:72:13:74 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdkhlxYb5lB1laRapi7XNCe0bNMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxOTU0NTZaFw0yNjA0MjkxOTU5NTZaMDMxMTAvBgNV BAMTKENFNDdEQkREMjg0MEFBN0JDQjdFNUJFRjhEMkJCN0FERjc5ODU2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/boH+embetRkPH7JoeJqeLx+ FAL9N9CMNZA1iTbLBVI4RGHipNao9sAQmyRTyh+/jItwwHF1kW6GYUmdaejXsj0E 02zEXo3KnB5V26+zUjw8/IJUUHxcFrVMruoK4SsNGIvHmvu5hce/3keYynoRkJPs RpNsYRSSfDqOhDecJjZwvspVAUhGab+Str6GQVsmtZE3Y8L8CPW6Fnh4I1DP8YU7 v9kEvK4CvXamytjkZeKjZVfOz6fxqX/NKfcc/XNvJ88AD0XJHpDgIyTq5p2icbCT RjDMqPhM2Du8QgSEBcgQgnPsFUGnaigzddQ3zsnbFub3JfbjDTz9FERfyCiJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOR9vdKECqe8t+ W++NK7et95hWCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWh2 Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUyczYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVo dmI5NEJ0UDNDOGI0R1ZneUd0ZllBQUtTOGt2akh0eDM2bWRaMjllMnM2LzAvQ0U0 N0RCREQyODQwQUE3QkNCN0U1QkVGOEQyQkI3QURGNzk4NTYwOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyCTEMA0EAgACMAcDBQAoBHtMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkPzANBgkqhkiG9w0BAQsFAAOCAQEAQ32LlbwAVZGclP7h /yrol/K4i/fT+vPaJZXAiYK/7dGJQ3KeoS/7VOjWfSPTaNqDLqt18bwsrotEqa05 rj1KYB/tJRPSmpebqdCI6hbYssEmbbsQctaK39OKrPcywm5lnp7ON2UrsGkokQij uXq5VftyQX80Mmtl/Tz4dOTdtJ/sBO5ayQndiFYdLIZkw3z1HSSsCWhUxbmIrWOy yNmlmvNB8g/roZFhGMT7ZzA/vG+fI6tOaLYKke9BeuhjIY2mPiU1jCuNpywhcJB6 YCNgXAwI5EzVEjBONkVmH+mVbsAmx9jd+IHnQFtEbSOUBXr3YmixWGMi9Im6BmwL LHITdA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:25:13 2025 by rpki-client