$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer File: D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer (raw, json) Hash identifier: taXAiR5VT/VD48eMLjQck+7SZVXMqhgA7QQgCl5iQS0= Subject key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D70A7D7988287F65427A6627B74DEAFA1E70DFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft caRepository: rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 15:34:41 +0000 Certificate not after: Tue 07 Jul 2026 15:39:41 +0000 Subordinate resources: AS: 266917 IP: 45.71.140.0/22 IP: 2804:454c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:70:a7:d7:98:82:87:f6:54:27:a6:62:7b:74:de:af:a1:e7:0d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 15:34:41 2025 GMT Not After : Jul 7 15:39:41 2026 GMT Subject: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:68:b4:8d:65:00:4c:86:af:98:16:5e:0f: 05:73:93:d8:1b:e1:38:65:2f:50:9c:fc:8e:66:57: ca:13:9b:be:da:cc:b3:ef:15:fc:52:fc:25:3d:f2: 6e:94:9c:ca:9a:96:ce:fe:4d:99:2c:12:4e:1c:81: 84:98:61:e1:02:b4:91:56:59:c9:1b:6c:0a:57:24: 5b:9a:c1:11:bf:41:14:13:ee:af:6e:0b:ad:5c:51: c8:c1:28:f3:75:75:eb:fb:a7:40:dd:8d:fe:fb:35: ae:00:80:65:e1:2c:0c:25:bd:99:3d:cf:75:71:fd: 1e:50:ab:52:50:fb:84:f5:ef:ca:50:03:2f:19:23: c1:37:fd:e5:1c:11:45:ab:f4:51:0a:bd:e0:14:1f: 58:ab:8d:16:61:97:0f:c9:6b:91:8a:34:c3:52:9b: 47:8a:63:a0:d6:d0:03:1b:83:03:28:54:38:7c:a0: 00:e7:2f:a6:6d:6d:ed:39:d7:72:87:3a:3f:d9:16: c4:c6:d0:42:22:9c:22:db:a5:36:97:aa:f6:89:7a: 68:ce:ef:a0:ab:69:dc:6f:18:02:9f:30:c2:9f:95: 80:c1:ea:f8:9c:67:1d:5c:4b:2e:0d:bf:09:9b:8c: 56:8b:93:e1:ba:ed:87:a7:1a:1c:93:7c:e7:4a:84: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.140.0/22 IPv6: 2804:454c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266917 Signature Algorithm: sha256WithRSAEncryption 60:51:05:60:32:1f:54:0d:10:74:93:67:7e:14:84:ae:6a:c2: 67:0d:15:a6:a8:b9:8a:9d:86:0f:08:97:11:23:fc:c4:ff:c0: e1:b7:e9:ce:80:c6:f5:24:1a:97:3b:44:3c:88:a5:db:7c:e9: 55:ad:a5:b5:ac:9f:d6:45:51:16:2c:a7:e2:2f:7a:ca:e1:37: b5:68:7a:b5:ca:f5:01:1e:80:54:69:90:9f:cf:4d:bc:74:e4: 82:81:71:28:b7:46:4d:b5:14:7a:1a:cf:28:cc:84:cf:0b:8d: 36:72:95:7b:07:e5:a3:d5:e0:3a:e9:85:29:cf:42:7d:58:7d: bf:17:16:5f:59:2f:6c:0d:43:72:d2:c1:35:b4:7c:ab:ac:44: 2e:6f:f8:4e:1b:85:51:22:d2:42:29:07:91:86:b6:13:b4:b1: b5:12:e8:71:8f:fb:78:a6:bc:fb:af:62:e1:fb:ec:bb:f1:78: da:e2:2e:bb:9e:1b:55:b3:df:b1:ec:3a:d1:30:62:c3:4a:19: d7:24:8c:37:0b:12:f1:65:a7:b8:4f:b7:f8:44:be:28:74:e0: 4f:ae:14:0f:32:ee:02:b4:d2:ff:e1:2a:b4:83:18:71:a1:d3: f9:96:ea:c1:6b:94:f8:dd:0e:95:6f:41:72:14:d2:66:08:bc: 08:eb:c9:17 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfXCn15iCh/ZUJ6Zie3Ter6HnDf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDgxNTM0NDFaFw0yNjA3MDcxNTM5NDFaMDMxMTAvBgNV BAMTKEQyRjU3MkFDQjEyMzU0QkRBMjJFMzhEM0E5OTlERTVBNEVFNDg3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJUGi0jWUATIavmBZeDwVzk9gb 4ThlL1Cc/I5mV8oTm77azLPvFfxS/CU98m6UnMqals7+TZksEk4cgYSYYeECtJFW WckbbApXJFuawRG/QRQT7q9uC61cUcjBKPN1dev7p0Ddjf77Na4AgGXhLAwlvZk9 z3Vx/R5Qq1JQ+4T178pQAy8ZI8E3/eUcEUWr9FEKveAUH1irjRZhlw/Ja5GKNMNS m0eKY6DW0AMbgwMoVDh8oADnL6Ztbe0513KHOj/ZFsTG0EIinCLbpTaXqvaJemjO 76CradxvGAKfMMKflYDB6vicZx1cSy4NvwmbjFaLk+G67YenGhyTfOdKhC+DAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTS9XKssSNUvaIu ONOpmd5aTuSHkjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1hm TXl5dUdYSjZ6dnFEYVNEWHdOQ0M4a2U2UVFKYlJTcWNpNlJmRkdtbk4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNY Zk15eXVHWEo2enZxRGFTRFh3TkNDOGtlNlFRSmJSU3FjaTZSZkZHbW5OLzAvRDJG NTcyQUNCMTIzNTRCREEyMkUzOEQzQTk5OURFNUE0RUU0ODc5Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUeMMA0EAgACMAcDBQAoBEVMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQSpTANBgkqhkiG9w0BAQsFAAOCAQEAYFEFYDIfVA0QdJNn fhSErmrCZw0Vpqi5ip2GDwiXESP8xP/A4bfpzoDG9SQalztEPIil23zpVa2ltayf 1kVRFiyn4i96yuE3tWh6tcr1AR6AVGmQn89NvHTkgoFxKLdGTbUUehrPKMyEzwuN NnKVewflo9XgOumFKc9CfVh9vxcWX1kvbA1DctLBNbR8q6xELm/4ThuFUSLSQikH kYa2E7SxtRLocY/7eKa8+69i4fvsu/F42uIuu54bVbPfsew60TBiw0oZ1ySMNwsS 8WWnuE+3+ES+KHTgT64UDzLuArTS/+EqtIMYcaHT+ZbqwWuU+N0OlW9BchTSZgi8 COvJFw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:33:03 2025 by rpki-client