$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer File: D40B256042895F431460325AC5DB0F0088D3437F.cer (raw, json) Hash identifier: 2kFZ6N1HNgVivErySfcIEa0UB3G4dxwXv8byju+aQoA= Subject key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71AD9195BF9C5DA29D80C51353C30F70259B193E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft caRepository: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Aug 2025 00:58:33 +0000 Certificate not after: Tue 25 Aug 2026 01:03:33 +0000 Subordinate resources: AS: 265500 IP: 170.78.92.0/22 IP: 2804:3518::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:91:95:bf:9c:5d:a2:9d:80:c5:13:53:c3:0f:70:25:9b:19:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 00:58:33 2025 GMT Not After : Aug 25 01:03:33 2026 GMT Subject: CN=D40B256042895F431460325AC5DB0F0088D3437F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:27:09:41:08:d9:2c:e0:15:c7:ed:bf:6d: c6:2f:82:9a:d1:83:de:42:85:25:d8:2b:1e:98:a6: ab:b2:3a:22:7e:8d:0f:a7:1b:7a:88:52:76:d1:5d: f4:0e:1d:0f:03:f0:e7:c7:fe:f8:c6:5d:a7:e5:92: e7:8f:ad:70:b6:dd:c0:b1:43:67:1c:4b:bd:d8:08: 80:97:99:4f:97:03:f9:9d:1c:28:4e:cf:45:fc:12: 72:b5:02:12:a4:14:7d:b1:8c:a2:74:5e:32:12:60: 4e:33:7a:61:99:dc:e9:2c:e5:8d:e2:d6:c5:53:f7: 1e:f0:17:92:04:ea:47:da:ac:db:7f:6f:e3:71:13: a7:4a:34:df:16:6f:75:48:2a:7a:f6:2e:0f:c8:6f: 37:ee:8c:b0:df:04:64:bc:8a:e4:fb:f9:54:e6:81: 6b:d8:47:36:4a:23:05:bd:71:c3:9e:a6:a7:75:df: 95:75:01:17:e5:57:3d:2c:56:c8:d9:b6:73:0a:2d: d6:7e:56:6b:7d:af:03:13:cb:ef:8d:98:ef:24:ce: bd:da:2b:a1:fb:8b:dc:00:05:3d:56:03:5e:14:f5: d0:8c:53:e3:00:96:12:34:c6:ac:c9:4b:60:3c:82: fd:bb:a1:18:46:4a:37:09:cb:b0:51:05:32:03:d3: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.92.0/22 IPv6: 2804:3518::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265500 Signature Algorithm: sha256WithRSAEncryption 97:f4:90:5d:51:bd:04:20:b5:e9:87:da:c0:8a:40:0c:39:36: c0:24:63:82:54:18:1e:a9:28:71:5f:f2:21:ef:3f:2a:4e:95: 4f:32:f1:c5:48:ed:7d:0d:ca:d0:82:d9:53:8c:76:6c:ba:f0: 74:78:4f:e1:12:4f:25:6d:e8:25:7a:3f:0a:d1:1c:18:3f:2e: e9:25:f9:0e:fe:a1:23:b9:31:9a:d3:19:a4:31:e8:13:c9:40: 3b:45:5c:29:95:36:46:dd:ff:68:f6:5a:b0:0b:1f:56:9f:3a: 77:aa:71:49:13:78:57:b1:42:3b:64:81:bb:90:4c:8d:48:21: 69:e2:6f:91:1f:3d:0f:f1:d8:82:f8:6e:e9:ab:07:06:d4:8f: 8f:1e:db:dc:bc:cb:3b:7e:33:f8:cf:ed:e7:84:6c:cb:ca:24: 61:98:72:87:06:c2:e8:11:b8:39:60:9e:58:cc:0a:04:bd:82: 76:02:a3:25:65:51:b6:cc:66:86:62:34:b0:e9:bb:5a:e7:06: 1d:bd:8f:7f:14:90:0a:fb:4a:1c:6d:ca:25:eb:ec:ad:ed:c7: a8:f8:a9:03:37:75:64:d7:c1:d1:7f:1a:69:15:94:94:c6:cf: b9:2a:54:0c:b0:17:b0:4d:29:01:1d:ce:9e:57:1f:55:be:b1: 24:59:99:b7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUca2Rlb+cXaKdgMUTU8MPcCWbGT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjYwMDU4MzNaFw0yNjA4MjUwMTAzMzNaMDMxMTAvBgNV BAMTKEQ0MEIyNTYwNDI4OTVGNDMxNDYwMzI1QUM1REIwRjAwODhEMzQzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRycJQQjZLOAVx+2/bcYvgprR g95ChSXYKx6YpquyOiJ+jQ+nG3qIUnbRXfQOHQ8D8OfH/vjGXaflkuePrXC23cCx Q2ccS73YCICXmU+XA/mdHChOz0X8EnK1AhKkFH2xjKJ0XjISYE4zemGZ3Oks5Y3i 1sVT9x7wF5IE6kfarNt/b+NxE6dKNN8Wb3VIKnr2Lg/IbzfujLDfBGS8iuT7+VTm gWvYRzZKIwW9ccOepqd135V1ARflVz0sVsjZtnMKLdZ+Vmt9rwMTy++NmO8kzr3a K6H7i9wABT1WA14U9dCMU+MAlhI0xqzJS2A8gv27oRhGSjcJy7BRBTID08ShAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUCyVgQolfQxRg MlrF2w8AiNNDfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1FB ZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZjeGovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NR QWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAvRDQw QjI1NjA0Mjg5NUY0MzE0NjAzMjVBQzVEQjBGMDA4OEQzNDM3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqk5cMA0EAgACMAcDBQAoBDUYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQNHDANBgkqhkiG9w0BAQsFAAOCAQEAl/SQXVG9BCC16Yfa wIpADDk2wCRjglQYHqkocV/yIe8/Kk6VTzLxxUjtfQ3K0ILZU4x2bLrwdHhP4RJP JW3oJXo/CtEcGD8u6SX5Dv6hI7kxmtMZpDHoE8lAO0VcKZU2Rt3/aPZasAsfVp86 d6pxSRN4V7FCO2SBu5BMjUghaeJvkR89D/HYgvhu6asHBtSPjx7b3LzLO34z+M/t 54Rsy8okYZhyhwbC6BG4OWCeWMwKBL2CdgKjJWVRtsxmhmI0sOm7WucGHb2PfxSQ CvtKHG3KJevsre3HqPipAzd1ZNfB0X8aaRWUlMbPuSpUDLAXsE0pAR3OnlcfVb6x JFmZtw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:33:17 2025 by rpki-client