$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer File: D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer (raw, json) Hash identifier: Jfng4LK2zZeZ8Rjc6gQxC/IAn/kpd5axrQdsYLfX4fY= Subject key identifier: D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 317D5A23D80B7CACA747CE1483E1D83106426E1C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft caRepository: rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 20:25:35 +0000 Certificate not after: Mon 14 Sep 2026 20:30:35 +0000 Subordinate resources: AS: 263041 IP: 177.129.152.0/22 IP: 2804:1c78::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7d:5a:23:d8:0b:7c:ac:a7:47:ce:14:83:e1:d8:31:06:42:6e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 20:25:35 2025 GMT Not After : Sep 14 20:30:35 2026 GMT Subject: CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:69:1f:6a:71:a6:90:ec:c1:b0:ee:f5:5c:fa: 3e:54:34:f2:44:79:24:c2:cf:f3:62:73:e9:e4:00: a2:21:5d:ed:b5:da:42:64:34:be:75:16:eb:29:85: c1:a8:f3:40:66:20:6e:fd:55:03:bf:d4:c1:e6:ba: 7e:73:7e:92:5a:35:16:02:3e:53:7f:8c:df:92:68: c3:43:4f:cf:65:b3:60:15:05:f1:11:24:85:af:12: 24:0f:81:91:b1:d6:e9:35:c0:3b:a8:15:b0:e1:a4: de:89:a1:ea:09:16:dd:2a:e3:34:4e:d9:80:16:4c: 0a:85:f2:d3:62:68:6f:3f:5a:c4:92:0e:23:bd:2d: 66:dc:9d:5a:49:ca:ce:85:86:5a:00:ba:8b:cf:3d: cd:25:34:54:2a:85:76:ee:4c:41:a1:b9:be:22:c7: 9e:fa:8e:c4:5f:ec:89:70:ef:5c:42:32:9d:cc:8d: eb:87:85:74:15:f4:91:1f:7c:85:0b:d9:ad:d9:03: 0c:a4:cd:0c:b6:44:43:67:8b:16:ca:49:0f:5b:e4: 95:35:d3:fe:0f:f2:df:2c:52:b9:6b:2c:61:53:1c: 4b:5a:e4:84:bc:04:d6:55:50:f9:59:6b:d6:8d:cd: 8e:b3:16:86:5a:53:53:64:0d:03:0c:cb:55:77:09: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.152.0/22 IPv6: 2804:1c78::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263041 Signature Algorithm: sha256WithRSAEncryption a2:eb:29:70:23:69:f6:11:87:d7:ea:49:ff:5e:06:4a:ec:2b: 34:64:8d:14:40:76:57:cd:c6:04:ad:37:d1:a1:44:7a:bf:57: f1:18:b7:a2:25:0c:7f:4d:43:c8:29:a1:83:7d:fa:43:90:24: 4d:fa:88:61:79:50:ef:12:41:18:30:25:92:d9:c4:01:ff:c7: b5:59:90:59:26:44:a3:d5:07:37:30:e1:03:eb:2a:85:ea:aa: ef:34:29:19:dd:4c:58:58:e7:aa:e6:f0:26:ae:78:7f:9e:46: 68:7a:67:38:c4:6c:14:02:66:41:23:07:57:5b:ee:83:6e:b8: 96:81:10:2e:c0:09:32:2b:a8:d7:20:83:e1:0a:14:8c:7a:82: f2:68:e3:bd:54:dd:c6:a4:c0:31:bd:f7:74:25:d7:13:22:87: 85:34:48:90:e4:17:3a:80:5e:78:da:9e:9f:b0:38:e0:62:e0: e7:1c:1e:ee:ee:7c:22:d1:5b:72:3a:04:34:88:62:3e:a3:43: ef:31:41:d0:ca:1c:be:f4:7b:84:31:33:9e:13:fd:8f:84:66: d7:00:e1:fa:9d:bd:ca:21:79:d5:34:45:79:96:9a:c0:7e:5c: fd:0b:3d:fc:6b:2e:41:a9:28:88:e4:b3:c0:f3:48:fd:b4:7b: 61:aa:db:64 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMX1aI9gLfKynR84Ug+HYMQZCbhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTUyMDI1MzVaFw0yNjA5MTQyMDMwMzVaMDMxMTAvBgNV BAMTKEQ2M0I5NTNCNjdENzFFRjU0MUNEMUFGRDg3MzdDOEZDNTQ1N0Q4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtaR9qcaaQ7MGw7vVc+j5UNPJE eSTCz/Nic+nkAKIhXe212kJkNL51FusphcGo80BmIG79VQO/1MHmun5zfpJaNRYC PlN/jN+SaMNDT89ls2AVBfERJIWvEiQPgZGx1uk1wDuoFbDhpN6JoeoJFt0q4zRO 2YAWTAqF8tNiaG8/WsSSDiO9LWbcnVpJys6FhloAuovPPc0lNFQqhXbuTEGhub4i x576jsRf7Ilw71xCMp3MjeuHhXQV9JEffIUL2a3ZAwykzQy2RENnixbKSQ9b5JU1 0/4P8t8sUrlrLGFTHEta5IS8BNZVUPlZa9aNzY6zFoZaU1NkDQMMy1V3CREbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWO5U7Z9ce9UHN Gv2HN8j8VFfYtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVpo MVBUcXZEdllRR2JNN25nOExwUE4zTXkxVHJpZGZwNzR1TFhMZDVERFgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Va aDFQVHF2RHZZUUdiTTduZzhMcFBOM015MVRyaWRmcDc0dUxYTGQ1RERYLzAvRDYz Qjk1M0I2N0Q3MUVGNTQxQ0QxQUZEODczN0M4RkM1NDU3RDhCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsYGYMA0EAgACMAcDBQAoBBx4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQDgTANBgkqhkiG9w0BAQsFAAOCAQEAouspcCNp9hGH1+pJ /14GSuwrNGSNFEB2V83GBK030aFEer9X8Ri3oiUMf01DyCmhg336Q5AkTfqIYXlQ 7xJBGDAlktnEAf/HtVmQWSZEo9UHNzDhA+sqheqq7zQpGd1MWFjnqubwJq54f55G aHpnOMRsFAJmQSMHV1vug264loEQLsAJMiuo1yCD4QoUjHqC8mjjvVTdxqTAMb33 dCXXEyKHhTRIkOQXOoBeeNqen7A44GLg5xwe7u58ItFbcjoENIhiPqND7zFB0Moc vvR7hDEznhP9j4Rm1wDh+p29yiF51TRFeZaawH5c/Qs9/GsuQakoiOSzwPNI/bR7 YarbZA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:19:54 2025 by rpki-client