$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer File: D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer (raw, json) Hash identifier: yjL6V4P3GHdD6/fMioCvajJaVyDKvRQzjXAb5rJcz0E= Subject key identifier: D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 139D7AC5BC63A8C4BF1B7D6F86067A8D0EB61627 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft caRepository: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 14:03:53 +0000 Certificate not after: Wed 04 Nov 2026 14:08:53 +0000 Subordinate resources: AS: 264433 IP: 131.221.148.0/22 IP: 2804:1e84::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 03:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9d:7a:c5:bc:63:a8:c4:bf:1b:7d:6f:86:06:7a:8d:0e:b6:16:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 5 14:03:53 2025 GMT Not After : Nov 4 14:08:53 2026 GMT Subject: CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5d:94:4c:f9:12:55:69:4c:d2:cf:07:e0:df: e8:05:a7:1d:e1:ce:aa:fc:63:b3:1d:a5:d2:dd:de: a9:9a:9e:44:34:42:a3:6e:6c:de:fb:c8:59:21:ba: 9b:e2:72:e0:b9:7e:f9:85:4d:14:5f:7d:6c:a0:07: 79:14:88:c5:be:bb:ac:e9:77:02:63:b7:f9:c6:e1: c1:b6:80:5b:53:85:2f:4f:16:bb:28:fc:ec:3d:92: b9:23:9c:ae:82:71:0a:95:d3:56:cd:35:8e:38:a7: 7c:d7:e6:c4:84:2c:6e:1f:ca:2a:f7:bb:1b:31:e2: a3:16:5e:40:5d:60:6e:8b:6c:28:6b:c5:a5:29:4c: cc:f6:4b:0b:31:7c:4a:ce:d7:4e:21:16:fa:62:ce: 4b:9b:36:78:a3:ec:cd:1b:7b:c6:c4:80:33:90:1b: da:88:21:73:25:39:cd:f7:df:13:a3:c4:33:60:62: 45:49:ed:17:67:c0:be:3e:04:bf:4e:49:41:5a:3d: 8e:2d:8e:d3:e9:6b:17:2c:33:a2:d5:3f:0b:3a:db: d3:47:98:7d:2b:89:6b:3a:2f:ca:91:fd:89:f8:08: 3c:08:7f:b2:c9:c8:88:00:4c:e0:ca:a3:b1:98:9d: 71:90:5e:70:fd:86:25:ba:ee:50:77:8f:a8:41:66: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.148.0/22 IPv6: 2804:1e84::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264433 Signature Algorithm: sha256WithRSAEncryption 62:78:22:d8:a9:59:fd:c6:3d:81:09:71:23:98:3f:5f:b2:71: 3d:0c:7c:83:96:b2:1a:16:6b:46:d0:6c:ff:e7:99:d2:72:6d: 85:e7:2f:5b:e4:48:b7:25:e0:f5:0d:f6:39:f0:d6:76:fb:c4: 28:32:f4:7b:34:11:5a:a9:8b:d9:de:45:d3:d5:0a:cf:b8:9a: 07:f2:bc:fe:5e:d9:47:48:37:d6:a8:30:f1:ae:f7:6b:18:5d: 9f:70:b2:da:41:e6:5b:35:09:9e:07:82:d6:7b:45:72:04:81: bc:7b:eb:a4:28:c8:6d:ad:7c:e9:4d:32:2d:a4:bf:a5:a4:ce: cb:fa:29:4d:2d:1c:d8:13:25:85:c8:57:3d:ab:7a:53:07:9d: 13:bf:97:c7:89:8a:0c:5a:93:89:01:be:d0:f3:fe:a5:dd:c7: fb:eb:1f:3e:77:3c:ed:a6:0a:38:33:03:2d:96:0c:7d:53:f3: f8:d4:64:95:d2:f9:9e:92:98:1e:68:6e:d5:39:b1:76:48:8c: fc:ee:78:4e:03:34:5a:79:6b:b2:fb:a3:88:bc:f6:39:24:1e: 4f:6a:97:d3:4b:df:32:07:48:5f:c7:09:ad:d1:87:6d:f4:ff: 40:d8:b5:a3:ce:4b:bb:63:73:ea:23:ea:17:6a:73:72:a5:5a: 83:84:8c:d9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUE516xbxjqMS/G31vhgZ6jQ62FicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDUxNDAzNTNaFw0yNjExMDQxNDA4NTNaMDMxMTAvBgNV BAMTKEQ5NDUxQ0RDODZDMEEzRkIxMkNFRUEwRUM3RjRCMUQzODIyNzAwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3XZRM+RJVaUzSzwfg3+gFpx3h zqr8Y7MdpdLd3qmankQ0QqNubN77yFkhupvicuC5fvmFTRRffWygB3kUiMW+u6zp dwJjt/nG4cG2gFtThS9PFrso/Ow9krkjnK6CcQqV01bNNY44p3zX5sSELG4fyir3 uxsx4qMWXkBdYG6LbChrxaUpTMz2SwsxfErO104hFvpizkubNnij7M0be8bEgDOQ G9qIIXMlOc333xOjxDNgYkVJ7RdnwL4+BL9OSUFaPY4tjtPpaxcsM6LVPws629NH mH0riWs6L8qR/Yn4CDwIf7LJyIgATODKo7GYnXGQXnD9hiW67lB3j6hBZo1jAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZRRzchsCj+xLO 6g7H9LHTgicAUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUVO Z2RLVnhIb0RkS3VpNXExRVBKdFNoQTZCZVh1VnlVM25MdUpCcEJGZVYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FF TmdkS1Z4SG9EZEt1aTVxMUVQSnRTaEE2QmVYdVZ5VTNuTHVKQnBCRmVWLzAvRDk0 NTFDREM4NkMwQTNGQjEyQ0VFQTBFQzdGNEIxRDM4MjI3MDA1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg92UMA0EAgACMAcDBQAoBB6EMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQI8TANBgkqhkiG9w0BAQsFAAOCAQEAYngi2KlZ/cY9gQlx I5g/X7JxPQx8g5ayGhZrRtBs/+eZ0nJthecvW+RItyXg9Q32OfDWdvvEKDL0ezQR WqmL2d5F09UKz7iaB/K8/l7ZR0g31qgw8a73axhdn3Cy2kHmWzUJngeC1ntFcgSB vHvrpCjIba186U0yLaS/paTOy/opTS0c2BMlhchXPat6UwedE7+Xx4mKDFqTiQG+ 0PP+pd3H++sfPnc87aYKODMDLZYMfVPz+NRkldL5npKYHmhu1TmxdkiM/O54TgM0 WnlrsvujiLz2OSQeT2qX00vfMgdIX8cJrdGHbfT/QNi1o85Lu2Nz6iPqF2pzcqVa g4SM2Q== -----END CERTIFICATE-----Generated at Thu Nov 6 02:50:58 2025 by rpki-client