$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer File: DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer (raw, json) Hash identifier: 07WduYwnQjfTC3vsyCNKVMajytOhkRNOPpXyq0LvZkA= Subject key identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 46C44BA63EDB97F77C8E749D94F868B0094B114A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft caRepository: rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Apr 2025 18:55:51 +0000 Certificate not after: Thu 09 Apr 2026 19:00:51 +0000 Subordinate resources: AS: 268374 IP: 45.239.24.0/22 IP: 2804:5030::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c4:4b:a6:3e:db:97:f7:7c:8e:74:9d:94:f8:68:b0:09:4b:11:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 10 18:55:51 2025 GMT Not After : Apr 9 19:00:51 2026 GMT Subject: CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:76:41:20:24:3d:b1:8f:01:a5:c0:27:7e: 53:b3:14:8e:70:b6:83:4e:79:9d:6e:e5:c1:39:1f: 8e:92:ac:67:8a:ff:9c:59:5f:16:99:cb:af:6d:a8: 1b:ca:52:fc:23:1b:e0:8a:67:bf:de:d8:9a:89:7c: 28:d2:b6:db:99:38:e3:e9:69:05:15:e7:f8:db:08: 7f:99:9d:e1:11:5e:02:77:0e:59:7f:f8:d5:52:a5: 0d:cf:7a:1c:d7:1f:59:dd:bc:b7:12:6c:7a:ce:4b: 01:80:c2:81:85:df:a6:9b:22:39:28:82:4f:fe:75: f3:e9:ea:0c:fd:0f:0c:73:4f:18:3c:aa:04:8d:d0: 24:e5:e5:63:89:dd:f8:25:db:b5:03:7b:32:bb:de: f6:9a:f9:5d:34:37:6d:f8:cf:ca:e0:0c:e9:63:93: a0:55:3f:7b:90:11:ac:a9:b5:73:6f:da:24:6f:82: 26:af:8d:e6:41:74:be:8f:25:ae:8b:1b:4d:a6:2b: b9:2c:b3:40:fc:a4:e2:05:9b:ac:dd:a5:ca:98:0e: ca:c0:31:d8:20:ce:04:46:95:75:22:a6:83:db:eb: b4:34:c4:90:69:f0:d3:47:3f:69:f8:12:ba:e6:be: 60:a0:06:b1:60:3d:62:45:5a:2f:ce:92:8a:98:14: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.24.0/22 IPv6: 2804:5030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268374 Signature Algorithm: sha256WithRSAEncryption 8a:d2:c5:67:d4:f0:7a:fe:c5:b2:a5:b8:fa:35:66:d1:85:ec: c3:01:29:4f:39:bf:01:79:2f:93:58:6f:37:e0:7a:cd:69:05: 77:eb:f2:cd:64:80:09:c7:64:99:0a:c2:e3:4d:5c:f6:40:ae: 4c:f7:f9:5b:98:9d:c9:cc:ce:e1:65:13:49:74:c5:d5:84:27: bf:3a:c2:6b:0d:d1:a4:22:72:77:ed:d8:eb:2d:43:07:cc:7f: d4:54:71:53:b2:db:f6:e7:6e:0b:16:4c:92:e1:52:9c:91:63: 08:9f:84:64:8b:88:f3:59:02:ed:da:36:58:39:c1:69:08:87: 64:55:16:47:8b:35:b7:2d:cc:bc:eb:51:22:87:44:ae:37:ac: f9:e2:9e:0d:cd:b5:f2:6c:c8:46:a3:3a:20:d8:e4:b8:57:72: d5:8d:8c:75:69:51:e7:a6:63:9e:7c:84:3b:65:ce:f7:10:c6: 34:b5:51:6a:3e:12:13:3e:25:d8:90:50:8b:b9:c4:63:44:cc: d9:72:3c:23:95:49:cb:f5:12:95:98:3a:d5:d7:0d:dd:e6:5c: 76:d2:2d:aa:63:08:bc:8a:ae:f6:e1:ff:07:9f:45:c0:8c:4a: 61:0d:fc:5d:dd:ab:74:a5:6a:43:73:5b:84:87:28:7b:c3:42: 8a:c1:49:49 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURsRLpj7bl/d8jnSdlPhosAlLEUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTAxODU1NTFaFw0yNjA0MDkxOTAwNTFaMDMxMTAvBgNV BAMTKERFRjc4QkUzMzUwMDU3QUNDOEZFOTZFRTVEMjRCRDU3OEEwMzQ2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVXZBICQ9sY8BpcAnflOzFI5w toNOeZ1u5cE5H46SrGeK/5xZXxaZy69tqBvKUvwjG+CKZ7/e2JqJfCjSttuZOOPp aQUV5/jbCH+ZneERXgJ3Dll/+NVSpQ3PehzXH1ndvLcSbHrOSwGAwoGF36abIjko gk/+dfPp6gz9DwxzTxg8qgSN0CTl5WOJ3fgl27UDezK73vaa+V00N234z8rgDOlj k6BVP3uQEayptXNv2iRvgiavjeZBdL6PJa6LG02mK7kss0D8pOIFm6zdpcqYDsrA MdggzgRGlXUipoPb67Q0xJBp8NNHP2n4ErrmvmCgBrFgPWJFWi/OkoqYFG4VAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTe94vjNQBXrMj+ lu5dJL1XigNGTjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQU0x ajJGb1pUMTR6WHlvRmdjeDhvMmRmdW5hWTJlMTdCS1cyalhjVFZ3V00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FN MWoyRm9aVDE0elh5b0ZnY3g4bzJkZnVuYVkyZTE3QktXMmpYY1RWd1dNLzAvREVG NzhCRTMzNTAwNTdBQ0M4RkU5NkVFNUQyNEJENTc4QTAzNDY0RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe8YMA0EAgACMAcDBQAoBFAwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYVjANBgkqhkiG9w0BAQsFAAOCAQEAitLFZ9Twev7FsqW4 +jVm0YXswwEpTzm/AXkvk1hvN+B6zWkFd+vyzWSACcdkmQrC401c9kCuTPf5W5id yczO4WUTSXTF1YQnvzrCaw3RpCJyd+3Y6y1DB8x/1FRxU7Lb9uduCxZMkuFSnJFj CJ+EZIuI81kC7do2WDnBaQiHZFUWR4s1ty3MvOtRIodErjes+eKeDc218mzIRqM6 INjkuFdy1Y2MdWlR56ZjnnyEO2XO9xDGNLVRaj4SEz4l2JBQi7nEY0TM2XI8I5VJ y/USlZg61dcN3eZcdtItqmMIvIqu9uH/B59FwIxKYQ38Xd2rdKVqQ3NbhIcoe8NC isFJSQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:29 2025 by rpki-client