$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer File: E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer (raw, json) Hash identifier: Zlpc4VZgf3rSgHseLtWzD2aCblp8ZG0Lx69ZoxqWUHc= Subject key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4BB63CC8649F4F659D3A7580149FA02273FBE6DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft caRepository: rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 09:18:14 +0000 Certificate not after: Thu 05 Mar 2026 09:23:14 +0000 Subordinate resources: AS: 268513 IP: 45.161.212.0/22 IP: 2804:525c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b6:3c:c8:64:9f:4f:65:9d:3a:75:80:14:9f:a0:22:73:fb:e6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 09:18:14 2025 GMT Not After : Mar 5 09:23:14 2026 GMT Subject: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:97:d4:5e:82:79:32:fa:03:c6:ef:3a:7c: cf:d3:7a:ae:d3:15:a5:81:f8:36:34:cf:9e:5c:0f: ba:0d:62:9f:eb:4f:ba:48:23:26:f5:a0:f5:ab:99: 0e:69:b7:c8:5f:9e:06:7b:47:42:61:24:6f:97:85: 1a:09:d1:c2:31:4f:d2:42:e7:c1:b7:c1:fb:48:80: 05:21:5c:a3:3d:fc:0b:d3:00:aa:95:63:d7:a1:74: 63:fd:ef:f0:47:ea:dc:e6:fc:51:a8:0f:91:b3:67: 66:9b:a4:be:fe:63:b4:ad:21:59:26:0f:e6:5a:c6: 6c:73:37:41:aa:91:d2:45:e7:9d:14:66:a3:5c:5f: ee:2c:2d:86:ea:86:05:99:83:a7:61:f8:ea:8e:0a: e8:0b:ea:2e:0a:ea:b9:f0:7b:22:cd:5e:5e:26:21: cd:11:ff:62:98:2b:78:ed:7c:7d:44:65:88:56:c7: f3:39:3b:63:05:95:19:b3:f2:24:79:aa:7c:85:25: 4c:cc:20:a6:eb:c5:69:f3:59:30:90:ef:e4:25:1c: 9b:03:dc:00:6d:e0:a0:46:31:c2:91:fc:24:34:60: 8d:f0:7d:54:16:8f:df:9b:ac:bc:bd:ae:ee:e3:16: fe:20:6a:0a:97:7d:5b:42:7c:15:9f:83:2a:3c:34: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.212.0/22 IPv6: 2804:525c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268513 Signature Algorithm: sha256WithRSAEncryption 02:7d:4e:08:7a:73:99:38:ec:78:71:21:43:c5:23:b5:68:e8: 69:f9:38:69:0a:6d:6f:fd:88:5e:1e:50:bb:a0:33:6b:5d:31: 89:3f:ac:8a:62:ea:3a:42:7d:b4:68:2f:fb:34:9e:d6:c1:d2: cc:73:d5:62:c3:19:73:b6:1e:8a:ae:27:cd:c3:df:02:7e:d5: bb:47:75:1b:86:e0:24:76:af:cd:3f:46:20:2a:a9:ec:cc:8a: a7:de:1d:8a:ac:14:8b:ae:e9:10:42:e8:81:0c:cc:96:c8:51: 98:cf:c9:d7:85:59:c9:49:68:1a:a5:6d:c4:ce:36:87:6a:a4: 06:c4:10:b7:41:58:2c:4d:40:11:df:0a:c9:39:a2:38:9b:37: 2b:80:33:2e:dc:55:b5:bc:c7:e0:ad:b0:82:fe:cf:0f:c6:dc: ed:66:75:10:47:fa:72:01:fd:0c:1c:02:90:c3:1a:4b:f4:ae: 46:da:79:fa:c3:fe:f8:81:2d:44:8e:b8:97:34:fc:06:f1:6b: 8e:08:e3:a4:a1:6e:a2:84:97:d7:03:ac:de:26:e4:b8:05:d2: 27:4d:8b:14:2e:6c:45:04:59:d5:bd:43:b5:f9:da:6a:9d:ae: c7:8b:22:7e:f8:a3:6f:c6:b1:c3:10:86:c3:4a:7c:79:6f:67: 2f:93:c4:09 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUS7Y8yGSfT2WdOnWAFJ+gInP75towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwOTE4MTRaFw0yNjAzMDUwOTIzMTRaMDMxMTAvBgNV BAMTKEU0RDhDQ0Q5NzdDMjJDNzg2QkMxRjE3M0ZDNEU3NzkyRThBNDQyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDo5fUXoJ5MvoDxu86fM/Teq7T FaWB+DY0z55cD7oNYp/rT7pIIyb1oPWrmQ5pt8hfngZ7R0JhJG+XhRoJ0cIxT9JC 58G3wftIgAUhXKM9/AvTAKqVY9ehdGP97/BH6tzm/FGoD5GzZ2abpL7+Y7StIVkm D+ZaxmxzN0GqkdJF550UZqNcX+4sLYbqhgWZg6dh+OqOCugL6i4K6rnweyLNXl4m Ic0R/2KYK3jtfH1EZYhWx/M5O2MFlRmz8iR5qnyFJUzMIKbrxWnzWTCQ7+QlHJsD 3ABt4KBGMcKR/CQ0YI3wfVQWj9+brLy9ru7jFv4gagqXfVtCfBWfgyo8NFJVAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTk2MzZd8IseGvB 8XP8TneS6KRCCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGZh dnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJib2IvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGZh dnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJib2IvMS9FNEQ4 Q0NEOTc3QzIyQzc4NkJDMUYxNzNGQzRFNzc5MkU4QTQ0MjBBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItodQwDQQCAAIwBwMFACgEUlwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBjhMA0GCSqGSIb3DQEBCwUAA4IBAQACfU4IenOZOOx4cSFD xSO1aOhp+ThpCm1v/YheHlC7oDNrXTGJP6yKYuo6Qn20aC/7NJ7WwdLMc9Viwxlz th6KrifNw98CftW7R3UbhuAkdq/NP0YgKqnszIqn3h2KrBSLrukQQuiBDMyWyFGY z8nXhVnJSWgapW3EzjaHaqQGxBC3QVgsTUAR3wrJOaI4mzcrgDMu3FW1vMfgrbCC /s8PxtztZnUQR/pyAf0MHAKQwxpL9K5G2nn6w/74gS1EjriXNPwG8WuOCOOkoW6i hJfXA6zeJuS4BdInTYsULmxFBFnVvUO1+dpqna7HiyJ++KNvxrHDEIbDSnx5b2cv k8QJ -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:18 2025 by rpki-client