$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer File: E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer (raw, json) Hash identifier: eG/SpnYT1U1QnN8mwitl1GSD7eOVIk04axVNW3IfjKc= Subject key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11EB680F82BB94950981101FCA39A2AE2E89B820 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft caRepository: rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 17 Sep 2025 20:16:03 +0000 Certificate not after: Wed 16 Sep 2026 20:21:03 +0000 Subordinate resources: AS: 53087 IP: 177.75.64.0/20 IP: 187.33.224.0/19 IP: 2804:298::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:eb:68:0f:82:bb:94:95:09:81:10:1f:ca:39:a2:ae:2e:89:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 17 20:16:03 2025 GMT Not After : Sep 16 20:21:03 2026 GMT Subject: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:4f:ef:a6:25:05:c8:2c:33:07:4a:0d:c0: 0b:7f:65:65:6d:d9:e7:9a:78:3e:27:fd:06:b1:b3: 8e:8e:c5:77:e8:db:f5:c7:03:4a:14:87:23:32:5d: 91:6c:c5:3e:77:61:74:59:d5:45:fb:44:76:ff:b9: 78:0e:85:fc:58:59:fe:a7:a8:70:1a:57:d9:ab:fe: b5:74:32:5a:a5:0f:10:94:f1:53:09:cc:bb:4d:3d: 85:45:80:f7:36:33:cc:6c:da:2f:2a:18:62:44:10: 85:f3:6f:25:fc:f4:c8:59:0b:bc:c9:b6:7d:b1:8b: eb:19:b0:03:39:71:25:73:f5:b0:50:d5:55:6c:46: 74:9f:f4:49:16:4b:47:08:e4:0b:1a:34:fb:c1:98: 06:2e:f9:77:e8:bd:56:c8:76:96:a3:05:9a:63:21: 31:c5:31:98:67:14:9e:de:16:d9:d6:b0:65:4e:41: ab:ba:5a:58:92:f6:61:4a:fc:6d:b4:78:ee:6e:f8: b9:25:54:c6:29:39:fc:48:b4:3b:d6:27:71:68:00: 70:8a:14:07:1b:ee:1f:e7:37:e6:42:b9:27:6c:4f: b7:8a:e4:0a:88:1c:7a:5f:65:2e:a0:87:3c:97:e7: 9b:68:7b:54:88:20:75:38:1f:f1:77:89:d7:47:72: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.75.64.0/20 187.33.224.0/19 IPv6: 2804:298::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53087 Signature Algorithm: sha256WithRSAEncryption 50:3d:e9:d6:7c:7e:45:8c:4a:53:b9:86:41:73:cc:24:cf:49: 0b:32:8a:e6:98:b2:79:60:a7:3e:f4:f2:7b:c4:ee:c1:d6:ca: 63:1f:87:c2:58:c7:d0:a2:b1:c5:cf:1f:db:ab:e0:c4:ac:d8: 0f:4a:6e:fa:b5:01:c7:ce:51:6c:c8:0f:03:ce:db:93:02:e5: 44:16:40:91:d3:0c:5f:da:2b:e2:68:13:39:00:9f:9a:31:a5: 5f:03:38:56:87:65:10:f1:f4:a2:d3:bc:cc:88:d2:b2:05:15: d4:e7:fb:96:b4:7e:93:74:31:68:bf:68:12:44:12:50:d9:9b: 73:92:8e:09:e9:01:aa:dd:28:fa:6e:58:7f:1a:89:3f:10:2f: 7f:df:12:c3:5e:90:7f:08:2e:55:7a:47:79:f1:c8:5c:03:50: 86:8f:2a:dc:a4:1c:93:6f:87:43:8b:3e:ca:45:5a:ad:d0:69: d3:a5:14:e2:21:8f:6b:62:68:d5:a2:a2:41:5e:2a:1c:a7:36: aa:5d:7c:ef:f2:65:aa:c1:8a:1a:dd:33:b7:01:10:e7:3b:90: eb:53:14:1e:f4:5f:05:91:aa:88:4c:00:ee:84:fc:02:31:30: 10:5d:0d:4d:b4:05:b5:a9:b5:b7:c2:30:aa:84:a4:4a:75:14: ed:03:87:51 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEetoD4K7lJUJgRAfyjmiri6JuCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTcyMDE2MDNaFw0yNjA5MTYyMDIxMDNaMDMxMTAvBgNV BAMTKEU1RUQ0MTFFMkFDMUE5MUE4QTM1RDJCNUQxNDc2QjgwMDlERjZGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3E/vpiUFyCwzB0oNwAt/ZWVt 2eeaeD4n/Qaxs46OxXfo2/XHA0oUhyMyXZFsxT53YXRZ1UX7RHb/uXgOhfxYWf6n qHAaV9mr/rV0MlqlDxCU8VMJzLtNPYVFgPc2M8xs2i8qGGJEEIXzbyX89MhZC7zJ tn2xi+sZsAM5cSVz9bBQ1VVsRnSf9EkWS0cI5AsaNPvBmAYu+XfovVbIdpajBZpj ITHFMZhnFJ7eFtnWsGVOQau6WliS9mFK/G20eO5u+LklVMYpOfxItDvWJ3FoAHCK FAcb7h/nN+ZCuSdsT7eK5AqIHHpfZS6ghzyX55toe1SIIHU4H/F3iddHcvA/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTl7UEeKsGpGoo1 0rXRR2uACd9vTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRms3 a2ZqNlg2d3I1dnhYekN1OFlnUlRONlB3ejRVUWk3UWFROE5aQnJpN3QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zr N2tmajZYNndyNXZ4WHpDdThZZ1JUTjZQd3o0VVFpN1FhUThOWkJyaTd0LzAvRTVF RDQxMUUyQUMxQTkxQThBMzVEMkI1RDE0NzZCODAwOURGNkY0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsUtAAwQFuyHgMA0EAgACMAcDBQAoBAKYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPXzANBgkqhkiG9w0BAQsFAAOCAQEAUD3p1nx+ RYxKU7mGQXPMJM9JCzKK5piyeWCnPvTye8TuwdbKYx+HwljH0KKxxc8f26vgxKzY D0pu+rUBx85RbMgPA87bkwLlRBZAkdMMX9or4mgTOQCfmjGlXwM4VodlEPH0otO8 zIjSsgUV1Of7lrR+k3QxaL9oEkQSUNmbc5KOCekBqt0o+m5YfxqJPxAvf98Sw16Q fwguVXpHefHIXANQho8q3KQck2+HQ4s+ykVardBp06UU4iGPa2Jo1aKiQV4qHKc2 ql187/JlqsGKGt0ztwEQ5zuQ61MUHvRfBZGqiEwA7oT8AjEwEF0NTbQFtam1t8Iw qoSkSnUU7QOHUQ== -----END CERTIFICATE-----Generated at Thu Sep 18 10:03:20 2025 by rpki-client