$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer File: E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer (raw, json) Hash identifier: 5Y6pzRInRkgRV0qJUyMPfErLcJEThzcG5N4wrJc8I2A= Subject key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 708B637541BFF3DF39EE6ABBA60CED81B9FDE601 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft caRepository: rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 09:59:06 +0000 Certificate not after: Fri 06 Mar 2026 10:04:06 +0000 Subordinate resources: AS: 267668 IP: 45.224.72.0/22 IP: 2804:4508::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:63:75:41:bf:f3:df:39:ee:6a:bb:a6:0c:ed:81:b9:fd:e6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 09:59:06 2025 GMT Not After : Mar 6 10:04:06 2026 GMT Subject: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:bf:97:e6:9c:67:d5:11:e1:72:a6:e9:78: 6e:48:b3:0b:60:c5:31:30:ec:a1:b7:5f:03:28:e1: 4b:17:8e:f4:1e:17:d3:32:2b:04:4f:98:be:d9:c4: 67:ef:60:2c:d1:19:b8:f5:ae:bb:71:c6:2c:d5:66: 24:ca:af:2a:13:1c:6a:4f:33:19:f5:a4:9e:f2:8c: 93:85:22:0e:7a:47:31:40:37:a4:f8:44:48:e0:99: 47:36:2a:6f:19:79:5c:6a:e2:32:01:6f:47:fa:63: 3a:1e:bd:83:13:87:09:47:3f:0c:4f:a7:94:ae:5f: 50:b4:e9:6a:d9:0b:1e:90:6c:bc:75:44:96:8d:0f: f7:53:a5:ff:d9:10:8c:21:ff:14:63:ed:48:b0:83: e2:c8:b7:f0:fb:49:15:98:0a:fa:c9:ca:47:5c:c2: 9d:65:8a:7a:71:32:fa:ac:54:64:97:ea:a5:cc:38: 58:01:52:0e:17:42:3c:85:0e:b3:07:6f:82:6b:20: d8:0d:42:ee:d9:bc:aa:47:50:2c:80:97:54:d1:f6: 45:8f:e5:26:97:35:5a:a2:6d:0f:14:15:62:cd:b7: 3e:db:a6:52:fa:27:3a:bc:c2:e9:00:d9:4a:f0:c9: 1b:b6:23:f1:55:d0:3f:8f:3b:00:69:71:80:63:0e: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.72.0/22 IPv6: 2804:4508::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267668 Signature Algorithm: sha256WithRSAEncryption 85:c8:d8:c0:20:00:55:b6:c4:9b:a2:fd:bd:dd:81:80:98:8d: c8:50:bb:4c:9f:34:0d:c2:21:47:ba:36:85:16:c5:a0:08:4d: b4:ca:18:8c:25:2f:6f:a7:af:11:76:a2:67:ce:be:d8:26:73: e5:65:22:2e:ff:e9:70:cc:7e:c6:9c:17:0c:88:c1:bd:66:93: ac:83:fc:42:43:c4:d9:7f:86:da:7e:9d:c0:8b:52:23:12:55: 4d:e1:e3:60:fc:5e:e0:94:33:5a:45:56:89:e3:07:f8:e8:6d: 85:d8:09:5a:4c:11:82:03:c4:fc:14:a9:a5:59:0e:4b:06:22: 6d:17:f4:45:26:2d:48:2b:a0:47:10:86:0b:64:1c:7f:b5:10: 9f:26:ab:01:26:bf:bf:ef:fc:18:72:3e:34:68:c0:1e:a8:4a: 45:d5:ae:26:96:c9:05:28:8a:70:4b:1e:e5:7c:5e:91:0f:f0: 69:b7:b6:bc:ca:55:12:79:f6:e3:e9:34:9e:62:96:86:75:13: 82:c9:54:b4:f5:98:77:05:7e:c2:6a:04:d9:97:99:78:73:3a: 82:ea:7e:8b:7b:7c:d9:1d:50:c8:78:73:c6:5d:bf:71:a8:88: 5c:da:d2:92:f9:c3:43:73:fa:75:f9:3f:be:10:0c:f4:6d:fd: a4:9a:27:7e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcItjdUG/89857mq7pgztgbn95gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwOTU5MDZaFw0yNjAzMDYxMDA0MDZaMDMxMTAvBgNV BAMTKEU3OEYwQTIxNTJGMUE4RTRENUIzMDk3NzQyNzJEQjcwRDhCREUwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZY7+X5pxn1RHhcqbpeG5Iswtg xTEw7KG3XwMo4UsXjvQeF9MyKwRPmL7ZxGfvYCzRGbj1rrtxxizVZiTKryoTHGpP Mxn1pJ7yjJOFIg56RzFAN6T4REjgmUc2Km8ZeVxq4jIBb0f6YzoevYMThwlHPwxP p5SuX1C06WrZCx6QbLx1RJaND/dTpf/ZEIwh/xRj7Uiwg+LIt/D7SRWYCvrJykdc wp1linpxMvqsVGSX6qXMOFgBUg4XQjyFDrMHb4JrINgNQu7ZvKpHUCyAl1TR9kWP 5SaXNVqibQ8UFWLNtz7bplL6Jzq8wukA2UrwyRu2I/FV0D+POwBpcYBjDgA/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnjwohUvGo5NWz CXdCcttw2L3gXTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVVi cEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5TGEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VV YnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzEvRTc4 RjBBMjE1MkYxQThFNEQ1QjMwOTc3NDI3MkRCNzBEOEJERTA1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeBIMA0EAgACMAcDBQAoBEUIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVlDANBgkqhkiG9w0BAQsFAAOCAQEAhcjYwCAAVbbEm6L9 vd2BgJiNyFC7TJ80DcIhR7o2hRbFoAhNtMoYjCUvb6evEXaiZ86+2CZz5WUiLv/p cMx+xpwXDIjBvWaTrIP8QkPE2X+G2n6dwItSIxJVTeHjYPxe4JQzWkVWieMH+Oht hdgJWkwRggPE/BSppVkOSwYibRf0RSYtSCugRxCGC2Qcf7UQnyarASa/v+/8GHI+ NGjAHqhKRdWuJpbJBSiKcEse5XxekQ/wabe2vMpVEnn24+k0nmKWhnUTgslUtPWY dwV+wmoE2ZeZeHM6gup+i3t82R1QyHhzxl2/caiIXNrSkvnDQ3P6dfk/vhAM9G39 pJonfg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:54 2025 by rpki-client