$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer File: EF9D370AB78E47ED988195E5BF641AC265AC0230.cer (raw, json) Hash identifier: hFSajuJdaeE8VyFnoDK3Qq4jEAt5nikc4qGl6KTg3ZU= Subject key identifier: EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6D3C6514B6B39218894DAF5DE574A05BC0AF1F13 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft caRepository: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 29 Jul 2025 12:23:26 +0000 Certificate not after: Tue 28 Jul 2026 12:28:26 +0000 Subordinate resources: AS: 273431 IP: 186.227.76.0/22 IP: 191.7.0.0/23 IP: 2804:8e84::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3c:65:14:b6:b3:92:18:89:4d:af:5d:e5:74:a0:5b:c0:af:1f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 29 12:23:26 2025 GMT Not After : Jul 28 12:28:26 2026 GMT Subject: CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:d8:fe:fc:2e:39:bb:71:69:f6:86:af:6e: eb:3f:9d:fe:61:aa:c7:d0:34:ee:d7:2b:4e:ff:5f: 26:08:f6:35:81:31:9c:77:22:26:ec:8e:94:2c:e0: ce:83:42:94:31:72:f2:8a:03:c3:f7:69:2b:db:19: 36:a5:c4:b9:db:6e:04:e9:b1:5b:c5:bc:97:ec:9e: b8:ff:98:38:aa:46:f2:ac:66:61:3c:d7:5c:ed:c8: f3:cc:36:f1:63:d3:1c:5e:98:da:33:34:4d:b6:8a: 0a:a8:49:23:04:bc:48:87:de:4e:cc:27:e0:42:67: 95:6e:97:25:72:6b:c4:96:6d:07:39:b7:99:09:a7: 87:9e:18:f7:20:47:97:e9:9f:d8:ba:bf:26:32:ac: 15:f2:5e:cb:37:f3:9b:bd:39:46:28:bc:ce:64:0f: b4:d9:48:08:44:63:26:08:86:62:0d:e7:3a:0e:aa: 86:e7:60:9d:5d:8d:4b:71:d7:59:09:14:c0:13:84: 93:42:b8:16:72:87:f3:5c:88:12:a5:6c:26:19:36: 00:33:b1:0f:31:cd:2d:3b:49:d2:31:42:fa:fc:a2: f7:b0:6d:27:ae:ae:83:99:2b:6d:ea:85:b9:1f:6a: 58:45:ad:37:fd:93:2e:ba:a3:a4:0d:28:c1:5d:b4: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.227.76.0/22 191.7.0.0/23 IPv6: 2804:8e84::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273431 Signature Algorithm: sha256WithRSAEncryption 0d:72:6d:6e:c7:5a:3d:6c:a8:37:55:02:46:3a:2c:48:cc:24: 98:8b:ed:4c:a5:73:b1:4b:bb:be:0c:aa:d7:fe:32:ac:70:ea: 0e:e4:0f:cf:88:73:4d:c7:f3:f6:22:35:07:2a:4b:fe:80:76: ce:df:9c:d0:f6:01:cd:f6:2b:1a:8e:1e:6a:b9:33:17:a7:fe: 3c:7e:46:51:c5:01:fd:93:bd:3a:a2:a2:2b:94:d7:89:ec:48: ff:c9:60:2d:22:d5:9a:8f:92:d6:60:75:1f:ae:54:bb:6b:d3: 51:95:87:35:c6:a4:85:92:5b:5d:4e:e8:ff:6f:2c:ac:53:39: b7:7d:74:e4:22:44:15:96:6d:32:55:b3:1b:72:40:92:0f:e4: 2f:d2:97:5e:e6:12:70:a8:2a:d0:0f:d9:ab:3d:f6:4a:11:89: 81:b8:62:ea:bb:b1:f0:60:88:c1:ad:2d:a5:05:20:81:d6:39: e1:64:7d:69:be:ff:14:5e:68:a0:d6:ea:29:64:e5:32:cb:5f: 91:02:af:ed:4d:bd:1a:e5:45:1a:a0:d1:c1:3c:bb:2a:4a:85: 34:1e:21:78:5a:a7:16:78:d0:d0:af:39:c7:21:c1:4c:0c:01: a4:c4:0c:b6:cc:97:46:ec:8e:6c:0d:20:5b:d0:f3:10:38:1c: ef:3a:de:e9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbTxlFLazkhiJTa9d5XSgW8CvHxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjkxMjIzMjZaFw0yNjA3MjgxMjI4MjZaMDMxMTAvBgNV BAMTKEVGOUQzNzBBQjc4RTQ3RUQ5ODgxOTVFNUJGNjQxQUMyNjVBQzAyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYltj+/C45u3Fp9oavbus/nf5h qsfQNO7XK07/XyYI9jWBMZx3IibsjpQs4M6DQpQxcvKKA8P3aSvbGTalxLnbbgTp sVvFvJfsnrj/mDiqRvKsZmE811ztyPPMNvFj0xxemNozNE22igqoSSMEvEiH3k7M J+BCZ5VulyVya8SWbQc5t5kJp4eeGPcgR5fpn9i6vyYyrBXyXss385u9OUYovM5k D7TZSAhEYyYIhmIN5zoOqobnYJ1djUtx11kJFMAThJNCuBZyh/NciBKlbCYZNgAz sQ8xzS07SdIxQvr8ovewbSeuroOZK23qhbkfalhFrTf9ky66o6QNKMFdtFElAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvnTcKt45H7ZiB leW/ZBrCZawCMDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGlw azRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRp cGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzAvRUY5 RDM3MEFCNzhFNDdFRDk4ODE5NUU1QkY2NDFBQzI2NUFDMDIzMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCuuNMAwQBvwcAMA0EAgACMAcDBQAoBI6EMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQsFzANBgkqhkiG9w0BAQsFAAOCAQEADXJtbsda PWyoN1UCRjosSMwkmIvtTKVzsUu7vgyq1/4yrHDqDuQPz4hzTcfz9iI1BypL/oB2 zt+c0PYBzfYrGo4earkzF6f+PH5GUcUB/ZO9OqKiK5TXiexI/8lgLSLVmo+S1mB1 H65Uu2vTUZWHNcakhZJbXU7o/28srFM5t3105CJEFZZtMlWzG3JAkg/kL9KXXuYS cKgq0A/Zqz32ShGJgbhi6rux8GCIwa0tpQUggdY54WR9ab7/FF5ooNbqKWTlMstf kQKv7U29GuVFGqDRwTy7KkqFNB4heFqnFnjQ0K85xyHBTAwBpMQMtsyXRuyObA0g W9DzEDgc7zre6Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:38 2025 by rpki-client