$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer File: EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer (raw, json) Hash identifier: XYDiQftZKSOmjFeeknzBORJaOEzXhPgFB67sSEMJuNQ= Subject key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36260C19305285FF08D56351AB468568E30F040F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft caRepository: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 18:35:42 +0000 Certificate not after: Mon 21 Sep 2026 18:40:42 +0000 Subordinate resources: AS: 268341 IP: 45.238.168.0/22 IP: 2804:4fa8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:26:0c:19:30:52:85:ff:08:d5:63:51:ab:46:85:68:e3:0f:04:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 18:35:42 2025 GMT Not After : Sep 21 18:40:42 2026 GMT Subject: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:42:39:89:aa:46:5f:91:1f:41:3c:81:aa: 34:d0:d8:32:ac:25:a4:ad:18:92:d3:d4:18:00:d2: 43:b4:4e:35:8e:f5:dc:c0:c2:99:10:a5:c5:6a:a2: 47:32:2c:59:9f:73:34:28:e4:be:22:b9:43:8d:27: 35:91:66:65:5c:36:c8:a0:b2:8f:9c:1f:85:92:19: 0e:b1:a6:29:da:5f:1c:77:a7:cd:ca:37:64:d7:06: 4f:ca:b3:f5:cd:ff:ee:5c:b5:a5:a3:d5:2e:c7:ee: e3:0b:94:b2:91:fe:8c:84:ec:18:19:9e:0c:5f:00: 71:3a:f0:e5:8b:67:6f:d8:c3:11:13:16:6d:6a:9d: 5d:3b:a0:95:68:00:db:85:42:e4:a2:f4:c7:01:84: 9f:b0:5e:75:7c:e8:52:d2:e5:24:20:00:54:04:ff: f0:c1:a3:69:ce:ac:ea:1b:7c:4c:d0:39:82:6c:91: 9f:97:7a:ed:dd:f1:59:90:0d:8d:45:09:f5:68:8d: 6f:de:eb:2e:56:92:be:70:6f:a7:aa:e9:c5:d4:13: 20:95:e7:a0:2e:9b:04:50:68:f9:00:a4:fb:91:56: 30:77:0e:5a:9d:c1:49:80:68:9c:39:0d:bb:aa:cd: d7:b1:17:17:9a:ca:a2:0b:5c:07:2d:be:b1:6d:35: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.168.0/22 IPv6: 2804:4fa8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268341 Signature Algorithm: sha256WithRSAEncryption 79:81:41:57:8d:15:76:e0:c0:27:2b:bb:db:74:40:f2:4c:88: 1e:ee:4a:0c:f0:58:9f:fc:f8:88:2b:8d:e1:5b:6c:1a:98:ac: c7:3c:64:96:32:10:14:59:6a:5d:eb:a0:03:f8:d5:d8:3d:96: dd:69:2e:dc:64:13:cc:d2:98:57:74:2e:d7:52:f2:4c:11:ca: fa:04:13:b3:7f:86:43:c2:2e:25:e0:d2:f5:80:33:62:30:0d: da:a3:3f:cc:54:b7:21:52:b1:a6:bc:51:3d:76:45:98:11:4b: 49:4f:3f:44:53:17:ca:89:cd:ab:99:7e:e9:3b:e0:03:5b:26: ce:6f:4f:65:37:06:92:57:e7:47:08:32:25:a1:7a:a2:2e:24: 68:24:e9:b3:a5:01:d4:f9:7f:eb:ad:3b:20:a8:d7:de:d1:94: 12:41:5c:58:ff:f9:c2:d0:19:4c:61:1f:6c:bf:11:f4:34:6e: 56:93:07:e9:64:2a:6e:0b:83:9e:72:c7:e1:25:0f:de:e2:40: 08:8c:20:d6:87:bf:8e:23:10:78:c2:f9:d1:24:7c:55:b6:f0: b1:df:f1:09:bc:49:8e:8c:9f:c1:d5:e5:33:28:2a:24:bf:47: 4b:da:49:42:ed:05:cc:64:b1:8a:b4:86:31:83:5a:25:44:bd: d3:50:a3:3b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNiYMGTBShf8I1WNRq0aFaOMPBA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjIxODM1NDJaFw0yNjA5MjExODQwNDJaMDMxMTAvBgNV BAMTKEVGOUZFNzQyMjEwOEY4RkRGNkFEODZENzQ4MTg1MzVCMTczOEM5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlEI5iapGX5EfQTyBqjTQ2DKs JaStGJLT1BgA0kO0TjWO9dzAwpkQpcVqokcyLFmfczQo5L4iuUONJzWRZmVcNsig so+cH4WSGQ6xpinaXxx3p83KN2TXBk/Ks/XN/+5ctaWj1S7H7uMLlLKR/oyE7BgZ ngxfAHE68OWLZ2/YwxETFm1qnV07oJVoANuFQuSi9McBhJ+wXnV86FLS5SQgAFQE //DBo2nOrOobfEzQOYJskZ+Xeu3d8VmQDY1FCfVojW/e6y5Wkr5wb6eq6cXUEyCV 56AumwRQaPkApPuRVjB3DlqdwUmAaJw5DbuqzdexFxeayqILXActvrFtNW8ZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvn+dCIQj4/fat htdIGFNbFzjJujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWp4 ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05pUFUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVq eGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAvRUY5 RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIxNzM4QzlCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe6oMA0EAgACMAcDBQAoBE+oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYNTANBgkqhkiG9w0BAQsFAAOCAQEAeYFBV40VduDAJyu7 23RA8kyIHu5KDPBYn/z4iCuN4VtsGpisxzxkljIQFFlqXeugA/jV2D2W3Wku3GQT zNKYV3Qu11LyTBHK+gQTs3+GQ8IuJeDS9YAzYjAN2qM/zFS3IVKxprxRPXZFmBFL SU8/RFMXyonNq5l+6TvgA1smzm9PZTcGklfnRwgyJaF6oi4kaCTps6UB1Pl/6607 IKjX3tGUEkFcWP/5wtAZTGEfbL8R9DRuVpMH6WQqbguDnnLH4SUP3uJACIwg1oe/ jiMQeML50SR8Vbbwsd/xCbxJjoyfwdXlMygqJL9HS9pJQu0FzGSxirSGMYNaJUS9 01CjOw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:00:16 2025 by rpki-client