$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer File: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer (raw, json) Hash identifier: ObCwKSQa8equ4PjKURIcY4ji0Q/587U8LnX10gfIHFY= Subject key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59F15998816544DC449AFC93B3E960E53EF1DA91 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft caRepository: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:32 +0000 Certificate not after: Wed 04 Mar 2026 18:40:32 +0000 Subordinate resources: AS: 268312 IP: 45.238.44.0/22 IP: 2804:4f38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f1:59:98:81:65:44:dc:44:9a:fc:93:b3:e9:60:e5:3e:f1:da:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:32 2025 GMT Not After : Mar 4 18:40:32 2026 GMT Subject: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:2e:a1:94:f4:33:7f:7f:24:97:00:8b:9d: d9:38:ed:a6:d4:30:42:97:2a:dd:e8:ef:0a:09:39: fa:b4:6a:ae:a7:0d:6d:c6:3d:6e:e1:e4:82:6c:f3: 85:b2:98:d2:a0:aa:9a:46:4d:e8:ea:7f:5f:6d:a9: e7:95:8f:b9:c2:fe:8f:7a:9d:36:73:14:b9:c4:da: b9:8c:45:ce:43:d5:bb:1e:ea:c4:e4:11:ad:ce:04: d4:0d:42:18:ff:07:45:8e:d8:e6:97:f1:28:4b:fb: cb:df:61:a9:ae:5e:19:b5:82:ba:8b:88:9b:4e:60: a2:03:84:45:2d:82:21:51:56:b4:13:0a:e9:bd:f4: ab:46:e5:03:68:01:85:5a:be:cf:d0:10:10:69:04: 8b:01:16:ca:c6:26:73:44:47:31:0c:3a:ff:77:51: 08:59:62:cf:1c:07:45:6a:67:25:c2:4d:2e:89:e1: 16:16:8a:ea:1b:80:42:4c:8b:7a:42:06:bc:ff:71: 82:ae:ec:ac:0e:84:29:98:00:0f:90:02:96:50:4f: 3f:6d:55:d2:14:21:84:82:40:99:af:78:36:26:05: 33:a2:fc:97:e4:1d:33:4c:f5:b1:82:d6:f9:9a:79: e5:2b:3d:e2:0c:d4:39:d0:c2:d6:57:8a:5e:ce:c5: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.44.0/22 IPv6: 2804:4f38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268312 Signature Algorithm: sha256WithRSAEncryption 85:95:4d:70:8f:f1:06:e2:95:91:4b:83:8a:1b:29:02:c2:21: 15:0c:6f:16:eb:3c:a7:02:6c:8a:2d:f3:13:7b:39:4a:e0:d3: d0:8f:1a:13:78:10:71:a4:ce:39:98:02:80:d5:2f:76:aa:74: 61:c9:4c:fa:ed:ca:52:c5:e4:97:f6:3c:c8:0d:8d:5c:5d:ca: e2:09:f8:1a:bd:c2:23:12:4d:8a:11:56:5f:ef:af:50:7c:1d: 74:a5:75:0c:85:9a:bc:21:80:b3:55:0d:98:33:6e:84:7f:5f: 6b:38:2a:82:38:42:64:10:1d:74:56:05:9d:29:6c:61:9f:9d: d5:73:da:10:00:c7:5e:14:6e:85:54:0f:fd:65:e9:5b:ed:2c: 4c:70:d1:f0:3d:f6:8e:d0:5a:2a:d9:d7:d8:29:73:a2:4a:70: ca:0f:b3:6a:9e:b0:98:0b:c4:f2:09:28:8e:a8:4c:1a:02:c5: 63:85:45:ef:e5:73:14:74:c3:17:1d:a1:44:a4:ed:8a:b5:ff: 68:c4:38:62:9d:0e:0c:a3:c1:48:dc:cc:1a:91:f4:5c:02:f5: bb:ba:a2:43:a9:fd:29:65:50:4b:b3:0f:ce:56:96:93:d9:42: e5:7c:78:f3:04:bc:ae:4c:b3:41:1d:96:f3:a6:92:af:36:c8: a6:00:86:7d -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUWfFZmIFlRNxEmvyTs+lg5T7x2pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzJaFw0yNjAzMDQxODQwMzJaMDMxMTAvBgNV BAMTKEY5NzdDQ0Y0NDI4QTQ1NjgzNzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUS6hlPQzf38klwCLndk47abU MEKXKt3o7woJOfq0aq6nDW3GPW7h5IJs84WymNKgqppGTejqf19tqeeVj7nC/o96 nTZzFLnE2rmMRc5D1bse6sTkEa3OBNQNQhj/B0WO2OaX8ShL+8vfYamuXhm1grqL iJtOYKIDhEUtgiFRVrQTCum99KtG5QNoAYVavs/QEBBpBIsBFsrGJnNERzEMOv93 UQhZYs8cB0VqZyXCTS6J4RYWiuobgEJMi3pCBrz/cYKu7KwOhCmYAA+QApZQTz9t VdIUIYSCQJmveDYmBTOi/JfkHTNM9bGC1vmaeeUrPeIM1DnQwtZXil7OxW2/AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5d8z0QopFaDee /43H+fGkXJLUDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1Jq MjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1alAvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1Jq MjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1alAvMS9GOTc3 Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt7iwwDQQCAAIwBwMFACgETzgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBgYMA0GCSqGSIb3DQEBCwUAA4IBAQCFlU1wj/EG4pWRS4OK GykCwiEVDG8W6zynAmyKLfMTezlK4NPQjxoTeBBxpM45mAKA1S92qnRhyUz67cpS xeSX9jzIDY1cXcriCfgavcIjEk2KEVZf769QfB10pXUMhZq8IYCzVQ2YM26Ef19r OCqCOEJkEB10VgWdKWxhn53Vc9oQAMdeFG6FVA/9Zelb7SxMcNHwPfaO0Foq2dfY KXOiSnDKD7NqnrCYC8TyCSiOqEwaAsVjhUXv5XMUdMMXHaFEpO2Ktf9oxDhinQ4M o8FI3MwakfRcAvW7uqJDqf0pZVBLsw/OVpaT2ULlfHjzBLyuTLNBHZbzppKvNsim AIZ9 -----END CERTIFICATE-----Generated at Mon Nov 3 05:21:06 2025 by rpki-client