$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer File: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer (raw, json) Hash identifier: fnueRql6D4Aus209KPGo5se4/UMaM3oZvSAdTfnmqUQ= Subject key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 775EB3BDB41EEDDCE4E2215389D95EB69B92EFAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft caRepository: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 16:01:23 +0000 Certificate not after: Mon 21 Sep 2026 16:06:23 +0000 Subordinate resources: AS: 52639 IP: 168.195.112.0/22 IP: 179.96.176.0/21 IP: 2804:d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5e:b3:bd:b4:1e:ed:dc:e4:e2:21:53:89:d9:5e:b6:9b:92:ef:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 16:01:23 2025 GMT Not After : Sep 21 16:06:23 2026 GMT Subject: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:3a:13:d2:8c:4d:d3:a6:88:4e:a4:4a:8d: 83:f1:9f:56:3e:60:1d:bd:e8:af:43:99:97:92:a2: 3d:43:65:4b:5e:77:b5:e5:e0:82:da:77:74:eb:69: 15:e8:66:8f:94:07:7b:7f:9e:66:1d:64:37:98:1f: bd:cb:86:9e:86:90:70:e5:7a:4d:df:78:0d:99:d2: bd:80:15:67:c7:42:c9:3e:18:f1:46:da:7d:16:aa: b9:de:d8:f8:7d:27:f4:fb:6b:0f:52:5d:eb:f0:54: b3:12:19:0e:7e:60:49:1c:97:4b:8a:0e:c4:92:73: 75:ce:6e:00:56:64:41:fb:54:23:8b:9f:7e:28:34: 2d:a8:1b:51:08:77:79:5f:fd:e9:91:32:9d:e2:49: ab:98:93:3a:50:3a:b6:a9:8f:53:56:85:f3:c2:ed: 1a:b9:b2:12:7a:48:d3:4f:68:26:f6:4a:d3:6a:39: 68:66:d9:63:90:e1:0e:2b:5e:d1:b3:6b:43:f7:4a: e0:1e:aa:7f:77:41:0e:a1:15:bc:75:43:52:54:4e: e1:88:27:e8:b9:4b:8a:ed:5d:32:4b:b6:5a:24:23: 32:16:f5:ab:63:8b:37:8c:9c:12:f1:55:4e:69:1f: 51:78:ec:f4:d2:29:aa:b3:04:bf:5f:ed:3b:8c:93: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.112.0/22 179.96.176.0/21 IPv6: 2804:d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52639 Signature Algorithm: sha256WithRSAEncryption 9e:36:fc:cf:35:3c:98:17:78:1b:ad:dd:7e:75:b1:6d:2d:a3: 26:38:76:0b:dd:6b:6f:9d:95:5e:64:34:38:fa:ec:d9:1e:cf: e4:6a:c3:bd:97:ec:a0:84:b2:8e:14:1c:b1:ec:31:ff:78:39: db:9b:a7:94:8b:26:64:00:56:9f:cd:44:0c:c6:f4:e5:20:8c: 4a:e8:e3:45:2c:3e:4b:db:ac:31:0e:bd:88:9a:85:9a:57:43: f3:e1:3f:2c:64:a0:3d:c4:eb:39:10:14:db:0b:34:e2:76:01: 4f:6f:77:95:95:f5:45:1b:ad:d0:66:96:2c:61:f4:7d:8b:5c: 7b:dc:00:20:5e:c2:67:01:27:e1:0f:91:81:82:fb:cb:a7:b5: 17:2a:9a:3c:5d:77:c3:74:e6:f7:62:25:be:61:02:a6:2f:ac: ba:3f:75:66:13:d5:81:5f:a7:a4:44:c3:a0:e1:f4:02:83:70: 7a:ff:ea:d2:bd:78:15:92:87:8c:11:13:3a:8b:1e:c8:a1:15: e8:d9:7a:87:48:e4:fd:5a:94:ca:31:87:d8:21:86:65:ee:c3: 92:bb:e3:1d:03:41:04:37:cb:30:97:95:52:fb:a3:28:42:2a: 4a:66:65:ef:90:23:5b:b3:47:e6:1d:dd:12:d9:39:61:00:56: 3e:e4:aa:65 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUd16zvbQe7dzk4iFTidletpuS76swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjIxNjAxMjNaFw0yNjA5MjExNjA2MjNaMDMxMTAvBgNV BAMTKDRDMzMxMDk4Qjg0REM5Mjk2QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIDoT0oxN06aITqRKjYPxn1Y+ YB296K9DmZeSoj1DZUted7Xl4ILad3TraRXoZo+UB3t/nmYdZDeYH73Lhp6GkHDl ek3feA2Z0r2AFWfHQsk+GPFG2n0Wqrne2Ph9J/T7aw9SXevwVLMSGQ5+YEkcl0uK DsSSc3XObgBWZEH7VCOLn34oNC2oG1EId3lf/emRMp3iSauYkzpQOrapj1NWhfPC 7Rq5shJ6SNNPaCb2StNqOWhm2WOQ4Q4rXtGza0P3SuAeqn93QQ6hFbx1Q1JUTuGI J+i5S4rtXTJLtlokIzIW9atjizeMnBLxVU5pH1F47PTSKaqzBL9f7TuMk/MNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMMxCYuE3JKWu9 runSwFvirDzFojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMi80QzMz MTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKow3ADBAOzYLAwDQQCAAIwBwMFACgEDZAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM2fMA0GCSqGSIb3DQEBCwUAA4IBAQCeNvzPNTyY F3gbrd1+dbFtLaMmOHYL3WtvnZVeZDQ4+uzZHs/kasO9l+yghLKOFByx7DH/eDnb m6eUiyZkAFafzUQMxvTlIIxK6ONFLD5L26wxDr2ImoWaV0Pz4T8sZKA9xOs5EBTb CzTidgFPb3eVlfVFG63QZpYsYfR9i1x73AAgXsJnASfhD5GBgvvLp7UXKpo8XXfD dOb3YiW+YQKmL6y6P3VmE9WBX6ekRMOg4fQCg3B6/+rSvXgVkoeMERM6ix7IoRXo 2XqHSOT9WpTKMYfYIYZl7sOSu+MdA0EEN8swl5VS+6MoQipKZmXvkCNbs0fmHd0S 2TlhAFY+5Kpl -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:03 2025 by rpki-client