$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6238C4C1BE653DF0767CE659E0182021C7A17537.cer File: 6238C4C1BE653DF0767CE659E0182021C7A17537.cer (raw, json) Hash identifier: 7uYbdW9lWQyjWT07SKGucOCEtpaHMrLFTHLriHIRH6A= Subject key identifier: 62:38:C4:C1:BE:65:3D:F0:76:7C:E6:59:E0:18:20:21:C7:A1:75:37 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4FF04D80F9E545F9276B7B9094FEB2E573320497 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/6238C4C1BE653DF0767CE659E0182021C7A17537.mft caRepository: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 22:10:36 +0000 Certificate not after: Wed 07 Oct 2026 22:15:36 +0000 Subordinate resources: AS: 268308 IP: 45.238.4.0/22 IP: 2804:4f28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f0:4d:80:f9:e5:45:f9:27:6b:7b:90:94:fe:b2:e5:73:32:04:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 22:10:36 2025 GMT Not After : Oct 7 22:15:36 2026 GMT Subject: CN=6238C4C1BE653DF0767CE659E0182021C7A17537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:27:f7:f4:b0:15:8a:8c:f2:b2:c3:d8:64: a9:6f:f2:99:f1:8e:ce:dd:52:78:77:48:3c:81:59: fa:86:af:0c:bd:1a:bd:d6:6e:14:a4:11:0d:c4:bb: 7b:a9:e7:d7:ed:75:eb:c9:0d:54:74:11:c3:a7:e5: 09:23:55:b8:c8:8f:2b:2e:ba:1f:c6:39:f1:a1:1b: fa:1c:ef:78:8f:db:d2:cb:2b:73:a2:51:fe:69:0e: ae:d5:2c:8e:ed:65:e3:63:1f:d7:41:bc:2f:4a:91: 82:8a:81:e9:4c:59:59:67:b9:ff:ae:52:95:5e:c2: d7:55:1b:e1:f9:f3:96:f8:52:25:84:a0:7c:70:4d: 60:38:88:c9:8e:86:fd:0b:e9:c8:31:ac:83:29:13: ec:02:b0:71:4f:97:4d:e3:ca:4f:ad:d2:bb:c8:36: 2d:99:fc:1b:aa:5d:84:ff:55:3b:b8:0f:ce:aa:71: 0e:85:28:3d:89:68:9e:f9:08:99:de:25:74:ee:7b: 84:ce:76:75:b6:23:77:57:a1:1f:4a:e7:63:44:c0: 2b:b8:54:41:d9:53:5a:95:e3:40:ba:67:1c:68:c1: 67:18:85:49:46:50:03:52:d0:bd:8a:ab:90:9d:c5: fe:b3:64:d8:4c:98:b8:28:b0:7d:32:fa:1f:6d:66: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:38:C4:C1:BE:65:3D:F0:76:7C:E6:59:E0:18:20:21:C7:A1:75:37 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/6238C4C1BE653DF0767CE659E0182021C7A17537.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.4.0/22 IPv6: 2804:4f28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268308 Signature Algorithm: sha256WithRSAEncryption c9:2b:e1:06:b4:df:9b:14:bd:0c:a9:43:8f:95:4f:1f:c2:b7: 5a:65:05:b6:4f:a2:60:a6:4a:1a:2b:3c:7f:36:64:ae:f3:28: 5f:45:59:04:90:64:a9:68:bd:96:ba:00:09:40:a6:17:04:91: 70:79:a8:10:f0:d4:0e:f7:97:0b:2e:d6:7a:fc:87:0e:8b:bb: a4:30:2f:26:34:db:c0:c2:2f:5e:d8:cd:54:77:8a:48:a9:16: ce:1e:2e:6d:8f:b7:be:cb:82:47:a4:73:54:56:0b:bf:6d:5e: ea:da:ec:19:48:38:ad:fc:6c:0a:22:e7:a7:44:a7:97:a9:9e: bb:13:eb:aa:f0:62:61:57:86:60:53:48:27:05:63:cc:b8:7e: 93:60:07:33:2b:cb:60:fb:b7:e7:e1:11:97:d7:ac:68:c6:51: d9:91:34:db:b4:fa:52:e2:5a:be:ca:45:99:de:be:52:5d:a1: 24:df:b0:ee:04:14:dd:d7:b7:9f:f6:24:a0:6e:38:0e:75:7c: be:4c:77:8c:3f:e3:76:16:b2:50:7b:b9:e1:28:7c:1d:cf:15: 4b:3a:d2:b8:81:5e:6c:3d:47:08:7d:aa:d4:68:54:5a:44:be: f9:0d:d0:98:9e:45:76:67:0e:d9:9e:26:ad:28:9c:ea:5f:e9: a2:c2:0d:5c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUT/BNgPnlRfkna3uQlP6y5XMyBJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDgyMjEwMzZaFw0yNjEwMDcyMjE1MzZaMDMxMTAvBgNV BAMTKDYyMzhDNEMxQkU2NTNERjA3NjdDRTY1OUUwMTgyMDIxQzdBMTc1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCITSf39LAViozyssPYZKlv8pnx js7dUnh3SDyBWfqGrwy9Gr3WbhSkEQ3Eu3up59ftdevJDVR0EcOn5QkjVbjIjysu uh/GOfGhG/oc73iP29LLK3OiUf5pDq7VLI7tZeNjH9dBvC9KkYKKgelMWVlnuf+u UpVewtdVG+H585b4UiWEoHxwTWA4iMmOhv0L6cgxrIMpE+wCsHFPl03jyk+t0rvI Ni2Z/BuqXYT/VTu4D86qcQ6FKD2JaJ75CJneJXTue4TOdnW2I3dXoR9K52NEwCu4 VEHZU1qV40C6ZxxowWcYhUlGUANS0L2Kq5Cdxf6zZNhMmLgosH0y+h9tZjKdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiOMTBvmU98HZ8 5lngGCAhx6F1NzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzI1 REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3OW0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcy NURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAvNjIz OEM0QzFCRTY1M0RGMDc2N0NFNjU5RTAxODIwMjFDN0ExNzUzNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe4EMA0EAgACMAcDBQAoBE8oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYFDANBgkqhkiG9w0BAQsFAAOCAQEAySvhBrTfmxS9DKlD j5VPH8K3WmUFtk+iYKZKGis8fzZkrvMoX0VZBJBkqWi9lroACUCmFwSRcHmoEPDU DveXCy7WevyHDou7pDAvJjTbwMIvXtjNVHeKSKkWzh4ubY+3vsuCR6RzVFYLv21e 6trsGUg4rfxsCiLnp0Snl6meuxPrqvBiYVeGYFNIJwVjzLh+k2AHMyvLYPu35+ER l9esaMZR2ZE027T6UuJavspFmd6+Ul2hJN+w7gQU3de3n/YkoG44DnV8vkx3jD/j dhayUHu54Sh8Hc8VSzrSuIFebD1HCH2q1GhUWkS++Q3QmJ5FdmcO2Z4mrSic6l/p osINXA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:54 2025 by rpki-client