$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4EDEFC0468156CEC0F08CCCB61C61C719EDF844.cer File: C4EDEFC0468156CEC0F08CCCB61C61C719EDF844.cer (raw, json) Hash identifier: P1QXwu6wvUN/1tVDrMnMxDvepWFGlVc9iIAA7OT9SWY= Subject key identifier: C4:ED:EF:C0:46:81:56:CE:C0:F0:8C:CC:B6:1C:61:C7:19:ED:F8:44 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6D5CDB9B635772C4396CE217D5989ABD19140D2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/1/C4EDEFC0468156CEC0F08CCCB61C61C719EDF844.mft caRepository: rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 18 Aug 2025 12:40:22 +0000 Certificate not after: Mon 17 Aug 2026 12:45:22 +0000 Subordinate resources: AS: 264393 IP: 131.161.216.0/22 IP: 2804:1dc8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5c:db:9b:63:57:72:c4:39:6c:e2:17:d5:98:9a:bd:19:14:0d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 18 12:40:22 2025 GMT Not After : Aug 17 12:45:22 2026 GMT Subject: CN=C4EDEFC0468156CEC0F08CCCB61C61C719EDF844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:73:3e:e9:4e:d6:87:22:b7:3e:c0:c8:be:a7: 80:a0:20:0c:d1:46:77:be:83:3e:d0:88:dc:83:33: 19:72:92:f2:5a:16:32:aa:08:7a:2b:f7:ed:06:95: 0e:5d:b3:c3:39:da:68:75:11:25:04:b6:fe:a3:10: 16:0c:91:e1:41:8a:46:da:ea:ad:40:52:bd:88:8a: ca:84:52:a1:0b:7b:de:b9:47:bb:16:9d:02:43:0f: c2:23:16:a9:bd:e4:13:7c:0e:d3:d2:8a:89:21:90: 7b:07:f6:d6:ec:11:b4:34:50:07:39:e6:98:69:48: da:12:af:dc:81:37:49:fc:23:27:86:79:09:9a:c6: 35:5f:17:e3:b3:1a:cb:36:18:d7:b8:1f:12:bc:d2: f6:58:ae:31:92:7f:51:9d:7d:3d:1b:57:70:01:b9: 8c:13:15:48:7c:7d:ee:cc:13:c7:9c:a7:ee:ab:41: b6:5b:9c:05:95:35:f5:76:df:47:05:fe:d5:0a:e7: 80:b5:50:7a:50:0d:f8:61:31:72:f9:00:19:1c:61: ee:1a:fe:00:c0:b2:4b:f0:26:e1:03:91:06:93:aa: ed:1b:56:ef:32:29:0f:0f:0e:f3:d3:78:dc:60:64: c3:ab:e0:51:5a:9d:98:60:d8:3b:93:65:cf:79:e4: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:ED:EF:C0:46:81:56:CE:C0:F0:8C:CC:B6:1C:61:C7:19:ED:F8:44 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/1/C4EDEFC0468156CEC0F08CCCB61C61C719EDF844.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.216.0/22 IPv6: 2804:1dc8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264393 Signature Algorithm: sha256WithRSAEncryption 9f:ea:8d:a7:72:9d:a3:86:d4:86:c5:29:35:28:36:52:2c:3c: f3:f9:46:27:43:8b:06:a8:3d:3a:bc:71:b8:b5:d0:ee:70:2f: 39:75:0c:c6:cc:03:48:d2:50:ca:f4:87:67:23:6c:39:f1:27: b8:fe:e9:0a:bb:60:d7:e4:07:74:77:07:91:b0:83:7c:58:e9: 27:38:00:7b:84:76:41:21:fb:33:d9:5f:81:14:22:f3:ce:fd: ed:ea:5a:20:e0:7d:ae:18:21:d7:31:7c:2c:de:54:67:e4:32: d8:67:4d:3c:6d:89:8e:ab:39:82:de:30:5e:20:b1:bd:06:5e: 95:c1:7d:08:e5:94:53:56:49:74:ed:0a:bb:31:2b:a3:f7:87: f2:dd:7a:9e:38:c9:ca:b2:06:b8:75:8e:40:b8:05:e5:41:a2: ec:ee:6a:f4:1b:dc:d3:b0:82:4c:98:99:f4:aa:df:d7:ac:50: 64:e8:54:70:d9:b0:c6:16:e8:d1:82:65:4b:d1:e8:b8:ea:3d: f2:e0:6e:1d:2c:2a:0c:56:db:3e:5d:b9:68:24:56:f0:92:b5: 80:7f:a5:3f:fe:73:a3:61:4b:5c:9e:b0:61:10:48:fe:b4:9b: 84:f5:16:a9:0d:da:51:52:9f:f8:4f:a2:ad:25:53:f9:68:1e: bd:39:d8:c4 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUbVzbm2NXcsQ5bOIX1ZiavRkUDSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTgxMjQwMjJaFw0yNjA4MTcxMjQ1MjJaMDMxMTAvBgNV BAMTKEM0RURFRkMwNDY4MTU2Q0VDMEYwOENDQ0I2MUM2MUM3MTlFREY4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcz7pTtaHIrc+wMi+p4CgIAzR Rne+gz7QiNyDMxlykvJaFjKqCHor9+0GlQ5ds8M52mh1ESUEtv6jEBYMkeFBikba 6q1AUr2IisqEUqELe965R7sWnQJDD8IjFqm95BN8DtPSiokhkHsH9tbsEbQ0UAc5 5phpSNoSr9yBN0n8IyeGeQmaxjVfF+OzGss2GNe4HxK80vZYrjGSf1GdfT0bV3AB uYwTFUh8fe7ME8ecp+6rQbZbnAWVNfV230cF/tUK54C1UHpQDfhhMXL5ABkcYe4a /gDAskvwJuEDkQaTqu0bVu8yKQ8PDvPTeNxgZMOr4FFanZhg2DuTZc955CqRAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTE7e/ARoFWzsDw jMy2HGHHGe34RDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkE4 a2FNNWVFN24ya2lWaXpqU0NFZ2dvUnNiR2dCRkNncE1Db3J4cHpybUEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkE4 a2FNNWVFN24ya2lWaXpqU0NFZ2dvUnNiR2dCRkNncE1Db3J4cHpybUEvMS9DNEVE RUZDMDQ2ODE1NkNFQzBGMDhDQ0NCNjFDNjFDNzE5RURGODQ0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKDodgwDQQCAAIwBwMFACgEHcgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAjJMA0GCSqGSIb3DQEBCwUAA4IBAQCf6o2ncp2jhtSGxSk1 KDZSLDzz+UYnQ4sGqD06vHG4tdDucC85dQzGzANI0lDK9IdnI2w58Se4/ukKu2DX 5Ad0dweRsIN8WOknOAB7hHZBIfsz2V+BFCLzzv3t6log4H2uGCHXMXws3lRn5DLY Z008bYmOqzmC3jBeILG9Bl6VwX0I5ZRTVkl07Qq7MSuj94fy3XqeOMnKsga4dY5A uAXlQaLs7mr0G9zTsIJMmJn0qt/XrFBk6FRw2bDGFujRgmVL0ei46j3y4G4dLCoM Vts+XbloJFbwkrWAf6U//nOjYUtcnrBhEEj+tJuE9RapDdpRUp/4T6KtJVP5aB69 OdjE -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:45 2025 by rpki-client