$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer File: CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer (raw, json) Hash identifier: AiLsO8Ot5nSwEBNK8vxVQr40UvkJRdlQ2U6yuntTV2M= Subject key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66C60C258A726B2B6437B98EBD28C5E309072A23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft caRepository: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 08:55:49 +0000 Certificate not after: Wed 07 Oct 2026 09:00:49 +0000 Subordinate resources: AS: 52877 IP: 138.99.56.0/22 IP: 186.232.72.0/22 IP: 2804:91c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:0c:25:8a:72:6b:2b:64:37:b9:8e:bd:28:c5:e3:09:07:2a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 08:55:49 2025 GMT Not After : Oct 7 09:00:49 2026 GMT Subject: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:c5:d7:b5:bd:5b:0c:23:3e:aa:f7:32:20: 71:c5:2d:71:be:e0:cd:9b:12:60:e8:77:96:ee:75: 44:66:76:65:08:a5:81:de:3b:d6:22:1d:eb:59:5d: 86:4a:dd:32:f7:85:9b:fa:8c:d5:c6:32:7e:d6:a2: d0:69:e3:8e:9b:97:05:6d:13:f0:f6:51:b7:86:5c: 5c:ab:a4:4a:16:7f:3d:a2:ce:be:bb:e9:95:7d:c4: 07:58:74:7d:78:69:bb:4b:a6:70:4d:c8:65:68:0b: c3:5a:b4:eb:64:2f:42:65:8e:7e:22:b3:ae:57:2f: 97:48:07:fa:a6:72:e3:b3:8d:15:c5:1e:24:17:e2: 86:6d:a3:85:6d:3e:7a:d3:ee:63:b1:9c:5c:39:db: c5:51:6b:b7:9b:88:e3:53:94:38:f3:fa:a7:8e:c1: e0:30:fd:5c:8f:71:c2:66:9e:62:cd:1e:43:92:c0: 10:1f:fc:73:98:e9:30:3e:ee:04:38:76:1b:ec:bc: 3b:ff:7e:43:2f:e9:d6:4b:a1:ea:a2:d0:a8:7f:e0: 67:86:ae:7f:c7:b7:93:c8:49:5a:6b:c0:67:79:36: b7:ea:18:01:fa:d4:74:91:c6:1d:f5:24:c4:e0:19: dc:98:d3:fc:09:54:27:2d:99:81:a3:ad:38:65:d1: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.56.0/22 186.232.72.0/22 IPv6: 2804:91c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52877 Signature Algorithm: sha256WithRSAEncryption 92:8c:f7:95:e4:56:40:74:c6:aa:f1:23:09:93:49:b4:57:cc: ea:8a:71:aa:64:6f:54:fb:df:a4:a7:dd:59:27:bb:88:7b:b8: 55:c5:29:ad:40:41:b9:84:8e:6a:1f:e0:37:e4:49:57:88:bc: 30:4a:ba:88:cd:10:c9:a0:19:58:34:b4:73:88:2e:aa:36:a8: ad:4c:c9:07:43:c4:d2:de:f6:da:31:66:52:f4:60:fe:fa:e5: 81:68:b4:c7:4b:2e:57:86:fb:96:ec:c0:d0:38:bd:59:d1:73: 19:b7:4a:9b:c9:5e:83:e8:e4:d1:2f:75:e7:f7:99:ee:64:7c: 5b:86:7f:e0:92:11:bf:f8:b6:92:2a:5d:ec:d7:bb:2f:63:f5: 4a:36:a2:fa:c6:0b:b9:cd:9d:49:dd:4f:ed:6e:7a:cc:b5:46: 83:62:e3:92:04:1a:92:62:58:ea:e5:16:ef:52:0c:92:b1:84: d7:f1:fb:83:cb:70:c2:b3:4a:14:f7:46:41:20:6f:3c:64:1a: 4e:93:c1:8c:2d:53:8e:5c:eb:86:35:2e:ef:e5:f9:c0:2d:91: 3f:c3:31:2a:b3:a7:85:8a:b3:10:9c:9f:03:c1:fe:fe:92:91: 1a:ed:b0:37:4e:47:67:41:7e:dc:19:47:99:82:93:bc:d9:42: aa:83:5a:01 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZsYMJYpyaytkN7mOvSjF4wkHKiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDgwODU1NDlaFw0yNjEwMDcwOTAwNDlaMDMxMTAvBgNV BAMTKENFMTk5Qjc2MUFCNDQ0RTgyREM0OTE4QjREMzg5MTdDMTZBRUM3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN08XXtb1bDCM+qvcyIHHFLXG+ 4M2bEmDod5budURmdmUIpYHeO9YiHetZXYZK3TL3hZv6jNXGMn7WotBp446blwVt E/D2UbeGXFyrpEoWfz2izr676ZV9xAdYdH14abtLpnBNyGVoC8NatOtkL0Jljn4i s65XL5dIB/qmcuOzjRXFHiQX4oZto4VtPnrT7mOxnFw528VRa7ebiONTlDjz+qeO weAw/VyPccJmnmLNHkOSwBAf/HOY6TA+7gQ4dhvsvDv/fkMv6dZLoeqi0Kh/4GeG rn/Ht5PISVprwGd5NrfqGAH61HSRxh31JMTgGdyY0/wJVCctmYGjrThl0YKTAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOGZt2GrRE6C3E kYtNOJF8Fq7HuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHh0 YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlqR2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR4 dGFZejhaZGJnMk1qd3lHRDl4U1FnVFdjZ010Q3ZjVFJKSnNTckxpakdkLzAvQ0Ux OTlCNzYxQUI0NDRFODJEQzQ5MThCNEQzODkxN0MxNkFFQzdCOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimM4AwQCuuhIMA0EAgACMAcDBQAoBAkcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOjTANBgkqhkiG9w0BAQsFAAOCAQEAkoz3leRW QHTGqvEjCZNJtFfM6opxqmRvVPvfpKfdWSe7iHu4VcUprUBBuYSOah/gN+RJV4i8 MEq6iM0QyaAZWDS0c4guqjaorUzJB0PE0t722jFmUvRg/vrlgWi0x0suV4b7luzA 0Di9WdFzGbdKm8leg+jk0S915/eZ7mR8W4Z/4JIRv/i2kipd7Ne7L2P1Sjai+sYL uc2dSd1P7W56zLVGg2LjkgQakmJY6uUW71IMkrGE1/H7g8twwrNKFPdGQSBvPGQa TpPBjC1TjlzrhjUu7+X5wC2RP8MxKrOnhYqzEJyfA8H+/pKRGu2wN05HZ0F+3BlH mYKTvNlCqoNaAQ== -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:00 2025 by rpki-client