$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer File: 11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer (raw, json) Hash identifier: 2srtTshoERODx/lo2YuGFfeMwN8GP3vGmuuHOGdIkO0= Subject key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66A471075ED0C6A161C3559CA28F93B517262E81 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft caRepository: rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 20:58:45 +0000 Certificate not after: Tue 22 Sep 2026 21:03:45 +0000 Subordinate resources: AS: 267998 IP: 45.167.96.0/22 IP: 2804:5670::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a4:71:07:5e:d0:c6:a1:61:c3:55:9c:a2:8f:93:b5:17:26:2e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 20:58:45 2025 GMT Not After : Sep 22 21:03:45 2026 GMT Subject: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:1e:b7:69:db:ed:40:ad:d4:e3:dc:b3:c5: 56:34:f9:ea:36:ca:64:61:dc:ef:d5:f0:6f:a5:f1: 10:d8:bc:c9:72:fc:05:26:b2:5b:11:16:5c:e6:ea: db:c3:6f:6b:9c:2f:01:f4:0a:cb:ab:8f:63:87:24: 06:3d:8c:8f:10:97:f2:9c:5e:e3:af:44:b6:34:7f: 31:ee:af:51:a5:6f:8f:c6:1e:88:69:8a:1a:71:73: aa:d3:51:52:cf:49:bd:37:35:90:d6:c4:fe:51:fe: bf:13:e0:da:f7:fd:23:fb:50:8a:d2:c7:88:e2:1b: f3:c7:7c:6c:45:6f:6c:14:d9:40:0b:62:12:b6:22: d1:ce:57:64:ac:e6:d0:71:df:4f:9b:9b:40:90:ce: a0:b8:4b:36:84:b4:21:a8:64:02:67:17:03:52:5a: 71:2c:ed:8a:4f:4a:31:d5:cf:25:1f:60:be:fb:0e: af:50:64:ab:5f:f7:da:02:31:f6:25:26:cf:d1:0d: 5d:7a:73:c6:9b:b9:f2:3e:5c:61:f0:0d:66:07:db: 63:fa:67:ec:24:8f:d0:51:01:81:fc:73:df:19:95: 90:35:8a:79:cb:e8:6a:c7:84:ea:f3:be:39:da:35: d6:5a:10:8c:18:72:ec:46:f6:6c:69:6e:29:67:b3: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.96.0/22 IPv6: 2804:5670::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267998 Signature Algorithm: sha256WithRSAEncryption 1c:70:dc:e0:cb:3d:5e:78:11:21:26:a3:ad:e1:a2:a6:e2:f6: 09:ce:ce:54:95:5e:cb:76:ca:a8:61:6a:ea:f1:9f:e4:d9:e1: 41:c5:9a:49:86:18:a4:6d:f9:15:16:4b:25:35:47:0b:95:11: 84:9e:20:79:af:ed:05:23:21:3e:37:ae:1a:a9:8e:bc:2f:14: 62:62:06:d3:23:80:d5:a7:f4:d3:60:1b:6a:e8:78:1c:50:50: 2d:46:ed:7d:9d:e9:d1:6d:b6:cb:20:62:1d:01:7c:3f:c0:ed: 27:62:3e:e0:27:5c:89:f3:b0:39:94:27:95:4c:32:cd:d4:a6: 65:2c:2f:63:b5:68:f4:4f:6d:c2:fb:ae:3c:21:a5:1b:44:d2: 50:2f:82:0e:ad:ca:12:5f:86:2c:9e:6d:e7:84:49:a3:bf:46: e7:c0:71:2f:91:61:ad:f8:b0:bb:09:eb:5d:8e:2a:d7:5d:0c: e1:d0:36:96:c4:c4:47:8d:e0:29:73:ec:dd:7c:6a:02:ad:e2: 91:33:81:9b:9b:67:16:44:47:0a:1e:6e:0e:45:ea:40:73:64: 6f:51:a6:89:34:11:3b:ac:c4:95:ad:a9:e9:4d:e9:14:d6:29: 62:87:0c:58:c4:d9:b8:db:29:ed:ab:81:09:ec:6b:b5:1e:91: b8:8f:9d:12 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZqRxB17QxqFhw1Wcoo+TtRcmLoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMyMDU4NDVaFw0yNjA5MjIyMTAzNDVaMDMxMTAvBgNV BAMTKDExRkIxRUQ1QTg4OTREQTc0OUE3RjVBRDRGMTBFODBDOTQ0RDQyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfR63advtQK3U49yzxVY0+eo2 ymRh3O/V8G+l8RDYvMly/AUmslsRFlzm6tvDb2ucLwH0Csurj2OHJAY9jI8Ql/Kc XuOvRLY0fzHur1Glb4/GHohpihpxc6rTUVLPSb03NZDWxP5R/r8T4Nr3/SP7UIrS x4jiG/PHfGxFb2wU2UALYhK2ItHOV2Ss5tBx30+bm0CQzqC4SzaEtCGoZAJnFwNS WnEs7YpPSjHVzyUfYL77Dq9QZKtf99oCMfYlJs/RDV16c8abufI+XGHwDWYH22P6 Z+wkj9BRAYH8c98ZlZA1innL6GrHhOrzvjnaNdZaEIwYcuxG9mxpbilnszSpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQR+x7VqIlNp0mn 9a1PEOgMlE1CHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHh6 aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFlSmovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR4 emhRWW5ZN0tSZEVMbjV0VEpjRkVTTGdVeWV0dXBqSHlWeTJodTJRZUpqLzAvMTFG QjFFRDVBODg5NERBNzQ5QTdGNUFENEYxMEU4MEM5NDRENDIxQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLadgMA0EAgACMAcDBQAoBFZwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQW3jANBgkqhkiG9w0BAQsFAAOCAQEAHHDc4Ms9XngRISaj reGipuL2Cc7OVJVey3bKqGFq6vGf5NnhQcWaSYYYpG35FRZLJTVHC5URhJ4gea/t BSMhPjeuGqmOvC8UYmIG0yOA1af002Abauh4HFBQLUbtfZ3p0W22yyBiHQF8P8Dt J2I+4CdcifOwOZQnlUwyzdSmZSwvY7Vo9E9twvuuPCGlG0TSUC+CDq3KEl+GLJ5t 54RJo79G58BxL5FhrfiwuwnrXY4q110M4dA2lsTER43gKXPs3XxqAq3ikTOBm5tn FkRHCh5uDkXqQHNkb1GmiTQRO6zEla2p6U3pFNYpYocMWMTZuNsp7auBCexrtR6R uI+dEg== -----END CERTIFICATE-----Generated at Mon Oct 20 03:01:17 2025 by rpki-client