$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer File: 25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer (raw, json) Hash identifier: 46TsKiptQIvmpJFPrD65xCjLZ60cjLw6api3fKAittE= Subject key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18FBD9D5389CBC3D0EAB5C3536267F3C1FF9A8E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft caRepository: rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 23:59:20 +0000 Certificate not after: Tue 23 Mar 2027 00:04:20 +0000 Subordinate resources: AS: 272436 IP: 45.162.87.0/24 IP: 45.169.96.0/24 IP: 45.174.8.0/24 IP: 45.177.55.0/24 IP: 2804:8128::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fb:d9:d5:38:9c:bc:3d:0e:ab:5c:35:36:26:7f:3c:1f:f9:a8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 23:59:20 2026 GMT Not After : Mar 23 00:04:20 2027 GMT Subject: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:0e:19:57:3c:05:e4:2f:6e:6b:80:f3:68: b7:77:99:2f:55:78:c2:88:7d:de:0f:74:a1:4c:51: 23:85:aa:a0:94:bc:b5:b4:58:30:2f:7b:8f:05:f3: ff:b4:46:49:b9:50:b6:2c:07:7d:75:69:f6:74:f2: 9f:0f:22:b7:f9:de:25:da:d0:1a:b2:68:c8:95:c6: 37:9a:cb:ef:24:a2:16:88:55:0f:ee:f7:d6:a7:3a: 53:9e:d5:b8:55:4f:0f:5b:b5:78:a0:84:07:61:f0: a0:02:f0:54:f6:e6:34:9d:6f:5f:2d:0a:c1:c4:58: e3:c9:85:44:d7:39:20:b7:72:6c:d2:f5:8c:a2:cb: 03:c0:ec:a6:88:6e:7e:65:ca:5a:09:4f:8e:e2:d0: 89:ea:53:2e:80:20:78:e2:ad:d3:2c:bb:a0:91:61: 7d:b0:63:dc:3f:03:18:90:9c:4d:0e:ab:c6:8e:90: 66:61:64:ce:59:5d:e3:22:4c:d2:fc:3d:b5:87:f3: cc:0a:86:94:92:3a:82:32:0b:fd:ce:8b:8a:80:28: 45:07:f3:61:0b:b8:7e:fd:1f:58:2c:bb:ec:aa:34: 08:b2:ac:59:88:8e:43:09:41:c2:d8:06:6b:ba:a2: e1:03:a3:f6:06:48:a8:98:6f:67:b5:00:43:4f:b4: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.87.0/24 45.169.96.0/24 45.174.8.0/24 45.177.55.0/24 IPv6: 2804:8128::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272436 Signature Algorithm: sha256WithRSAEncryption ca:0e:76:21:57:27:d4:39:29:ef:34:89:8e:2e:fc:97:20:03: 0d:8f:93:99:fd:b3:bc:6b:59:ea:1c:fb:72:65:f3:fd:f2:fc: 77:3f:d7:d7:4f:7a:13:e4:12:c3:9c:3f:4c:52:20:8e:7e:14: eb:64:b0:93:ab:ce:25:5e:66:ba:ac:ad:5e:fc:b9:ed:2a:e3: be:f3:68:64:19:c0:ca:e2:e4:5e:7b:18:bb:1a:9b:75:4f:b1: 6b:4e:9a:fa:db:15:58:35:15:d0:f3:7b:b8:58:be:cc:14:8f: c3:10:0c:30:19:63:fe:a3:5e:a6:d6:8b:05:c5:79:4d:7d:ba: d0:be:c5:03:6a:59:ad:80:b3:a0:ed:db:88:67:ae:aa:43:1e: 39:84:48:fd:5b:d8:a3:49:df:50:60:eb:5f:fd:65:ba:cc:da: 47:0c:d1:22:b3:e7:9d:96:82:a0:60:17:5a:0b:2a:b5:d4:ca: 72:ee:d8:c3:ca:87:4a:0c:9c:04:b1:8a:38:3a:7c:64:71:01: f4:bd:fd:13:04:f0:50:8b:b0:6a:86:c7:51:a5:6a:4a:ef:55: 9c:e4:67:27:24:28:4b:69:d7:44:7c:53:0e:9c:39:16:3d:09: 30:6a:01:10:76:99:ea:33:bb:54:a9:b8:e0:31:e2:3f:00:51: 44:d1:0d:fd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUGPvZ1TicvD0Oq1w1NiZ/PB/5qOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMjMyMzU5MjBaFw0yNzAzMjMwMDA0MjBaMDMxMTAvBgNV BAMTKDI1QjY0QzRCRDhFODMwQ0UxNDdGNkVCQzQ3MTk5QkVBRTdFNjNCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97Q4ZVzwF5C9ua4DzaLd3mS9V eMKIfd4PdKFMUSOFqqCUvLW0WDAve48F8/+0Rkm5ULYsB311afZ08p8PIrf53iXa 0BqyaMiVxjeay+8kohaIVQ/u99anOlOe1bhVTw9btXighAdh8KAC8FT25jSdb18t CsHEWOPJhUTXOSC3cmzS9YyiywPA7KaIbn5lyloJT47i0InqUy6AIHjirdMsu6CR YX2wY9w/AxiQnE0Oq8aOkGZhZM5ZXeMiTNL8PbWH88wKhpSSOoIyC/3Oi4qAKEUH 82ELuH79H1gsu+yqNAiyrFmIjkMJQcLYBmu6ouEDo/YGSKiYb2e1AENPtFdFAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQltkxL2OgwzhR/ brxHGZvq5+Y7tDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjJD SGVoR1V4cGRNaGhQR2czdXdDNngxNk1kZ3I0QjlpaU44SDZkYWJ4bksvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzIy Q0hlaEdVeHBkTWhoUEdnM3V3QzZ4MTZNZGdyNEI5aWlOOEg2ZGFieG5LLzAvMjVC NjRDNEJEOEU4MzBDRTE0N0Y2RUJDNDcxOTlCRUFFN0U2M0JCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQALaJXAwQALalgAwQALa4IAwQALbE3MA0EAgACMAcD BQAoBIEoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQoNDANBgkqhkiG9w0BAQsF AAOCAQEAyg52IVcn1Dkp7zSJji78lyADDY+Tmf2zvGtZ6hz7cmXz/fL8dz/X1096 E+QSw5w/TFIgjn4U62Swk6vOJV5muqytXvy57SrjvvNoZBnAyuLkXnsYuxqbdU+x a06a+tsVWDUV0PN7uFi+zBSPwxAMMBlj/qNeptaLBcV5TX260L7FA2pZrYCzoO3b iGeuqkMeOYRI/VvYo0nfUGDrX/1luszaRwzRIrPnnZaCoGAXWgsqtdTKcu7Yw8qH SgycBLGKODp8ZHEB9L39EwTwUIuwaobHUaVqSu9VnORnJyQoS2nXRHxTDpw5Fj0J MGoBEHaZ6jO7VKm44DHiPwBRRNEN/Q== -----END CERTIFICATE-----Generated at Wed Mar 25 22:29:59 2026 by rpki-client