$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer (raw, json) Hash identifier: oGfUXYYssq1x2MYZ8MKtB63/r67qlwcHSB/bMwZmwO4= Subject key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59048B80B1446995DC986175B5C2C7DCCB72CD7A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft caRepository: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 10 Oct 2026 21:27:00 +0000 Certificate not after: Sat 09 Oct 2027 21:32:00 +0000 Subordinate resources: AS: 268186 IP: 45.171.28.0/22 IP: 2804:5960::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:04:8b:80:b1:44:69:95:dc:98:61:75:b5:c2:c7:dc:cb:72:cd:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 21:27:00 2026 GMT Not After : Oct 9 21:32:00 2027 GMT Subject: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:c5:2f:ce:c1:0b:98:fb:4e:ca:c1:25:34: b5:a0:fc:5d:3d:2d:98:dd:d4:16:f5:1b:6d:f9:71: 8d:cf:73:77:eb:a5:b3:47:0f:bf:b4:42:68:8e:6c: a8:5a:47:97:33:13:cd:bf:84:d8:ac:7d:41:65:f8: 7a:fd:06:7d:69:e8:9e:3c:1a:db:03:5e:34:01:07: 82:e5:8b:2c:0a:ea:a3:e4:5a:5a:cd:98:b8:59:62: 27:2b:29:a1:b3:32:33:93:c6:81:3a:08:5c:f6:78: 56:69:4a:65:27:a9:18:bc:15:7f:b0:11:ed:d5:96: 81:5f:c2:9f:4f:95:da:8f:3c:c7:b3:2c:3b:0e:8c: 3c:b1:f3:c2:8e:3a:36:2b:d4:1e:6a:47:4b:69:0c: 20:ba:de:87:8c:87:fc:10:3c:fd:71:2b:9e:15:03: 2d:c9:4b:91:da:22:d6:41:b1:19:f9:e9:eb:9e:66: e1:64:72:89:71:e8:1d:d4:1a:62:bc:17:32:c8:c1: 6f:f7:92:c2:9d:13:63:d6:5a:30:ce:a0:84:cb:3e: 81:9c:5a:a1:2f:91:4d:7b:d7:0a:a2:76:bf:f5:0b: e2:c5:21:2e:03:65:67:e4:0f:30:2d:61:57:f1:26: 4f:7f:89:fa:10:2a:75:f4:86:5a:90:80:0a:21:1d: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.28.0/22 IPv6: 2804:5960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268186 Signature Algorithm: sha256WithRSAEncryption 36:39:1e:c2:f3:26:13:e7:fe:b2:b3:1d:be:6f:26:e6:78:a2: 1c:9b:1b:c0:1e:9c:c1:dd:2f:34:36:9c:bd:10:45:39:5d:13: e7:94:32:d7:b1:6c:a0:c8:db:3c:50:9f:8f:92:f0:34:23:64: 2a:74:cc:13:ac:40:d2:e4:f9:e1:cd:44:42:be:35:2c:88:3d: d3:6c:c3:a6:90:b0:05:f3:ef:90:f4:0e:15:84:bf:4f:b2:99: 18:eb:ff:1f:01:92:b3:67:2a:e6:b6:03:0c:fc:4d:e4:4d:83: 56:e1:4a:66:d3:c3:ee:42:51:ad:f5:ef:15:52:2a:fb:37:7e: 2c:d7:cc:f2:82:1b:c2:56:83:dd:98:03:e7:ad:4a:b3:cd:7c: 52:35:7d:61:a1:54:36:ed:02:b2:46:98:22:3d:0e:23:3e:27: 80:c0:ed:ab:07:fd:a5:30:cf:6c:db:59:86:a9:1a:af:8c:43: f3:8b:78:9b:50:11:ea:f2:bc:1c:a2:2d:de:8e:00:13:58:e8: 98:0c:b5:ef:d7:8e:09:aa:46:d7:fe:d7:e2:5a:1a:ab:e5:1f: 19:bf:c3:6c:02:65:1a:65:26:ab:18:c0:dd:f6:3d:9a:dd:f9: 89:f3:c0:fc:94:c8:6e:d9:ae:9c:a3:35:28:67:36:9c:dd:cb: 3e:7c:27:7e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWQSLgLFEaZXcmGF1tcLH3MtyzXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTAyMTI3MDBaFw0yNzEwMDkyMTMyMDBaMDMxMTAvBgNV BAMTKDI1QzRFOUMwMUU5N0Y0RTg5MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIMUvzsELmPtOysElNLWg/F09 LZjd1Bb1G235cY3Pc3frpbNHD7+0QmiObKhaR5czE82/hNisfUFl+Hr9Bn1p6J48 GtsDXjQBB4LliywK6qPkWlrNmLhZYicrKaGzMjOTxoE6CFz2eFZpSmUnqRi8FX+w Ee3VloFfwp9PldqPPMezLDsOjDyx88KOOjYr1B5qR0tpDCC63oeMh/wQPP1xK54V Ay3JS5HaItZBsRn56eueZuFkcolx6B3UGmK8FzLIwW/3ksKdE2PWWjDOoITLPoGc WqEvkU171wqidr/1C+LFIS4DZWfkDzAtYVfxJk9/ifoQKnX0hlqQgAohHbY7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlxOnAHpf06JEC rOSn67nO5TvQgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEJa b2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hC Wm9oQUM2ekY4Zm1OUDQ4YXFiVlJNNE1MNWdCUnVBa1lGdmREWUdCdll3LzAvMjVD NEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VFNTNCRDA4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLascMA0EAgACMAcDBQAoBFlgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXmjANBgkqhkiG9w0BAQsFAAOCAQEANjkewvMmE+f+srMd vm8m5niiHJsbwB6cwd0vNDacvRBFOV0T55Qy17FsoMjbPFCfj5LwNCNkKnTME6xA 0uT54c1EQr41LIg902zDppCwBfPvkPQOFYS/T7KZGOv/HwGSs2cq5rYDDPxN5E2D VuFKZtPD7kJRrfXvFVIq+zd+LNfM8oIbwlaD3ZgD561Ks818UjV9YaFUNu0CskaY Ij0OIz4ngMDtqwf9pTDPbNtZhqkar4xD84t4m1AR6vK8HKIt3o4AE1jomAy179eO CapG1/7X4loaq+UfGb/DbAJlGmUmqxjA3fY9mt35ifPA/JTIbtmunKM1KGc2nN3L Pnwnfg== -----END CERTIFICATE-----Generated at Sun Oct 11 09:09:35 2026 by rpki-client