$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer (raw, json) Hash identifier: S/YfAejBMwf10RMGSHj24lkyqOm4rv7W0FAcw2YjrW0= Subject key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 49DD786D36312471AA141439AD0C9E38D567E38B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft caRepository: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Oct 2025 17:59:49 +0000 Certificate not after: Mon 05 Oct 2026 18:04:49 +0000 Subordinate resources: AS: 268186 IP: 45.171.28.0/22 IP: 2804:5960::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:dd:78:6d:36:31:24:71:aa:14:14:39:ad:0c:9e:38:d5:67:e3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 6 17:59:49 2025 GMT Not After : Oct 5 18:04:49 2026 GMT Subject: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:c5:2f:ce:c1:0b:98:fb:4e:ca:c1:25:34: b5:a0:fc:5d:3d:2d:98:dd:d4:16:f5:1b:6d:f9:71: 8d:cf:73:77:eb:a5:b3:47:0f:bf:b4:42:68:8e:6c: a8:5a:47:97:33:13:cd:bf:84:d8:ac:7d:41:65:f8: 7a:fd:06:7d:69:e8:9e:3c:1a:db:03:5e:34:01:07: 82:e5:8b:2c:0a:ea:a3:e4:5a:5a:cd:98:b8:59:62: 27:2b:29:a1:b3:32:33:93:c6:81:3a:08:5c:f6:78: 56:69:4a:65:27:a9:18:bc:15:7f:b0:11:ed:d5:96: 81:5f:c2:9f:4f:95:da:8f:3c:c7:b3:2c:3b:0e:8c: 3c:b1:f3:c2:8e:3a:36:2b:d4:1e:6a:47:4b:69:0c: 20:ba:de:87:8c:87:fc:10:3c:fd:71:2b:9e:15:03: 2d:c9:4b:91:da:22:d6:41:b1:19:f9:e9:eb:9e:66: e1:64:72:89:71:e8:1d:d4:1a:62:bc:17:32:c8:c1: 6f:f7:92:c2:9d:13:63:d6:5a:30:ce:a0:84:cb:3e: 81:9c:5a:a1:2f:91:4d:7b:d7:0a:a2:76:bf:f5:0b: e2:c5:21:2e:03:65:67:e4:0f:30:2d:61:57:f1:26: 4f:7f:89:fa:10:2a:75:f4:86:5a:90:80:0a:21:1d: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.28.0/22 IPv6: 2804:5960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268186 Signature Algorithm: sha256WithRSAEncryption d6:e5:ec:3b:c5:64:8c:64:3d:11:4d:9b:c5:f1:fd:a2:01:29: 28:8b:bd:75:05:18:be:31:51:78:79:5f:97:20:c5:62:d9:6a: a6:2b:c3:3f:43:40:56:d4:c2:3f:60:a2:5e:d4:d8:cd:e3:12: 62:9f:b9:18:9f:e4:0d:f8:5f:42:7b:2e:41:2f:38:b1:b7:0c: f2:79:c5:80:7f:c9:a9:25:29:03:f3:cb:d8:82:cd:1e:69:4b: e5:56:72:5a:47:f3:89:5f:14:3e:1a:48:68:a0:ff:0b:94:7c: 16:c9:4e:e1:75:8e:29:7f:22:be:92:2a:e4:75:0c:cd:6c:61: f1:4b:97:49:f7:02:f1:80:81:51:1d:47:5b:5e:13:9b:db:21: ae:37:36:41:41:9b:9a:52:a6:c4:d5:59:a2:64:51:51:e7:8e: ff:19:9d:f5:1a:b9:37:27:6f:db:b9:33:43:d6:e4:63:e5:16: bb:31:05:08:eb:6f:60:c6:bc:f6:c8:ff:49:89:25:71:3c:de: cb:a6:d2:77:d4:fd:db:48:4b:47:2b:0f:03:9b:32:b6:4c:4d: 43:cc:72:78:96:8b:f1:14:47:88:57:d4:0f:c9:aa:7a:7d:7d: cb:fb:bd:90:21:4f:2d:91:a6:72:fb:3e:ed:4e:42:cf:59:da: 16:9f:d2:ce -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUSd14bTYxJHGqFBQ5rQyeONVn44swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDYxNzU5NDlaFw0yNjEwMDUxODA0NDlaMDMxMTAvBgNV BAMTKDI1QzRFOUMwMUU5N0Y0RTg5MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIMUvzsELmPtOysElNLWg/F09 LZjd1Bb1G235cY3Pc3frpbNHD7+0QmiObKhaR5czE82/hNisfUFl+Hr9Bn1p6J48 GtsDXjQBB4LliywK6qPkWlrNmLhZYicrKaGzMjOTxoE6CFz2eFZpSmUnqRi8FX+w Ee3VloFfwp9PldqPPMezLDsOjDyx88KOOjYr1B5qR0tpDCC63oeMh/wQPP1xK54V Ay3JS5HaItZBsRn56eueZuFkcolx6B3UGmK8FzLIwW/3ksKdE2PWWjDOoITLPoGc WqEvkU171wqidr/1C+LFIS4DZWfkDzAtYVfxJk9/ifoQKnX0hlqQgAohHbY7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlxOnAHpf06JEC rOSn67nO5TvQgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEJa b2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hC Wm9oQUM2ekY4Zm1OUDQ4YXFiVlJNNE1MNWdCUnVBa1lGdmREWUdCdll3LzAvMjVD NEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VFNTNCRDA4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLascMA0EAgACMAcDBQAoBFlgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXmjANBgkqhkiG9w0BAQsFAAOCAQEA1uXsO8VkjGQ9EU2b xfH9ogEpKIu9dQUYvjFReHlflyDFYtlqpivDP0NAVtTCP2CiXtTYzeMSYp+5GJ/k DfhfQnsuQS84sbcM8nnFgH/JqSUpA/PL2ILNHmlL5VZyWkfziV8UPhpIaKD/C5R8 FslO4XWOKX8ivpIq5HUMzWxh8UuXSfcC8YCBUR1HW14Tm9shrjc2QUGbmlKmxNVZ omRRUeeO/xmd9Rq5Nydv27kzQ9bkY+UWuzEFCOtvYMa89sj/SYklcTzey6bSd9T9 20hLRysPA5sytkxNQ8xyeJaL8RRHiFfUD8mqen19y/u9kCFPLZGmcvs+7U5Cz1na Fp/Szg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:05 2025 by rpki-client