$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer File: 2AFA735BD922B81B8D49B7C0193B661015358B07.cer (raw, json) Hash identifier: +7imAguUZbw4/glNjV5d3A7gUh94Z/y8Q3b/44iUaP4= Subject key identifier: 2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 56138F237FD2BC8FB893CFCAE9E60E9344D21E04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft caRepository: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 17:57:29 +0000 Certificate not after: Fri 25 Sep 2026 18:02:29 +0000 Subordinate resources: AS: 267999 IP: 45.167.108.0 -- 45.167.110.255 IP: 2804:5674::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:13:8f:23:7f:d2:bc:8f:b8:93:cf:ca:e9:e6:0e:93:44:d2:1e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 26 17:57:29 2025 GMT Not After : Sep 25 18:02:29 2026 GMT Subject: CN=2AFA735BD922B81B8D49B7C0193B661015358B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:31:a0:de:93:6e:54:7a:36:76:5f:98:02: 4b:b7:6d:c0:77:5e:2c:9a:6b:3e:c2:0e:4b:9c:8b: 4b:72:22:31:0c:60:22:94:a4:42:eb:48:94:7b:66: 00:be:46:51:da:4c:74:65:de:fa:bc:02:0c:4e:9b: 03:bc:cd:f6:57:58:36:02:1f:35:e1:fa:d2:c1:1f: a0:e7:7c:9d:03:82:86:a3:91:81:fc:e7:f0:b3:77: 0c:55:76:ca:67:bb:0b:c7:1f:44:0e:04:e4:ea:c0: 16:5f:78:c1:8c:58:33:db:c4:9f:f0:13:4d:af:d8: 0f:9c:da:21:b6:00:89:24:e7:48:57:ac:98:6e:65: db:68:7d:a7:0d:e1:ff:21:1c:9e:33:05:ae:17:d5: 4f:11:66:cd:f1:6e:fa:55:8b:fd:0c:e4:f0:d1:86: 5b:2a:48:56:25:50:90:34:29:af:a9:67:f5:a8:3b: 2a:f7:74:94:f2:ad:9a:6f:ab:97:63:1c:65:2a:58: c5:a4:e1:18:0d:73:2c:d9:43:f5:0d:ce:4f:a4:fc: 8d:2c:38:11:80:7c:d6:03:e7:8a:2f:1c:39:28:eb: c4:06:2d:e1:94:27:58:9b:fb:62:7c:84:b1:bc:e1: 39:e2:46:c2:ab:8f:b3:e5:df:3c:3d:e4:f3:55:4b: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.108.0-45.167.110.255 IPv6: 2804:5674::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267999 Signature Algorithm: sha256WithRSAEncryption 51:e2:43:71:18:9b:24:22:e6:6d:2b:fc:79:65:36:33:4e:21: 57:8c:e9:2f:38:fa:76:ff:2b:a1:58:d0:06:cd:d3:6c:64:c7: 09:e9:e3:6a:d4:86:85:66:41:c4:a1:ae:ac:4e:fd:3d:d3:46: ac:07:57:c2:eb:4a:b8:5a:37:7c:d5:68:3b:ff:9b:1a:36:56: 3b:ba:71:30:7f:d2:1d:67:4c:c7:fe:d7:b8:b0:90:60:8c:f4: 04:4a:cf:44:77:c2:40:9f:d1:9e:1c:61:b7:f3:94:d1:63:c7: bf:a7:ce:ef:e1:37:f8:1f:d3:5d:0f:40:5e:18:26:ba:7d:72: e5:eb:72:99:ac:86:16:eb:5b:03:db:29:86:bf:6b:5d:f1:50: 7a:b2:c8:81:33:ba:9c:ae:07:6b:59:bc:68:b3:8c:2b:64:7e: cc:ea:9f:cd:8a:40:68:be:75:ea:6c:d1:1f:68:0a:74:66:bf: 33:e3:77:ba:77:e6:0e:f8:17:0e:a8:bb:9f:fb:d7:73:75:eb: ec:2c:99:26:7b:14:01:b1:ff:f0:39:26:44:ab:c7:df:89:b8: 5f:4a:17:4e:8a:c9:37:9e:d0:ab:97:f0:b1:b4:18:6b:ae:b5: 2f:67:ee:35:12:22:66:5b:4c:e9:f9:c0:e9:2d:72:a0:69:13: f2:f8:88:ea -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUVhOPI3/SvI+4k8/K6eYOk0TSHgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjYxNzU3MjlaFw0yNjA5MjUxODAyMjlaMDMxMTAvBgNV BAMTKDJBRkE3MzVCRDkyMkI4MUI4RDQ5QjdDMDE5M0I2NjEwMTUzNThCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmTGg3pNuVHo2dl+YAku3bcB3 Xiyaaz7CDkuci0tyIjEMYCKUpELrSJR7ZgC+RlHaTHRl3vq8AgxOmwO8zfZXWDYC HzXh+tLBH6DnfJ0DgoajkYH85/CzdwxVdspnuwvHH0QOBOTqwBZfeMGMWDPbxJ/w E02v2A+c2iG2AIkk50hXrJhuZdtofacN4f8hHJ4zBa4X1U8RZs3xbvpVi/0M5PDR hlsqSFYlUJA0Ka+pZ/WoOyr3dJTyrZpvq5djHGUqWMWk4RgNcyzZQ/UNzk+k/I0s OBGAfNYD54ovHDko68QGLeGUJ1ib+2J8hLG84TniRsKrj7Pl3zw95PNVS13nAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQq+nNb2SK4G41J t8AZO2YQFTWLBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQW1Q akVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ft UGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzAvMkFG QTczNUJEOTIyQjgxQjhENDlCN0MwMTkzQjY2MTAxNTM1OEIwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAItp2wDBAAtp24wDQQCAAIwBwMFACgEVnQwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBBbfMA0GCSqGSIb3DQEBCwUAA4IBAQBR4kNx GJskIuZtK/x5ZTYzTiFXjOkvOPp2/yuhWNAGzdNsZMcJ6eNq1IaFZkHEoa6sTv09 00asB1fC60q4Wjd81Wg7/5saNlY7unEwf9IdZ0zH/te4sJBgjPQESs9Ed8JAn9Ge HGG385TRY8e/p87v4Tf4H9NdD0BeGCa6fXLl63KZrIYW61sD2ymGv2td8VB6ssiB M7qcrgdrWbxos4wrZH7M6p/NikBovnXqbNEfaAp0Zr8z43e6d+YO+BcOqLuf+9dz devsLJkmexQBsf/wOSZEq8ffibhfShdOisk3ntCrl/CxtBhrrrUvZ+41EiJmW0zp +cDpLXKgaRPy+Ijq -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:09 2025 by rpki-client