$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer File: 4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.cer (raw, json) Hash identifier: MAjka1/j+9EP1wO4vIsQifzJq4n54j3mFX7rWLe7+ZA= Subject key identifier: 4B:FB:FA:A0:5D:90:56:4C:CE:A2:CF:D8:A6:05:09:E5:D6:EA:33:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4D1B9AF60B89366FEA5D79EC50C7CB64F5FFB266 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft caRepository: rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Oct 2025 18:26:17 +0000 Certificate not after: Thu 08 Oct 2026 18:31:17 +0000 Subordinate resources: AS: 265197 IP: 167.250.72.0/22 IP: 2804:2c20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1b:9a:f6:0b:89:36:6f:ea:5d:79:ec:50:c7:cb:64:f5:ff:b2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 9 18:26:17 2025 GMT Not After : Oct 8 18:31:17 2026 GMT Subject: CN=4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:f3:3b:50:64:cc:66:c3:71:02:6b:b0:c3: 81:ef:c3:6c:8e:9b:88:84:f9:e7:d1:26:7e:dd:c0: 3c:cf:e4:c4:ff:ec:73:5a:db:9f:20:5b:e3:86:eb: ab:a6:51:3a:05:de:b4:89:64:ce:1f:27:4b:d9:47: 9a:c2:44:e2:03:d4:4e:47:9c:86:0e:60:78:36:5c: bf:ee:4b:84:a8:50:32:0e:ae:c5:7a:ef:41:f6:85: a3:33:3c:66:82:f1:55:9a:cb:4a:3d:55:56:78:db: 85:74:c7:28:d3:02:d9:9d:de:20:40:87:1d:f4:67: 7a:31:ad:35:60:71:f9:9c:4e:a1:e4:10:bd:f0:cf: 4c:86:74:ce:6c:a2:df:2b:97:51:cb:84:73:13:41: 53:ff:d0:24:9a:e9:ce:69:50:0a:9b:e0:ad:77:81: 48:e4:96:4d:fc:4e:67:09:01:97:81:1f:03:bb:71: 4c:80:38:fc:11:96:8c:a1:4d:59:d2:6a:1d:89:14: 24:96:53:40:f4:7b:80:fe:15:0d:3c:35:28:93:02: a8:ed:00:d8:84:40:1e:d2:87:13:b6:a0:8f:84:68: 88:b8:1a:df:da:5b:43:b4:1c:e5:4d:e7:91:13:c4: 55:99:f3:0e:20:23:7a:32:af:3d:64:39:65:ee:81: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:FB:FA:A0:5D:90:56:4C:CE:A2:CF:D8:A6:05:09:E5:D6:EA:33:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/4BFBFAA05D90564CCEA2CFD8A60509E5D6EA3318.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.72.0/22 IPv6: 2804:2c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265197 Signature Algorithm: sha256WithRSAEncryption 0d:23:ad:26:e2:2d:33:37:45:92:93:0c:8d:f8:18:10:e5:20: 7d:8f:03:47:03:97:5c:d8:12:b3:29:4b:d1:35:ff:7d:29:58: 7a:06:f3:2c:73:bf:bd:e4:2a:4d:8a:37:b9:d7:2a:02:3d:29: f3:c3:69:f6:40:3b:41:eb:7b:7d:a9:1d:95:d2:b1:bd:b7:3a: 70:ff:fc:d4:12:98:69:7c:26:59:61:94:7d:ab:6c:f2:47:90: f4:68:da:44:ab:c8:d6:d5:4d:89:20:12:e2:2f:de:dc:cd:ae: a3:85:eb:8b:55:86:87:64:b4:6c:a3:8b:f4:94:26:8f:40:ee: c6:dd:a8:df:0d:ef:80:39:32:01:a5:ae:2e:9f:0b:5a:74:d3: f3:db:1f:a5:09:42:af:1c:93:dd:da:d1:e6:a6:ac:d6:95:8c: 9d:d7:66:5c:2f:8b:67:61:91:d8:58:a5:fe:6f:16:fc:e7:8f: a7:6e:62:79:de:ba:b7:db:34:f6:fc:c8:44:a6:08:a2:f8:53: 3c:bf:26:a4:26:c8:f1:b1:3d:dc:dd:17:6a:69:1f:36:90:84: b4:fc:5d:eb:1b:5a:99:6a:30:00:6a:08:d5:3e:65:56:d8:94: 9e:df:6e:50:e6:2e:6f:f3:ff:68:b8:53:4c:65:e9:de:00:b4: 2a:32:dd:ab -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTRua9guJNm/qXXnsUMfLZPX/smYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDkxODI2MTdaFw0yNjEwMDgxODMxMTdaMDMxMTAvBgNV BAMTKDRCRkJGQUEwNUQ5MDU2NENDRUEyQ0ZEOEE2MDUwOUU1RDZFQTMzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3PM7UGTMZsNxAmuww4Hvw2yO m4iE+efRJn7dwDzP5MT/7HNa258gW+OG66umUToF3rSJZM4fJ0vZR5rCROID1E5H nIYOYHg2XL/uS4SoUDIOrsV670H2haMzPGaC8VWay0o9VVZ424V0xyjTAtmd3iBA hx30Z3oxrTVgcfmcTqHkEL3wz0yGdM5sot8rl1HLhHMTQVP/0CSa6c5pUAqb4K13 gUjklk38TmcJAZeBHwO7cUyAOPwRloyhTVnSah2JFCSWU0D0e4D+FQ08NSiTAqjt ANiEQB7ShxO2oI+EaIi4Gt/aW0O0HOVN55ETxFWZ8w4gI3oyrz1kOWXugUoLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRL+/qgXZBWTM6i z9imBQnl1uozGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQU56 b3VUdjlzMk5nN3YyRkNFWFpVRmR1UWtLNVlxb1hyaWlRcTdUMjJlWFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FO em91VHY5czJOZzd2MkZDRVhaVUZkdVFrSzVZcW9YcmlpUXE3VDIyZVhRLzAvNEJG QkZBQTA1RDkwNTY0Q0NFQTJDRkQ4QTYwNTA5RTVENkVBMzMxOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCp/pIMA0EAgACMAcDBQAoBCwgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQL7TANBgkqhkiG9w0BAQsFAAOCAQEADSOtJuItMzdFkpMM jfgYEOUgfY8DRwOXXNgSsylL0TX/fSlYegbzLHO/veQqTYo3udcqAj0p88Np9kA7 Qet7fakdldKxvbc6cP/81BKYaXwmWWGUfats8keQ9GjaRKvI1tVNiSAS4i/e3M2u o4Xri1WGh2S0bKOL9JQmj0Duxt2o3w3vgDkyAaWuLp8LWnTT89sfpQlCrxyT3drR 5qas1pWMnddmXC+LZ2GR2Fil/m8W/OePp25ied66t9s09vzIRKYIovhTPL8mpCbI 8bE93N0XamkfNpCEtPxd6xtamWowAGoI1T5lVtiUnt9uUOYub/P/aLhTTGXp3gC0 KjLdqw== -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:03 2025 by rpki-client