$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer File: 5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer (raw, json) Hash identifier: Do2jB0aS9IRR9/PtDWzp0BvhUrV+eniUN/nicEa/X2E= Subject key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 270315FA301915D7B48E8DBF8D37EF84E82A69F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft caRepository: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Oct 2025 16:12:33 +0000 Certificate not after: Fri 16 Oct 2026 16:17:33 +0000 Subordinate resources: AS: 262585 IP: 201.55.160.0/20 IP: 2804:8f70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:03:15:fa:30:19:15:d7:b4:8e:8d:bf:8d:37:ef:84:e8:2a:69:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 17 16:12:33 2025 GMT Not After : Oct 16 16:17:33 2026 GMT Subject: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:25:a3:37:d1:60:16:9e:b6:13:df:61:2a: 46:bb:34:ef:c4:14:78:ab:53:5a:b0:a0:a5:22:42: 54:fe:e4:32:62:54:2d:7f:bc:7f:65:b3:68:f9:e0: 84:5e:63:70:11:d2:5d:b2:c9:94:1c:e4:1c:91:b5: 95:24:da:14:d8:77:68:cb:80:f2:e0:73:76:9f:12: 37:e1:33:75:c9:79:e9:9d:da:2a:ee:d8:40:fc:0a: 36:07:88:d3:f6:3d:f3:48:10:fd:59:e9:a3:0d:c0: 28:1a:53:6f:6b:e9:ae:89:2f:85:52:74:48:9c:4f: ba:53:99:3d:41:30:b1:b5:2a:2f:7e:dc:38:8e:db: ea:4d:92:77:26:e6:ff:08:15:ee:9f:33:30:a5:f6: 23:36:cd:70:63:30:40:6c:8e:6e:01:bc:a0:ba:45: 4c:a3:95:f6:5a:7f:60:76:ca:db:c3:00:e5:2f:74: 39:bd:5d:4b:9a:75:bb:be:7d:e0:35:97:74:e7:b1: 53:7d:f8:c6:7f:bb:0a:ab:29:0d:de:32:4d:7a:cf: cb:3e:71:91:d5:51:ef:0e:50:e7:41:c8:f1:31:89: 99:de:f3:35:2f:d8:01:4f:61:3c:1c:61:1e:0e:ad: 16:c9:35:0b:5c:6d:16:00:5e:50:a6:18:d2:92:9a: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.55.160.0/20 IPv6: 2804:8f70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262585 Signature Algorithm: sha256WithRSAEncryption 93:f9:3d:d8:7d:fb:6d:a7:5b:a3:58:80:e1:a5:ef:35:c8:37: fb:58:88:e0:ae:8d:2f:57:f1:81:86:60:14:31:d9:ce:dd:9a: d0:4b:da:67:37:77:cb:1c:cb:d9:62:b0:a3:f0:ab:1a:be:e0: 61:07:55:76:d3:1f:57:e3:6d:62:84:f1:68:30:07:ab:fe:da: c3:98:bc:ae:ea:9e:87:f2:c3:99:6d:47:a5:22:c7:7b:6b:40: 38:98:06:12:0e:9a:99:a4:62:be:78:e3:8b:ad:f2:d0:cc:04: 19:34:93:43:6e:85:be:66:4f:ae:41:ac:8c:44:50:04:24:bb: eb:05:5b:d3:b9:ff:d2:7e:6f:44:ae:16:a0:f6:82:56:17:b2: 0f:69:f0:49:29:b4:48:75:3d:24:1c:95:55:dc:01:70:41:f1: 77:f1:21:d3:46:d6:24:c6:a5:82:e9:53:f5:39:a9:1a:b8:55: 68:62:b0:cd:96:3c:fe:77:0c:3a:5d:0b:d2:1f:af:19:58:a6: a1:9b:fb:e3:9f:d3:d4:d6:92:19:31:20:80:fd:ea:ef:0e:40: cd:d3:1f:29:3e:cc:d6:4f:23:37:78:a8:34:12:fc:d2:93:61: 0a:0b:7c:c3:57:5b:43:6f:6d:49:19:7d:7f:22:d3:99:85:c3: 46:7e:6e:c9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJwMV+jAZFde0jo2/jTfvhOgqafgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTcxNjEyMzNaFw0yNjEwMTYxNjE3MzNaMDMxMTAvBgNV BAMTKDVBQzg1M0FFM0Y5Q0I2MkNDMDFCQUY0Mzc5QkY4MDcyOTI2QjA3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjSWjN9FgFp62E99hKka7NO/E FHirU1qwoKUiQlT+5DJiVC1/vH9ls2j54IReY3AR0l2yyZQc5ByRtZUk2hTYd2jL gPLgc3afEjfhM3XJeemd2iru2ED8CjYHiNP2PfNIEP1Z6aMNwCgaU29r6a6JL4VS dEicT7pTmT1BMLG1Ki9+3DiO2+pNkncm5v8IFe6fMzCl9iM2zXBjMEBsjm4BvKC6 RUyjlfZaf2B2ytvDAOUvdDm9XUuadbu+feA1l3TnsVN9+MZ/uwqrKQ3eMk16z8s+ cZHVUe8OUOdByPExiZne8zUv2AFPYTwcYR4OrRbJNQtcbRYAXlCmGNKSmvVfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRayFOuP5y2LMAb r0N5v4BykmsHpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR21u UmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWtaZnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dt blJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAvNUFD ODUzQUUzRjlDQjYyQ0MwMUJBRjQzNzlCRjgwNzI5MjZCMDdBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyTegMA0EAgACMAcDBQAoBI9wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQBuTANBgkqhkiG9w0BAQsFAAOCAQEAk/k92H37badbo1iA 4aXvNcg3+1iI4K6NL1fxgYZgFDHZzt2a0EvaZzd3yxzL2WKwo/CrGr7gYQdVdtMf V+NtYoTxaDAHq/7aw5i8ruqeh/LDmW1HpSLHe2tAOJgGEg6amaRivnjji63y0MwE GTSTQ26FvmZPrkGsjERQBCS76wVb07n/0n5vRK4WoPaCVheyD2nwSSm0SHU9JByV VdwBcEHxd/Eh00bWJMalgulT9TmpGrhVaGKwzZY8/ncMOl0L0h+vGVimoZv745/T 1NaSGTEggP3q7w5AzdMfKT7M1k8jN3ioNBL80pNhCgt8w1dbQ29tSRl9fyLTmYXD Rn5uyQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:40 2025 by rpki-client