$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer File: 5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer (raw, json) Hash identifier: zHLYT4QY3nRwoqI2QjQAQCbaX17EdEWzQdHFk2q2znI= Subject key identifier: 5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 32A4895028862C8DB8295371CB85C35BAA7A5FBF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft caRepository: rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Oct 2025 19:49:15 +0000 Certificate not after: Mon 05 Oct 2026 19:54:15 +0000 Subordinate resources: AS: 272713 IP: 2804:8780::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a4:89:50:28:86:2c:8d:b8:29:53:71:cb:85:c3:5b:aa:7a:5f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 6 19:49:15 2025 GMT Not After : Oct 5 19:54:15 2026 GMT Subject: CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6f:2b:7c:d7:99:42:19:2c:3a:30:88:2b:be: 9d:3f:4d:5e:96:a5:4b:92:95:3b:82:ea:1f:37:b4: ac:7f:ad:11:15:71:7a:df:e0:c5:ec:a0:38:72:57: 67:0d:96:22:47:c9:d0:29:f0:ea:a2:94:26:c2:7b: c9:66:1a:d7:40:0c:35:ff:4c:6b:57:17:c8:a1:73: 00:94:dd:b5:6b:39:d8:ef:88:6c:10:34:d0:a4:a1: 47:be:6f:df:a4:6a:45:60:b8:38:e4:46:d3:d7:f2: 81:fa:62:00:0f:c8:10:5a:73:45:76:42:70:18:6c: 0e:d6:15:46:2d:eb:3a:c5:2e:fb:8a:9a:8e:6d:c7: ba:30:38:f9:55:2d:e8:ba:a6:15:6b:a5:a8:b6:e6: 19:fe:40:46:a5:81:07:f7:2e:f2:d0:2a:d5:b9:bb: 8b:86:34:51:9e:5b:11:d4:5e:43:4b:a7:0c:9e:7b: 7d:f7:6c:36:7f:36:1c:70:d3:c9:22:49:22:2b:23: e4:b2:a9:83:cf:8d:5a:9a:57:e9:28:6c:57:27:2f: 7b:2e:5a:13:0f:ce:8a:ad:61:d3:b2:13:cb:a1:bb: 66:ad:20:9e:4c:75:42:7a:fd:4a:ad:42:76:b8:7f: 78:0b:11:a7:30:7a:46:92:35:af:41:28:75:6e:ba: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272713 Signature Algorithm: sha256WithRSAEncryption 17:8e:76:2b:a4:a1:91:c5:6d:01:42:53:75:c2:fc:c2:43:08: 32:d2:ff:d4:e1:91:8b:ed:1f:b3:51:0b:b8:6f:11:1f:a7:7a: 6d:0d:3c:45:d4:ed:54:56:d0:64:9a:91:4e:b6:f8:9b:5b:eb: d3:71:ea:75:98:73:77:10:53:3c:b4:6e:2d:f0:7c:11:9f:4f: cf:44:a5:73:30:d5:82:5c:12:90:c2:1a:aa:90:54:45:3f:c4: 6f:85:b0:78:bc:f8:77:fb:3b:98:fc:04:d5:f4:e8:b0:56:e4: 43:61:23:c8:61:8f:9e:e8:c2:df:d9:70:95:61:43:74:e0:6c: e6:ff:4a:2e:18:a8:8a:8e:17:7f:bc:e6:02:e1:3e:e5:99:7e: 8e:75:78:a3:75:50:85:9e:51:ed:26:83:2e:03:0f:54:76:c3: 8a:6f:06:af:c6:14:e9:62:7c:08:c4:8e:3f:d7:73:2e:5a:fd: 50:cd:a2:85:a1:1d:d0:5b:4a:59:0f:83:51:af:23:c5:55:48: 2e:d2:bd:f6:4a:bb:95:05:41:25:ea:8c:a0:67:16:ac:b0:c2: 42:fd:21:95:09:97:c6:82:41:7e:2f:99:49:e0:7d:05:af:c1: 6b:d0:5f:10:bd:9b:56:f6:18:fa:dc:25:c2:24:28:5c:c4:7c: bb:a9:ae:ce -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUMqSJUCiGLI24KVNxy4XDW6p6X78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDYxOTQ5MTVaFw0yNjEwMDUxOTU0MTVaMDMxMTAvBgNV BAMTKDVGNzQ3RTQwQTI0NkEwQ0E3ODExQ0FBRDlCRUU5NTNEQ0Y4REI4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDybyt815lCGSw6MIgrvp0/TV6W pUuSlTuC6h83tKx/rREVcXrf4MXsoDhyV2cNliJHydAp8OqilCbCe8lmGtdADDX/ TGtXF8ihcwCU3bVrOdjviGwQNNCkoUe+b9+kakVguDjkRtPX8oH6YgAPyBBac0V2 QnAYbA7WFUYt6zrFLvuKmo5tx7owOPlVLei6phVrpai25hn+QEalgQf3LvLQKtW5 u4uGNFGeWxHUXkNLpwyee333bDZ/Nhxw08kiSSIrI+SyqYPPjVqaV+kobFcnL3su WhMPzoqtYdOyE8uhu2atIJ5MdUJ6/UqtQna4f3gLEacwekaSNa9BKHVuugptAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfdH5AokagyngR yq2b7pU9z424STAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1RK UlJHNUtZWng0bkR2Y3Y4ZjhhQXo5N1ZiNnRMdU5BVzR4bjh5UUZrc0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dU SlJSRzVLWVp4NG5EdmN2OGY4YUF6OTdWYjZ0THVOQVc0eG44eVFGa3NHLzAvNUY3 NDdFNDBBMjQ2QTBDQTc4MTFDQUFEOUJFRTk1M0RDRjhEQjg0OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASHgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KUkwDQYJKoZIhvcNAQELBQADggEBABeOdiukoZHFbQFCU3XC/MJDCDLS/9ThkYvt H7NRC7hvER+nem0NPEXU7VRW0GSakU62+Jtb69Nx6nWYc3cQUzy0bi3wfBGfT89E pXMw1YJcEpDCGqqQVEU/xG+FsHi8+Hf7O5j8BNX06LBW5ENhI8hhj57owt/ZcJVh Q3TgbOb/Si4YqIqOF3+85gLhPuWZfo51eKN1UIWeUe0mgy4DD1R2w4pvBq/GFOli fAjEjj/Xcy5a/VDNooWhHdBbSlkPg1GvI8VVSC7SvfZKu5UFQSXqjKBnFqywwkL9 IZUJl8aCQX4vmUngfQWvwWvQXxC9m1b2GPrcJcIkKFzEfLuprs4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:50 2025 by rpki-client