$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer File: 679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer (raw, json) Hash identifier: ySMcu1fOsMtA79VQZVlyMhGLe4BgEqhJLWfUfuAzfcU= Subject key identifier: 67:9A:17:C4:EA:F3:C5:21:92:42:E0:F4:69:4C:02:B2:85:02:C2:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D28F4A0B3F476BE7238BA6552AB06C3835F0BB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft caRepository: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Oct 2025 01:56:58 +0000 Certificate not after: Mon 19 Oct 2026 02:01:58 +0000 Subordinate resources: AS: 270928 IP: 190.123.2.0/23 IP: 2804:73a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:28:f4:a0:b3:f4:76:be:72:38:ba:65:52:ab:06:c3:83:5f:0b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 01:56:58 2025 GMT Not After : Oct 19 02:01:58 2026 GMT Subject: CN=679A17C4EAF3C5219242E0F4694C02B28502C2BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:a5:2f:41:13:da:f4:89:f6:4f:57:01:33: e0:8e:26:c9:6b:88:66:7d:3f:f0:46:28:e3:f6:2b: 2d:e7:13:4e:8b:c7:db:61:54:fa:86:ce:89:ef:17: d0:98:0b:57:26:f6:b5:ca:bd:2d:9c:e4:af:c8:fa: b6:60:3c:03:83:f6:f2:e6:3b:df:7c:5c:f2:f4:a0: ec:3f:7c:ce:e2:f7:7e:c2:18:f3:51:9e:1e:87:8c: 8e:6c:11:27:1e:f9:1c:7c:5a:cd:31:bd:a0:69:0d: 9d:fa:6e:01:47:5b:35:e2:26:bc:43:21:6d:f7:e7: f8:94:b4:8c:3d:2b:33:de:44:26:df:98:fd:93:92: 1d:bf:90:fe:74:80:16:ba:23:93:15:71:61:f4:c1: ce:6f:1a:9f:d4:c8:38:16:40:00:c1:59:cd:73:13: 6e:dc:33:e8:0f:31:4e:56:bb:e9:0d:ca:46:58:fd: 60:73:53:d6:84:77:d1:4c:33:3a:3f:51:c6:38:84: c4:d3:40:81:0f:56:19:af:d6:f5:53:88:ea:e1:80: bc:03:8d:7e:c5:dc:fd:15:52:8b:d2:c9:58:7a:76: d0:a7:de:a9:9a:af:28:cb:78:b4:08:81:79:7c:aa: 89:28:2a:c0:30:56:38:64:a7:c5:52:ec:d2:c6:e7: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:9A:17:C4:EA:F3:C5:21:92:42:E0:F4:69:4C:02:B2:85:02:C2:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.123.2.0/23 IPv6: 2804:73a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270928 Signature Algorithm: sha256WithRSAEncryption 48:60:57:b4:e2:b0:f3:71:57:bc:d1:aa:89:f6:45:2d:ff:8d: 92:84:bb:99:8a:47:e4:19:9f:fe:4f:ff:53:b2:b5:f0:ad:0d: 8d:a2:78:0e:7e:f6:26:f4:97:40:74:28:ba:c3:bb:76:50:3e: 0b:fe:a9:c3:f8:95:28:00:2e:94:ba:18:69:72:a5:b8:1f:0e: d4:38:1d:1c:fc:01:9e:f6:cd:2c:60:15:2d:61:aa:d9:f4:75: 62:9c:13:61:cf:58:20:bc:c7:36:25:5b:9f:df:4b:6c:e6:ca: 5e:7e:ac:21:56:c0:ba:62:e7:3a:94:0a:48:36:dc:fb:88:66: c4:91:5e:39:0d:e3:05:7d:05:6d:62:82:a2:0a:f1:cf:29:f5: f7:ed:e8:5d:0c:ed:47:84:b3:09:3d:96:ac:51:72:18:fd:b0: cb:bb:0f:d0:73:bf:ef:bb:7d:e8:db:01:cd:cb:33:c9:80:42: bd:0b:61:d8:70:46:c4:4e:65:e5:ca:9b:78:86:e6:0b:3b:ab: c9:5f:4d:3c:48:4f:70:8c:b2:ed:cf:86:33:52:d7:76:8c:0f: f8:17:fa:1e:dc:76:37:da:c6:36:bb:e2:07:cd:cb:ad:a4:dc: c2:8d:cf:46:a8:96:29:71:30:58:6f:2c:6e:06:e5:66:dd:3b: 19:d1:e7:ce -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHSj0oLP0dr5yOLplUqsGw4NfC7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjAwMTU2NThaFw0yNjEwMTkwMjAxNThaMDMxMTAvBgNV BAMTKDY3OUExN0M0RUFGM0M1MjE5MjQyRTBGNDY5NEMwMkIyODUwMkMyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntKUvQRPa9In2T1cBM+COJslr iGZ9P/BGKOP2Ky3nE06Lx9thVPqGzonvF9CYC1cm9rXKvS2c5K/I+rZgPAOD9vLm O998XPL0oOw/fM7i937CGPNRnh6HjI5sESce+Rx8Ws0xvaBpDZ36bgFHWzXiJrxD IW335/iUtIw9KzPeRCbfmP2Tkh2/kP50gBa6I5MVcWH0wc5vGp/UyDgWQADBWc1z E27cM+gPMU5Wu+kNykZY/WBzU9aEd9FMMzo/UcY4hMTTQIEPVhmv1vVTiOrhgLwD jX7F3P0VUovSyVh6dtCn3qmaryjLeLQIgXl8qokoKsAwVjhkp8VS7NLG50b/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnmhfE6vPFIZJC 4PRpTAKyhQLCvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHFK UEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0ZtWHYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rx SlBBUzl4TGFTa1pXZThCbjEyVEU3ZXBSZEFhdWNTc3RYRU1iTFNGbVh2LzAvNjc5 QTE3QzRFQUYzQzUyMTkyNDJFMEY0Njk0QzAyQjI4NTAyQzJCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBvnsCMA0EAgACMAcDBQAoBHOkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiUDANBgkqhkiG9w0BAQsFAAOCAQEASGBXtOKw83FXvNGq ifZFLf+NkoS7mYpH5Bmf/k//U7K18K0NjaJ4Dn72JvSXQHQousO7dlA+C/6pw/iV KAAulLoYaXKluB8O1DgdHPwBnvbNLGAVLWGq2fR1YpwTYc9YILzHNiVbn99LbObK Xn6sIVbAumLnOpQKSDbc+4hmxJFeOQ3jBX0FbWKCogrxzyn19+3oXQztR4SzCT2W rFFyGP2wy7sP0HO/77t96NsBzcszyYBCvQth2HBGxE5l5cqbeIbmCzuryV9NPEhP cIyy7c+GM1LXdowP+Bf6Htx2N9rGNrviB83LraTcwo3PRqiWKXEwWG8sbgblZt07 GdHnzg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:35 2025 by rpki-client