$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer File: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer (raw, json) Hash identifier: exY4Kx7/FnJJ9ohiehbGAqR3bmazcbxkk+befC9wiPU= Subject key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12BC8B0931F1959FF1EBBD5E5C108A5BFB8B709F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft caRepository: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 12:23:00 +0000 Certificate not after: Tue 22 Sep 2026 12:28:00 +0000 Subordinate resources: AS: 266309 IP: 170.79.176.0/22 IP: 2804:35d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bc:8b:09:31:f1:95:9f:f1:eb:bd:5e:5c:10:8a:5b:fb:8b:70:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 12:23:00 2025 GMT Not After : Sep 22 12:28:00 2026 GMT Subject: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:7d:ef:11:57:db:20:45:c0:8f:a2:5f:74: 45:81:ec:56:eb:e6:f5:0b:42:e0:04:47:26:8d:21: 61:31:51:7f:89:b3:a5:90:ff:64:c0:a5:fc:a1:70: 44:7c:94:ee:fc:04:bb:16:1f:a1:0a:6c:ed:7c:56: 3f:97:78:0b:6b:63:e6:32:48:0f:16:3d:c6:97:97: 90:bb:11:26:d5:54:43:8a:16:57:24:fd:5a:ea:ff: 80:ce:a1:e1:1f:b8:cd:5f:45:a8:04:cd:77:54:ad: 0f:f9:a2:f2:ed:bd:ad:b6:b5:c2:4c:ae:ce:d8:91: 35:49:19:c7:16:4e:b7:c4:0b:d3:1e:25:54:73:f3: cf:3f:f1:45:e8:ca:1f:98:5a:e3:0a:03:59:5f:32: 50:b8:4a:56:0a:60:74:32:db:09:45:db:4f:7b:ca: 09:46:84:ae:c2:4c:53:f6:7e:e7:42:c4:2f:82:88: 24:7e:49:53:90:95:ca:07:4e:c0:9b:67:72:72:ad: 8d:bc:fa:80:90:3b:e8:84:ef:41:38:6a:8c:df:8b: b9:b9:26:a7:b8:ce:86:73:8f:bb:d5:e3:c5:5a:e5: b8:f2:1c:d6:cc:be:f3:1f:2a:08:21:b2:39:16:cd: f1:8b:79:4c:99:b3:08:c9:0e:11:2c:58:f6:7d:d2: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.176.0/22 IPv6: 2804:35d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266309 Signature Algorithm: sha256WithRSAEncryption 22:8f:bd:10:e4:ec:a8:76:d5:e8:60:1c:e3:93:3b:93:c1:fa: 47:77:21:22:b3:4e:56:5d:3b:5d:f8:4d:05:60:bc:b2:b1:b7: 7b:87:2e:f3:51:a9:89:d5:91:f7:d0:41:45:f0:12:b5:e0:5b: 95:e0:92:f3:d0:6e:49:fb:6d:5b:74:87:a5:67:8c:e5:01:d1: 3d:b8:8e:91:e4:db:fd:67:b6:c0:3f:d9:b4:53:31:16:dd:b1: a4:20:c8:12:2b:ae:5f:b3:1c:52:ae:0b:67:bd:5a:f8:54:b4: 33:23:d4:11:ab:c8:a8:ed:c9:e7:6c:cd:3c:25:6a:d7:81:45: 6f:d6:82:76:3c:21:71:bd:1c:9c:c6:55:2b:79:af:d5:96:c0: f7:d5:84:88:a1:58:98:16:43:c7:db:4f:9a:99:5f:52:51:e4: 62:eb:3e:6e:04:6b:5a:5a:7c:e9:4e:e6:f4:1a:dd:78:d8:92: 7d:b5:9a:7c:80:41:d6:9f:b5:83:98:57:c2:59:5a:63:6c:2a: 49:86:ab:b3:39:cf:7f:f4:54:46:02:35:a1:8d:03:24:87:ed: 65:01:6d:7c:b2:14:8c:27:e0:07:b5:11:32:99:b9:fd:5a:3c: fb:b0:5d:4f:5b:b1:53:88:03:ee:1e:e5:db:03:2a:58:ae:8a: 7c:5f:5f:fb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEryLCTHxlZ/x671eXBCKW/uLcJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMxMjIzMDBaFw0yNjA5MjIxMjI4MDBaMDMxMTAvBgNV BAMTKDY4MDQwQUVCM0FDOThCNUZGM0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNX3vEVfbIEXAj6JfdEWB7Fbr 5vULQuAERyaNIWExUX+Js6WQ/2TApfyhcER8lO78BLsWH6EKbO18Vj+XeAtrY+Yy SA8WPcaXl5C7ESbVVEOKFlck/Vrq/4DOoeEfuM1fRagEzXdUrQ/5ovLtva22tcJM rs7YkTVJGccWTrfEC9MeJVRz888/8UXoyh+YWuMKA1lfMlC4SlYKYHQy2wlF2097 yglGhK7CTFP2fudCxC+CiCR+SVOQlcoHTsCbZ3JyrY28+oCQO+iE70E4aozfi7m5 Jqe4zoZzj7vV48Va5bjyHNbMvvMfKgghsjkWzfGLeUyZswjJDhEsWPZ90q7vAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoBArrOsmLX/PA PZjpAauBdzQ8djAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWFG bzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5xejkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVh Rm84WWtWcTg1Rk5vNXo3dm9RQXJaMkx3RkNwN0d4ajYxM2VIOFBucXo5LzAvNjgw NDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3NzM0M0M3Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqk+wMA0EAgACMAcDBQAoBDXUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQRTANBgkqhkiG9w0BAQsFAAOCAQEAIo+9EOTsqHbV6GAc 45M7k8H6R3chIrNOVl07XfhNBWC8srG3e4cu81GpidWR99BBRfASteBbleCS89Bu SfttW3SHpWeM5QHRPbiOkeTb/We2wD/ZtFMxFt2xpCDIEiuuX7McUq4LZ71a+FS0 MyPUEavIqO3J52zNPCVq14FFb9aCdjwhcb0cnMZVK3mv1ZbA99WEiKFYmBZDx9tP mplfUlHkYus+bgRrWlp86U7m9BrdeNiSfbWafIBB1p+1g5hXwllaY2wqSYarsznP f/RURgI1oY0DJIftZQFtfLIUjCfgB7URMpm5/Vo8+7BdT1uxU4gD7h7l2wMqWK6K fF9f+w== -----END CERTIFICATE-----Generated at Mon Oct 20 09:02:59 2025 by rpki-client