$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer File: 682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer (raw, json) Hash identifier: CUiZATWhvR9rztZrCjON8iOPAvwLeqJsv1DF13MOCJg= Subject key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 312292CCEEE189E09057E0213E812EB0AC0A1ECA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft caRepository: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 19:15:10 +0000 Certificate not after: Thu 17 Sep 2026 19:20:10 +0000 Subordinate resources: AS: 268801 IP: 45.173.76.0/22 IP: 2804:5adc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:22:92:cc:ee:e1:89:e0:90:57:e0:21:3e:81:2e:b0:ac:0a:1e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 19:15:10 2025 GMT Not After : Sep 17 19:20:10 2026 GMT Subject: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:a7:d4:a5:6e:3b:56:db:ed:83:2c:72:92: 85:2d:73:6b:d3:43:a8:d2:23:88:8a:5c:c4:08:56: 5d:b0:7c:8f:23:6f:21:ed:78:57:2d:4b:ea:55:f5: 50:fc:f3:d4:9e:b8:6e:cd:39:f1:5f:15:0d:68:02: 14:fe:3f:1c:fb:19:af:24:8e:c9:7c:2b:97:ba:d5: c5:a9:1b:1c:1e:90:65:48:83:ae:7c:1e:ff:dc:fc: 02:ed:15:01:9f:88:bd:c5:99:7a:98:14:e0:79:a4: 13:bb:75:79:a8:4f:37:73:2f:10:2f:99:d6:65:12: b7:10:80:0a:37:32:dc:e5:a0:0b:da:96:18:5f:b9: 69:b2:06:58:7a:d4:09:2e:0e:8c:13:6a:1b:8e:b5: 11:a9:6a:98:15:41:9c:45:fe:3f:ce:f2:21:f9:af: a4:fd:c8:6c:0a:95:38:42:fc:70:d2:8e:d3:c7:40: 95:ed:5b:2a:3f:f9:fb:19:74:bd:24:7a:a6:83:58: 46:09:3c:df:46:23:45:0c:5c:0c:56:ab:7c:7d:ac: fb:06:06:21:de:b7:d5:c8:96:e6:1f:a4:08:b1:a3: 73:52:eb:c0:27:82:e8:bb:fd:9a:0e:d3:81:c1:cd: 11:ed:e0:9f:fb:20:a0:bd:45:8d:fc:32:1e:ac:4a: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.76.0/22 IPv6: 2804:5adc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268801 Signature Algorithm: sha256WithRSAEncryption a5:e5:39:e5:4b:93:b0:a6:e0:5f:16:ea:a9:2d:2b:a7:28:7a: 65:b7:14:61:3c:68:ca:df:69:da:d8:10:5c:68:d6:a5:e0:53: 6d:65:39:98:6f:72:9b:bf:a5:5a:8a:1a:1c:97:22:3b:b0:14: 04:f3:a8:37:6b:c3:e3:bf:6f:97:0a:f6:98:e5:c7:9d:fe:ac: 6e:f5:2c:55:75:6c:71:99:74:58:7f:6e:5b:74:b3:0e:74:60: 75:1a:03:59:28:76:f1:a2:d2:30:85:c8:cb:b2:a8:7c:50:31: 53:e3:fe:eb:b1:18:68:6c:60:5d:f6:25:a5:e2:1a:b8:7c:22: 03:34:10:01:9a:6f:52:1b:4f:4f:62:03:85:c9:08:88:36:dd: 6f:d0:3a:1b:7b:e7:ac:e5:bf:db:f5:d0:33:5d:86:27:73:2f: 29:41:37:d7:82:2b:d5:6c:c9:71:1f:84:78:76:80:59:82:67: 3a:62:ca:a2:b6:6f:5e:01:2f:0d:05:04:4a:0f:8a:c1:10:9e: 00:40:5a:f5:f5:da:bb:7a:a4:aa:b6:df:1e:5e:b5:94:ca:7d: d2:29:7e:3c:76:cd:e4:b0:a9:e1:73:9a:70:70:41:3a:14:32: 0a:8b:7f:68:80:41:28:ce:5c:b3:1f:98:68:32:26:49:1b:29: e9:66:52:39 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUMSKSzO7hieCQV+AhPoEusKwKHsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgxOTE1MTBaFw0yNjA5MTcxOTIwMTBaMDMxMTAvBgNV BAMTKDY4MkU0QUUwMDQyREZFNUI5NjEwMEYwQjE4NjRFRjc2MjVCMTkyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMM6fUpW47VtvtgyxykoUtc2vT Q6jSI4iKXMQIVl2wfI8jbyHteFctS+pV9VD889SeuG7NOfFfFQ1oAhT+Pxz7Ga8k jsl8K5e61cWpGxwekGVIg658Hv/c/ALtFQGfiL3FmXqYFOB5pBO7dXmoTzdzLxAv mdZlErcQgAo3MtzloAvalhhfuWmyBlh61AkuDowTahuOtRGpapgVQZxF/j/O8iH5 r6T9yGwKlThC/HDSjtPHQJXtWyo/+fsZdL0keqaDWEYJPN9GI0UMXAxWq3x9rPsG BiHet9XIluYfpAixo3NS68Angui7/ZoO04HBzRHt4J/7IKC9RY38Mh6sSr2FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoLkrgBC3+W5YQ DwsYZO92JbGSOjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGdj R2hzaXg2OXdVNDFRdk1zQldLblpGOFlZb0VXWnFDV1VORWZSRW5Nck0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRn Y0doc2l4Njl3VTQxUXZNc0JXS25aRjhZWW9FV1pxQ1dVTkVmUkVuTXJNLzAvNjgy RTRBRTAwNDJERkU1Qjk2MTAwRjBCMTg2NEVGNzYyNUIxOTIzQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa1MMA0EAgACMAcDBQAoBFrcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaATANBgkqhkiG9w0BAQsFAAOCAQEApeU55UuTsKbgXxbq qS0rpyh6ZbcUYTxoyt9p2tgQXGjWpeBTbWU5mG9ym7+lWooaHJciO7AUBPOoN2vD 479vlwr2mOXHnf6sbvUsVXVscZl0WH9uW3SzDnRgdRoDWSh28aLSMIXIy7KofFAx U+P+67EYaGxgXfYlpeIauHwiAzQQAZpvUhtPT2IDhckIiDbdb9A6G3vnrOW/2/XQ M12GJ3MvKUE314Ir1WzJcR+EeHaAWYJnOmLKorZvXgEvDQUESg+KwRCeAEBa9fXa u3qkqrbfHl61lMp90il+PHbN5LCp4XOacHBBOhQyCot/aIBBKM5csx+YaDImSRsp 6WZSOQ== -----END CERTIFICATE-----Generated at Mon Oct 20 06:50:15 2025 by rpki-client