$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer File: 690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer (raw, json) Hash identifier: HsWVDSfCIwN5N/8Bgr3IzCt2eqRz7BPN3rZxaAmoR2o= Subject key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B8903C516D4296E57E5D1AB2B14C9A7F4B62858 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.mft caRepository: rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 01 Sep 2025 14:55:04 +0000 Certificate not after: Mon 31 Aug 2026 15:00:04 +0000 Subordinate resources: AS: 267345 IP: 45.234.80.0/22 IP: 167.250.246.0/24 IP: 2804:4c0c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:89:03:c5:16:d4:29:6e:57:e5:d1:ab:2b:14:c9:a7:f4:b6:28:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 1 14:55:04 2025 GMT Not After : Aug 31 15:00:04 2026 GMT Subject: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:68:d8:93:fd:02:92:d8:aa:73:c3:14:fe: 94:fc:22:39:97:ef:82:ba:dc:f8:5e:97:cc:19:26: b0:8a:73:a6:1a:b6:48:b6:17:2f:8f:04:7f:8b:5d: 21:4c:3e:5f:a3:b2:39:e5:5f:d3:2e:55:95:4a:ba: 78:43:fb:93:1b:48:9c:27:b4:fb:e3:b6:cb:38:ae: 3f:05:46:cc:30:5d:e0:26:44:8e:22:ba:bf:a0:c6: e8:1a:25:3c:9c:4c:50:24:6e:9d:d8:30:59:ab:ac: 8c:2f:b3:31:29:16:a6:07:3a:bd:2a:25:c8:c0:fc: 31:8c:6a:fd:b9:23:1e:b2:03:fb:fb:06:2c:a2:42: 15:c5:6a:8a:05:f3:df:64:e8:e0:56:1c:68:5b:d6: ae:15:ff:aa:f7:90:6e:44:2c:da:c6:4b:cf:09:1f: d4:4e:4f:d1:8f:84:31:76:08:52:ea:e4:ec:18:8a: ba:c7:85:ef:5c:e3:e1:5a:0f:2f:0e:68:81:f9:dc: 1a:e8:cd:ec:8f:12:43:6b:b7:94:d6:68:9e:1e:14: 6b:01:e9:15:e5:3d:85:10:d8:73:43:d5:68:d8:66: e6:01:84:02:ef:c6:b4:22:b3:16:b4:21:9d:48:0a: 0a:0a:c8:25:a0:fe:ad:1f:4e:7f:2b:d8:0c:ea:2f: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.80.0/22 167.250.246.0/24 IPv6: 2804:4c0c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267345 Signature Algorithm: sha256WithRSAEncryption 01:2c:80:d5:e2:95:e0:1e:5a:02:e5:10:74:19:10:b7:84:cd: 41:27:af:50:48:63:ad:4f:b2:b1:b1:5f:47:8e:a2:d6:ba:f2: 81:db:fe:41:c9:09:bd:e8:10:84:67:fd:f5:42:36:a9:8b:f4: e1:44:ae:42:d6:fe:7b:34:23:73:44:df:f8:9d:23:92:92:1c: 72:9d:57:a4:15:65:09:52:87:34:08:79:7b:67:44:76:8a:ba: 41:92:13:23:5f:a1:b5:02:14:cf:54:ee:a2:17:3d:b3:81:7d: 65:a4:57:04:a0:fc:81:63:67:75:6b:7d:d1:8e:d8:e5:b0:33: f5:1d:ca:74:a0:6a:17:af:99:65:4a:87:4b:2b:7c:2d:22:12: d6:e1:e8:55:21:b0:20:c4:07:c0:48:9e:00:88:b8:39:3f:bc: 3b:7c:fe:50:e2:b7:b2:12:f4:17:57:05:c7:c2:22:a0:46:98: 20:e1:89:0a:02:8a:b6:47:d2:51:d8:92:3b:21:5f:42:38:dc: b1:54:5d:b0:8c:25:3f:43:91:5b:23:74:ae:12:ce:fd:80:31: b1:55:2b:35:76:6a:41:68:3b:e6:9c:38:3b:27:cf:94:11:fc: d2:e9:87:81:cb:5c:9a:0c:8f:29:98:d3:1d:cf:ab:39:22:f4: 6f:dd:f5:c4 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUa4kDxRbUKW5X5dGrKxTJp/S2KFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDExNDU1MDRaFw0yNjA4MzExNTAwMDRaMDMxMTAvBgNV BAMTKDY5MEQ2MjZFQUUwQzRDQzJGREM2NzY3QzYyQUE0NzRDNTg2QjlEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnGjYk/0Cktiqc8MU/pT8IjmX 74K63Phel8wZJrCKc6Yatki2Fy+PBH+LXSFMPl+jsjnlX9MuVZVKunhD+5MbSJwn tPvjtss4rj8FRswwXeAmRI4iur+gxugaJTycTFAkbp3YMFmrrIwvszEpFqYHOr0q JcjA/DGMav25Ix6yA/v7BiyiQhXFaooF899k6OBWHGhb1q4V/6r3kG5ELNrGS88J H9ROT9GPhDF2CFLq5OwYirrHhe9c4+FaDy8OaIH53BrozeyPEkNrt5TWaJ4eFGsB 6RXlPYUQ2HND1WjYZuYBhALvxrQisxa0IZ1ICgoKyCWg/q0fTn8r2AzqL995AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpDWJurgxMwv3G dnxiqkdMWGudBTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzh5 dHRpVjhHdFQxTHJIU2kzd3gyWnhzaHZ1YWNQaDJLU0VtSHFGTFFvSFUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzh5 dHRpVjhHdFQxTHJIU2kzd3gyWnhzaHZ1YWNQaDJLU0VtSHFGTFFvSFUvMS82OTBE NjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5RDA1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt6lADBACn+vYwDQQCAAIwBwMFACgETAwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBRRMA0GCSqGSIb3DQEBCwUAA4IBAQABLIDV4pXg HloC5RB0GRC3hM1BJ69QSGOtT7KxsV9HjqLWuvKB2/5ByQm96BCEZ/31Qjapi/Th RK5C1v57NCNzRN/4nSOSkhxynVekFWUJUoc0CHl7Z0R2irpBkhMjX6G1AhTPVO6i Fz2zgX1lpFcEoPyBY2d1a33RjtjlsDP1Hcp0oGoXr5llSodLK3wtIhLW4ehVIbAg xAfASJ4AiLg5P7w7fP5Q4reyEvQXVwXHwiKgRpgg4YkKAoq2R9JR2JI7IV9CONyx VF2wjCU/Q5FbI3SuEs79gDGxVSs1dmpBaDvmnDg7J8+UEfzS6YeBy1yaDI8pmNMd z6s5IvRv3fXE -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:34 2025 by rpki-client