$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer File: 6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer (raw, json) Hash identifier: wbWxaqSB2YnjwbrSL8jW6tVm7To4eZQ6n+LPEf2Qrmw= Subject key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DA7A5B6132957417EA556DA436B240C0A4542F9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft caRepository: rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 17:10:52 +0000 Certificate not after: Tue 06 Oct 2026 17:15:52 +0000 Subordinate resources: AS: 262989 IP: 186.216.208.0/21 IP: 189.84.136.0/21 IP: 190.103.160.0/20 IP: 2804:9c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a7:a5:b6:13:29:57:41:7e:a5:56:da:43:6b:24:0c:0a:45:42:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 17:10:52 2025 GMT Not After : Oct 6 17:15:52 2026 GMT Subject: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:8e:54:85:c4:bc:05:d6:a4:3a:cc:1b:7b: 08:4e:b1:2a:b7:84:c7:d7:4b:b5:ab:38:4b:c6:c9: 8d:08:b0:51:b6:35:a7:32:86:79:9a:9a:0b:bd:16: 63:d3:88:df:11:af:aa:18:13:35:71:54:0e:ec:15: 7b:8a:36:6f:3b:50:16:21:3a:22:fd:ff:cc:0c:e4: fd:8d:ef:a4:e0:1c:1b:44:ab:36:7f:69:af:4b:c2: b3:47:d1:aa:a2:8c:e9:14:ee:f5:97:0d:48:aa:a7: 27:8d:51:c2:5a:15:07:54:37:51:1f:49:89:de:59: 91:a5:9c:39:4f:90:41:a7:3a:1f:ab:39:29:1f:60: 11:b5:7f:8c:67:32:25:e9:9b:2a:02:6b:f9:f2:b1: c3:04:04:f1:7d:2f:2c:b9:00:07:2d:ef:af:3c:92: 62:4e:da:31:2f:7e:81:c0:a8:d4:d5:4f:79:98:13: 55:a9:c0:52:06:38:9e:2d:52:0f:6f:f1:5a:d5:0d: ac:e8:fc:82:e1:31:99:3e:78:35:68:2d:6a:53:43: e3:9b:55:c6:f5:b4:37:8e:ba:92:aa:bd:37:0b:e6: 40:d7:d9:81:9f:6c:11:9d:41:50:6b:81:39:d2:71: f7:1e:5b:ce:79:2b:91:44:18:34:06:96:4d:7e:ff: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.216.208.0/21 189.84.136.0/21 190.103.160.0/20 IPv6: 2804:9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262989 Signature Algorithm: sha256WithRSAEncryption 50:e1:f8:6c:18:17:98:17:f5:36:1e:9a:7c:4e:cc:f0:f7:74: 20:66:7c:d5:70:73:87:e5:13:93:2e:9a:41:a0:4c:a8:e3:f4: 76:ff:4a:a8:06:0d:07:f7:c7:94:35:1e:9d:e9:d7:3f:1a:63: fe:64:7b:80:a7:35:1a:bc:8d:d5:04:1c:82:f6:9d:e4:29:61: ff:1e:f0:82:e5:38:42:ca:0c:76:86:5e:f3:c0:a6:59:ed:5d: 18:86:67:33:35:e9:04:d3:f5:6f:56:1c:1f:6a:f3:c3:5b:8d: 35:35:04:33:c7:4d:98:44:3a:96:1c:99:f7:6e:33:6b:45:9e: 37:85:bf:f1:f4:9d:5a:30:9f:bb:08:2e:87:fc:bc:22:f2:2d: 66:89:57:88:19:d3:f3:1e:77:24:ba:dd:1d:ea:82:ab:20:04: 08:34:c2:ba:eb:ae:bc:e6:84:28:7f:a3:d1:ac:52:e5:43:11: 23:15:02:bb:7e:4c:42:08:36:f3:a1:3e:3c:3a:10:c5:0e:9b: 68:5c:c3:d7:8c:05:06:61:07:87:c4:6c:3c:5c:b8:8d:93:6d: 5e:c6:7b:a1:14:8f:97:57:55:1c:78:e7:39:88:38:fd:b0:a5: 67:e8:c2:4c:d2:24:d1:06:20:75:ba:8e:01:52:4d:3d:6c:40: 26:25:e1:9d -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUHaelthMpV0F+pVbaQ2skDApFQvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDcxNzEwNTJaFw0yNjEwMDYxNzE1NTJaMDMxMTAvBgNV BAMTKDY5NjNBMkIzMzNBMDNGMjBBRERBNEYwQ0EyQzM3QUFGQjAyNjhBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD13o5UhcS8BdakOswbewhOsSq3 hMfXS7WrOEvGyY0IsFG2Nacyhnmamgu9FmPTiN8Rr6oYEzVxVA7sFXuKNm87UBYh OiL9/8wM5P2N76TgHBtEqzZ/aa9LwrNH0aqijOkU7vWXDUiqpyeNUcJaFQdUN1Ef SYneWZGlnDlPkEGnOh+rOSkfYBG1f4xnMiXpmyoCa/nyscMEBPF9Lyy5AAct7688 kmJO2jEvfoHAqNTVT3mYE1WpwFIGOJ4tUg9v8VrVDazo/ILhMZk+eDVoLWpTQ+Ob Vcb1tDeOupKqvTcL5kDX2YGfbBGdQVBrgTnScfceW855K5FEGDQGlk1+/zHzAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpY6KzM6A/IK3a Twyiw3qvsCaKuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHYx QXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVxcU0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR2 MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzAvNjk2 M0EyQjMzM0EwM0YyMEFEREE0RjBDQTJDMzdBQUZCMDI2OEFCOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQDutjQAwQDvVSIAwQEvmegMA0EAgACMAcDBQAoBAnA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDTTANBgkqhkiG9w0BAQsFAAOCAQEA UOH4bBgXmBf1Nh6afE7M8Pd0IGZ81XBzh+UTky6aQaBMqOP0dv9KqAYNB/fHlDUe nenXPxpj/mR7gKc1GryN1QQcgvad5Clh/x7wguU4QsoMdoZe88CmWe1dGIZnMzXp BNP1b1YcH2rzw1uNNTUEM8dNmEQ6lhyZ924za0WeN4W/8fSdWjCfuwguh/y8IvIt ZolXiBnT8x53JLrdHeqCqyAECDTCuuuuvOaEKH+j0axS5UMRIxUCu35MQgg286E+ PDoQxQ6baFzD14wFBmEHh8RsPFy4jZNtXsZ7oRSPl1dVHHjnOYg4/bClZ+jCTNIk 0QYgdbqOAVJNPWxAJiXhnQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:47 2025 by rpki-client