$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer File: 8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer (raw, json) Hash identifier: lpKxe3H139CNfR0yMmXW8UeFBNSSbldC8dLVTWQyZKw= Subject key identifier: 8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5BAFEC268186920DF673C186F70960F874B2A6E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft caRepository: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 18:13:07 +0000 Certificate not after: Wed 07 Oct 2026 18:18:07 +0000 Subordinate resources: AS: 273311 IP: 45.170.137.0/24 IP: 2804:8c88::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:af:ec:26:81:86:92:0d:f6:73:c1:86:f7:09:60:f8:74:b2:a6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 18:13:07 2025 GMT Not After : Oct 7 18:18:07 2026 GMT Subject: CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:08:9e:f3:61:b6:aa:04:27:40:d6:b9:a2: 81:ae:22:cf:a0:ee:5c:55:a7:ed:0a:27:03:ca:6e: 0e:fb:2a:a9:48:25:70:b6:49:52:e0:43:98:3c:98: 8f:eb:b0:e3:fe:f2:66:3a:a0:37:83:62:65:1e:85: 33:33:fc:12:b3:2c:3f:27:46:45:e0:d1:82:ba:82: 84:42:75:d2:24:75:8e:93:cf:1c:a2:1a:86:53:6e: c7:f7:c5:38:2e:9f:70:c1:31:71:8b:ad:6d:b0:97: 64:96:7d:f2:7b:1c:1b:7b:bf:53:c8:3b:58:16:50: 38:23:9c:4e:4b:83:be:e1:5d:08:13:7c:c6:b2:b6: 2f:15:ed:5e:bc:2e:d9:11:a5:bd:2b:d1:e7:f8:09: ab:4e:54:fa:7b:83:df:a8:89:0a:7a:91:6a:ef:56: d8:a9:c8:13:9a:7a:92:a2:2e:57:72:64:53:dc:49: 80:fd:bb:11:da:76:20:fa:43:e8:a1:eb:8a:86:83: 7f:f8:ba:aa:f5:40:67:cd:15:9e:68:76:78:dd:4c: a7:83:25:f1:5c:11:c2:b0:3d:ea:97:65:34:f2:ba: b3:5e:12:70:3c:8b:f9:29:8a:c5:60:fb:1e:78:b6: 8c:84:07:37:f0:f1:ad:e6:d6:3b:12:5f:46:ff:58: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.137.0/24 IPv6: 2804:8c88::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273311 Signature Algorithm: sha256WithRSAEncryption 15:ab:bd:cb:a7:6c:bf:db:bd:ec:5e:a3:6e:6d:4b:9e:7f:1e: c5:9c:54:b3:42:dd:68:81:65:fd:31:2b:84:d8:50:f6:02:13: ff:6f:ba:17:fc:50:0f:e9:67:f1:22:ad:ff:43:bb:62:a3:a4: f5:a5:08:c4:60:19:05:83:bf:c8:bd:f8:cd:7a:78:c4:48:8b: 02:61:da:7d:6d:fe:fd:b9:57:3b:97:b6:f2:98:e9:27:f3:fc: 0a:c7:25:88:18:82:2a:45:d2:90:6c:4c:69:52:5a:71:87:68: 29:46:e1:5e:9b:e6:1e:d9:cd:36:58:ae:d2:59:22:7f:18:c8: b8:3a:1d:97:6f:e1:a5:4d:27:e7:43:a2:6c:66:17:75:73:04: a5:89:52:6f:af:8d:f7:b1:02:ea:74:a4:22:bb:5d:56:87:12: 4c:63:51:b8:df:8c:52:b9:9c:45:ee:82:6d:1f:67:44:4f:13: c3:2f:c7:8c:41:c5:0c:92:b8:75:08:65:1e:9e:ac:d6:9e:25: 34:1d:b7:a3:7c:36:85:e5:e1:ed:01:e2:0a:b1:5d:e9:9f:69: 97:7f:5d:ca:26:dd:cd:8e:56:c2:69:c4:32:17:41:61:f4:3d: d9:00:1a:22:7b:f3:42:1e:6a:8a:4c:7f:68:eb:33:0b:70:6e: 33:50:07:61 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUW6/sJoGGkg32c8GG9wlg+HSypuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDgxODEzMDdaFw0yNjEwMDcxODE4MDdaMDMxMTAvBgNV BAMTKDhCOUY2QjJDOTg3Q0VERjJDMEE1ODEzN0U4NUNEQkI3Njc5RTZCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNgie82G2qgQnQNa5ooGuIs+g 7lxVp+0KJwPKbg77KqlIJXC2SVLgQ5g8mI/rsOP+8mY6oDeDYmUehTMz/BKzLD8n RkXg0YK6goRCddIkdY6TzxyiGoZTbsf3xTgun3DBMXGLrW2wl2SWffJ7HBt7v1PI O1gWUDgjnE5Lg77hXQgTfMayti8V7V68LtkRpb0r0ef4CatOVPp7g9+oiQp6kWrv VtipyBOaepKiLldyZFPcSYD9uxHadiD6Q+ih64qGg3/4uqr1QGfNFZ5odnjdTKeD JfFcEcKwPeqXZTTyurNeEnA8i/kpisVg+x54toyEBzfw8a3m1jsSX0b/WL45AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLn2ssmHzt8sCl gTfoXNu3Z55rsDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHoz eWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJIVEMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR6 M3lpakQxQkJoaVNGUDdkVzhGc0doc00zRnJGdkVtREw5Y0JhbUpSSFRDLzAvOEI5 RjZCMkM5ODdDRURGMkMwQTU4MTM3RTg1Q0RCQjc2NzlFNkJCMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQALaqJMA0EAgACMAcDBQAoBIyIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQrnzANBgkqhkiG9w0BAQsFAAOCAQEAFau9y6dsv9u97F6j bm1Lnn8exZxUs0LdaIFl/TErhNhQ9gIT/2+6F/xQD+ln8SKt/0O7YqOk9aUIxGAZ BYO/yL34zXp4xEiLAmHafW3+/blXO5e28pjpJ/P8CscliBiCKkXSkGxMaVJacYdo KUbhXpvmHtnNNliu0lkifxjIuDodl2/hpU0n50OibGYXdXMEpYlSb6+N97EC6nSk IrtdVocSTGNRuN+MUrmcRe6CbR9nRE8Twy/HjEHFDJK4dQhlHp6s1p4lNB23o3w2 heXh7QHiCrFd6Z9pl39dyibdzY5WwmnEMhdBYfQ92QAaInvzQh5qikx/aOszC3Bu M1AHYQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:03 2025 by rpki-client