$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer File: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer (raw, json) Hash identifier: x4fnKienZDmunLquOo/Wdfx6XBWVkkM0rYlzzv5LWE4= Subject key identifier: 8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 041268F591584722ECD4E56C49198B6B92140B4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft caRepository: rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Oct 2025 14:31:55 +0000 Certificate not after: Fri 09 Oct 2026 14:36:55 +0000 Subordinate resources: AS: 274825 IP: 2804:9428::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:12:68:f5:91:58:47:22:ec:d4:e5:6c:49:19:8b:6b:92:14:0b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 14:31:55 2025 GMT Not After : Oct 9 14:36:55 2026 GMT Subject: CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:1b:30:d7:4b:42:e8:96:6f:d3:2a:8f:51: d6:1d:fc:68:ba:9b:02:cf:b2:17:cf:41:4c:e3:87: d8:a6:1a:d1:1d:b5:36:20:6f:69:e6:1d:db:d6:bd: 51:8d:42:6e:47:1e:7d:16:6a:9e:ed:78:48:cc:3d: 98:42:41:c0:a4:cf:7a:a0:30:1d:98:f6:42:79:8c: 1b:fa:b0:9f:ef:8e:6e:22:08:72:43:61:f3:62:8d: 42:5a:30:07:f7:81:53:d7:7a:b4:b1:39:60:60:eb: 05:4d:21:f7:b9:11:2b:d8:e4:df:c3:b9:53:99:c9: df:30:6c:25:b8:28:b8:7a:ff:d2:9a:78:af:0e:1f: 9e:29:43:9d:c8:13:7a:57:22:87:c6:10:1c:64:3e: 55:25:a8:73:dc:8c:7e:96:ab:eb:50:54:8e:e0:fa: 5f:95:d7:f5:ee:30:f7:58:c2:bc:77:0b:3c:a6:cf: 2e:35:53:7a:96:67:6c:01:59:38:cb:32:44:f7:39: 4a:36:2c:f0:61:88:31:08:b0:81:e7:d1:bf:c9:79: c9:36:ec:32:b3:72:71:84:cf:88:94:19:3f:5b:bd: 0b:1f:95:72:f5:6e:57:5e:7f:e8:95:1b:72:57:96: 74:70:75:b2:62:a8:68:86:c8:58:ee:4f:06:b6:af: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9428::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274825 Signature Algorithm: sha256WithRSAEncryption ae:18:89:3e:b3:31:b1:24:43:fd:4c:b2:32:d6:3b:4c:ad:e7: 95:e0:c9:e2:57:fa:6c:4c:c9:4c:a4:13:c0:28:34:92:f5:aa: 8b:66:19:39:fd:3c:8d:dc:50:f0:70:f6:59:c3:3a:e9:23:c4: 7c:a5:73:2a:17:20:6e:29:62:7f:83:9e:2a:95:10:1c:c9:b0: ee:4f:6d:ec:1b:ce:73:4f:5f:e3:85:30:41:d4:a2:56:2e:04: ad:40:9a:85:47:5b:76:7b:70:86:08:cc:ef:60:99:99:34:75: 97:4e:fc:f5:11:43:c2:16:c2:65:62:f2:30:09:2d:39:0d:e7: 8a:96:62:fa:f7:1d:f6:a2:a2:fd:b0:b6:39:a0:e8:72:dd:28: 60:a1:d0:78:60:37:e1:a5:1c:91:21:af:ac:56:a1:e4:36:8c: 6f:c1:6c:52:d8:9e:75:80:d6:5e:40:3f:0d:b8:0f:1c:e6:a6: 41:68:cc:d9:d2:1f:f2:d1:ee:e8:86:80:1d:ae:79:0a:c4:5e: 06:27:86:a4:87:94:e1:3f:72:ad:b1:5c:84:28:6b:3d:16:33: cc:a2:32:0b:14:f8:e6:be:3f:89:13:29:57:5d:c9:3d:88:ac: 0c:ce:a7:ab:23:d2:f8:69:28:56:36:ed:3d:5a:3e:13:88:02: dd:ee:e3:fa -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUBBJo9ZFYRyLs1OVsSRmLa5IUC00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTAxNDMxNTVaFw0yNjEwMDkxNDM2NTVaMDMxMTAvBgNV BAMTKDhDQzUyNUZERjcyQjgxNkI2NkMxQ0U4MzZDQTkzN0NFOTlBNjgyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9hsw10tC6JZv0yqPUdYd/Gi6 mwLPshfPQUzjh9imGtEdtTYgb2nmHdvWvVGNQm5HHn0Wap7teEjMPZhCQcCkz3qg MB2Y9kJ5jBv6sJ/vjm4iCHJDYfNijUJaMAf3gVPXerSxOWBg6wVNIfe5ESvY5N/D uVOZyd8wbCW4KLh6/9KaeK8OH54pQ53IE3pXIofGEBxkPlUlqHPcjH6Wq+tQVI7g +l+V1/XuMPdYwrx3Czymzy41U3qWZ2wBWTjLMkT3OUo2LPBhiDEIsIHn0b/Jeck2 7DKzcnGEz4iUGT9bvQsflXL1bldef+iVG3JXlnRwdbJiqGiGyFjuTwa2r9gVAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMxSX99yuBa2bB zoNsqTfOmaaC6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREIy ZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJXTjIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RC MmRlWlg3NmFpVnFIWm53R2JMMVFoQjRpSnRGN1JuTEVVRk10cHcyV04yLzAvOEND NTI1RkRGNzJCODE2QjY2QzFDRTgzNkNBOTM3Q0U5OUE2ODJFOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASUKDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MYkwDQYJKoZIhvcNAQELBQADggEBAK4YiT6zMbEkQ/1MsjLWO0yt55XgyeJX+mxM yUykE8AoNJL1qotmGTn9PI3cUPBw9lnDOukjxHylcyoXIG4pYn+DniqVEBzJsO5P bewbznNPX+OFMEHUolYuBK1AmoVHW3Z7cIYIzO9gmZk0dZdO/PURQ8IWwmVi8jAJ LTkN54qWYvr3Hfaiov2wtjmg6HLdKGCh0HhgN+GlHJEhr6xWoeQ2jG/BbFLYnnWA 1l5APw24DxzmpkFozNnSH/LR7uiGgB2ueQrEXgYnhqSHlOE/cq2xXIQoaz0WM8yi MgsU+Oa+P4kTKVddyT2IrAzOp6sj0vhpKFY27T1aPhOIAt3u4/o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:39 2025 by rpki-client