$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer File: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer (raw, json) Hash identifier: PTDPKqNJXZVmzpnj4GvzOtwd0y5K+aucndkxYOyTlrE= Subject key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E111C78F1373C906759E70CF10198B3DBBF542B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft caRepository: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 22:23:24 +0000 Certificate not after: Tue 22 Sep 2026 22:28:24 +0000 Subordinate resources: AS: 265365 IP: 168.205.128.0/22 IP: 2804:2ec4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:11:1c:78:f1:37:3c:90:67:59:e7:0c:f1:01:98:b3:db:bf:54:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 22:23:24 2025 GMT Not After : Sep 22 22:28:24 2026 GMT Subject: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:4f:a4:83:c9:d8:9c:e4:5b:63:f6:05:c9: 69:b4:4a:c1:a3:33:a8:58:92:5c:6f:d3:a8:3a:55: c6:66:2e:9d:58:17:a0:2e:9d:e1:31:bd:0c:20:ce: c8:26:72:cd:3c:bd:0f:2d:b8:5d:37:6a:4c:ca:a4: 18:5c:a6:6c:95:5a:09:b9:0d:57:60:ab:a8:9a:06: 0f:5f:5a:90:37:a1:b3:6e:58:77:bc:38:fb:ff:43: 48:70:be:63:d1:c1:3a:1f:d7:ac:b9:52:60:b3:26: 54:a1:4f:46:52:e4:b9:fe:78:43:28:7e:06:6b:ba: 7d:04:f3:89:9f:40:57:42:ba:27:99:39:62:32:78: e4:08:5d:3c:7c:2e:15:78:21:90:98:a4:12:90:e3: 3a:fd:c5:ca:0f:a3:f6:c5:63:dd:6f:ce:c9:de:dd: d7:5b:a6:c8:c4:42:30:b7:ed:26:af:98:64:33:38: 86:76:d3:f2:e4:f0:90:f9:80:58:27:b0:c3:a7:e3: 8d:21:73:2b:25:dc:38:91:8f:85:f1:32:09:42:aa: 0b:87:85:42:91:1e:37:85:45:78:18:eb:fa:75:dc: ba:95:89:e7:94:5f:c3:91:b6:c0:da:86:9b:a0:43: e7:42:c4:d2:94:73:d5:4a:dd:b0:7a:5a:5c:67:7c: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.128.0/22 IPv6: 2804:2ec4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265365 Signature Algorithm: sha256WithRSAEncryption 08:88:30:44:25:53:c9:61:df:c8:f7:2f:f1:c2:c4:c4:63:ff: 7d:8b:ca:d5:73:d4:df:e3:3f:27:2e:36:c5:fb:59:d6:b5:ff: 62:9a:74:dd:d8:2e:52:ee:b9:d7:4e:b9:2c:ee:c8:13:40:66: 4e:94:46:bd:db:ba:7c:e1:88:10:57:0f:bb:e8:7e:7e:2e:be: ef:3d:d1:56:9f:cb:6c:63:15:2e:a7:8c:00:94:6b:17:07:5b: e6:10:d3:d0:c5:6f:fe:b9:24:64:bf:ed:7d:c2:cf:80:07:18: ba:19:a9:e3:01:a5:57:fb:74:fd:36:4c:e8:b2:70:7a:02:4a: 3a:17:bc:70:ac:f3:d4:70:b9:f7:ba:3e:97:ff:46:c6:5d:65: 16:ab:8b:75:1f:83:2f:90:c1:56:64:95:9a:a5:76:ad:41:9e: 9a:fc:6b:7e:1f:ae:9b:7a:5f:90:c2:42:47:ab:1e:3b:db:94: 6a:78:d5:c2:17:a8:bd:33:32:37:20:85:83:7c:dd:5e:a8:eb: dc:0c:ed:fe:2b:0a:5e:cc:0d:5d:07:13:7a:49:b0:b8:93:3b: 11:4b:15:55:7f:dc:43:70:d5:73:a9:3b:30:b2:d0:3f:80:df: 96:71:2d:18:65:9e:31:4b:38:c3:90:59:0d:80:cb:b4:48:e1: ba:cb:5b:31 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUThEcePE3PJBnWecM8QGYs9u/VCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMyMjIzMjRaFw0yNjA5MjIyMjI4MjRaMDMxMTAvBgNV BAMTKDk2NkRENzk3Qjg0RTU5Q0FFNjIyN0VENEZCMUQ0RDUyMDExRUJBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe0+kg8nYnORbY/YFyWm0SsGj M6hYklxv06g6VcZmLp1YF6AuneExvQwgzsgmcs08vQ8tuF03akzKpBhcpmyVWgm5 DVdgq6iaBg9fWpA3obNuWHe8OPv/Q0hwvmPRwTof16y5UmCzJlShT0ZS5Ln+eEMo fgZrun0E84mfQFdCuieZOWIyeOQIXTx8LhV4IZCYpBKQ4zr9xcoPo/bFY91vzsne 3ddbpsjEQjC37SavmGQzOIZ20/Lk8JD5gFgnsMOn440hcysl3DiRj4XxMglCqguH hUKRHjeFRXgY6/p13LqVieeUX8ORtsDahpugQ+dCxNKUc9VK3bB6WlxnfN7zAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWbdeXuE5ZyuYi ftT7HU1SAR66KTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2JW Q2RkRWdYVnE5cGhmc2JQRTlhalE5cVJ1d0pCc2Y5S1dWVGNuZjZWQVMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ni VkNkZEVnWFZxOXBoZnNiUEU5YWpROXFSdXdKQnNmOUtXVlRjbmY2VkFTLzAvOTY2 REQ3OTdCODRFNTlDQUU2MjI3RUQ0RkIxRDRENTIwMTFFQkEyOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqM2AMA0EAgACMAcDBQAoBC7EMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMlTANBgkqhkiG9w0BAQsFAAOCAQEACIgwRCVTyWHfyPcv 8cLExGP/fYvK1XPU3+M/Jy42xftZ1rX/Ypp03dguUu651065LO7IE0BmTpRGvdu6 fOGIEFcPu+h+fi6+7z3RVp/LbGMVLqeMAJRrFwdb5hDT0MVv/rkkZL/tfcLPgAcY uhmp4wGlV/t0/TZM6LJwegJKOhe8cKzz1HC597o+l/9Gxl1lFquLdR+DL5DBVmSV mqV2rUGemvxrfh+um3pfkMJCR6seO9uUanjVwheovTMyNyCFg3zdXqjr3Azt/isK XswNXQcTekmwuJM7EUsVVX/cQ3DVc6k7MLLQP4DflnEtGGWeMUs4w5BZDYDLtEjh ustbMQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:59 2025 by rpki-client