$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer File: A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer (raw, json) Hash identifier: 0aJsYcKgEOSgNtlEZXroc8cAs8lyynvoTD43rSRHV1w= Subject key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3BB85E39EA4A9FB15DF4C8EACE81F54F32373E08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft caRepository: rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Oct 2025 09:00:03 +0000 Certificate not after: Thu 08 Oct 2026 09:05:03 +0000 Subordinate resources: AS: 265055 IP: 170.231.120.0/22 IP: 2804:3218::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b8:5e:39:ea:4a:9f:b1:5d:f4:c8:ea:ce:81:f5:4f:32:37:3e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 9 09:00:03 2025 GMT Not After : Oct 8 09:05:03 2026 GMT Subject: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:ec:ee:7c:da:21:6c:56:2f:42:34:14:d2: e7:45:e5:48:ec:b1:f0:f4:e7:41:08:bc:29:ba:ea: e2:2c:65:b5:cc:ea:c6:fe:6e:ca:b9:cf:71:e5:49: e0:e9:55:0d:22:98:06:aa:e8:55:10:4f:76:b0:c6: 7a:35:9f:5a:9c:16:d0:c0:23:35:7f:6b:b7:a2:c9: 70:64:a8:9c:86:09:0f:16:a3:99:26:98:44:ea:32: 5d:c7:b0:1d:76:79:21:7e:c9:2f:36:bb:c1:fe:44: 18:02:a9:46:d4:f1:3b:b2:23:41:34:68:7b:bd:9b: f3:1f:16:7d:a4:6f:6e:b3:32:cf:04:69:84:23:bd: 9d:cc:c7:c6:ee:15:df:5e:54:03:f5:8a:4d:05:9d: 77:87:54:32:50:47:b2:60:51:20:13:a4:8a:3d:ad: c2:8c:61:b2:5c:a0:03:fc:95:09:a9:58:8b:1e:29: 2f:94:a6:72:3a:9e:b0:1f:da:2e:b8:04:86:d9:95: 4a:14:e3:8a:00:c3:26:a0:44:46:74:45:d8:1f:4d: 91:69:0b:33:18:e1:27:ff:ed:58:b6:75:57:04:8c: 8c:ec:94:e3:35:47:d5:42:d4:e6:02:a1:8d:70:74: aa:49:c3:d7:47:4d:89:f4:ae:df:c1:11:65:24:78: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.120.0/22 IPv6: 2804:3218::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265055 Signature Algorithm: sha256WithRSAEncryption be:06:53:44:44:be:11:42:74:00:0a:5d:bb:84:b7:ec:a5:d7: 30:8f:e9:ec:56:e0:3e:da:e8:b6:bf:c8:ff:21:e8:01:a5:10: 44:e5:fd:1b:74:7e:d6:e2:f1:72:9e:61:4d:02:12:04:20:ee: 11:05:67:ad:45:d9:fd:4a:41:27:3f:92:09:47:ca:04:74:a6: d8:dc:fe:49:16:ae:37:61:11:3b:0a:3a:be:3a:9d:dc:40:b9: 69:6c:db:fc:66:40:99:ae:3a:10:82:32:2b:ea:71:d7:cc:50: 9c:7a:1f:19:cb:01:c3:d1:f5:32:49:33:e5:0b:49:ff:b1:f9: bb:63:94:a4:1d:17:b3:cd:cc:47:45:b1:08:50:42:3d:07:82: 74:69:e7:c8:f4:10:8d:9b:1b:fb:a4:62:f9:9b:95:42:34:07: a5:3b:4d:2a:77:16:fc:17:d3:ee:e3:df:13:a6:ee:49:46:0a: e8:3b:87:55:3e:41:d3:8a:e1:33:4e:7c:a9:ef:dd:bd:9c:bb: 2b:9f:4a:18:3c:fc:1b:de:8b:46:c5:86:55:ec:d4:32:68:ed: ff:8b:95:a8:0b:ca:5d:10:dc:c4:2d:67:24:4c:01:0d:b6:ac: 85:44:a5:19:81:f9:1c:8e:08:34:03:77:eb:3c:b3:e1:f0:05: 97:f5:fa:12 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUO7heOepKn7Fd9MjqzoH1TzI3PggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDkwOTAwMDNaFw0yNjEwMDgwOTA1MDNaMDMxMTAvBgNV BAMTKEEwQkQzOUZGNzJCNEUzREFGRTM1MjFGNDBGNEU0Mzg5Q0I1ODg3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uuzufNohbFYvQjQU0udF5Ujs sfD050EIvCm66uIsZbXM6sb+bsq5z3HlSeDpVQ0imAaq6FUQT3awxno1n1qcFtDA IzV/a7eiyXBkqJyGCQ8Wo5kmmETqMl3HsB12eSF+yS82u8H+RBgCqUbU8TuyI0E0 aHu9m/MfFn2kb26zMs8EaYQjvZ3Mx8buFd9eVAP1ik0FnXeHVDJQR7JgUSATpIo9 rcKMYbJcoAP8lQmpWIseKS+UpnI6nrAf2i64BIbZlUoU44oAwyagREZ0RdgfTZFp CzMY4Sf/7Vi2dVcEjIzslOM1R9VC1OYCoY1wdKpJw9dHTYn0rt/BEWUkeK8FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgvTn/crTj2v41 IfQPTkOJy1iH8zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkpM aEpmZTZoa05FSkF4YTZ6OXRNa3ROUHNCdWlZbkVyTHhmaGFjNWZzaFUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZK TGhKZmU2aGtORUpBeGE2ejl0TWt0TlBzQnVpWW5Fckx4ZmhhYzVmc2hVLzAvQTBC RDM5RkY3MkI0RTNEQUZFMzUyMUY0MEY0RTQzODlDQjU4ODdGMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqud4MA0EAgACMAcDBQAoBDIYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLXzANBgkqhkiG9w0BAQsFAAOCAQEAvgZTRES+EUJ0AApd u4S37KXXMI/p7FbgPtrotr/I/yHoAaUQROX9G3R+1uLxcp5hTQISBCDuEQVnrUXZ /UpBJz+SCUfKBHSm2Nz+SRauN2EROwo6vjqd3EC5aWzb/GZAma46EIIyK+px18xQ nHofGcsBw9H1Mkkz5QtJ/7H5u2OUpB0Xs83MR0WxCFBCPQeCdGnnyPQQjZsb+6Ri +ZuVQjQHpTtNKncW/BfT7uPfE6buSUYK6DuHVT5B04rhM058qe/dvZy7K59KGDz8 G96LRsWGVezUMmjt/4uVqAvKXRDcxC1nJEwBDbashUSlGYH5HI4INAN36zyz4fAF l/X6Eg== -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:32 2025 by rpki-client