$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer (raw, json) Hash identifier: ZRGn8Xq0L1jvpTbn/75CJSdvX2VOfUg4aUu/PGoHpvU= Subject key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5C913081A1FDE4F0BA9719EF7417B94E7A1F9638 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft caRepository: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 24 Sep 2025 15:22:50 +0000 Certificate not after: Wed 23 Sep 2026 15:27:50 +0000 Subordinate resources: AS: 266003 IP: 45.173.64.0/22 IP: 181.191.96.0/22 IP: 2804:4118::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:91:30:81:a1:fd:e4:f0:ba:97:19:ef:74:17:b9:4e:7a:1f:96:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 24 15:22:50 2025 GMT Not After : Sep 23 15:27:50 2026 GMT Subject: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:20:ff:51:cf:a9:e2:c9:75:24:10:3f:f3: 0b:a1:5c:30:80:11:03:88:fb:03:3d:4e:a7:c3:30: 97:84:b1:40:3d:67:b4:09:c6:78:a9:f7:75:d8:39: b9:02:2c:26:fe:9f:98:ba:db:dc:a1:28:10:b6:90: 9a:ad:b8:e7:2a:09:01:f9:3d:f1:85:d5:25:34:33: 8c:6b:87:c9:22:4a:dc:71:70:d2:54:f4:c6:f9:84: 01:5e:d1:82:e0:05:ce:59:9d:17:ed:0f:2d:ac:e9: c0:ca:71:58:dc:9c:9a:81:a3:5a:ce:55:47:df:6d: 6a:39:d1:6d:dd:13:2f:9c:13:76:be:83:5d:53:51: 37:15:31:a6:fa:ee:26:cb:43:8e:84:5b:08:cc:b7: bc:e1:5b:b2:21:54:f7:36:f8:2e:bd:8d:ce:d1:71: 10:56:b1:56:5f:25:49:d4:9e:6a:27:c1:7c:61:ec: 61:6c:70:e0:fb:ee:3c:90:9b:52:ed:06:8c:96:bb: 43:c2:c5:e4:5b:23:2d:e9:71:46:cb:f8:4b:28:cc: f4:1e:c7:52:f4:ca:27:8f:7e:2c:94:0e:fb:36:c3: eb:33:25:80:25:4f:a3:90:e0:4c:62:81:d0:66:f3: 90:fa:3b:8d:00:56:62:ca:89:4e:dd:62:5b:a2:72: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.64.0/22 181.191.96.0/22 IPv6: 2804:4118::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266003 Signature Algorithm: sha256WithRSAEncryption 1a:33:36:cb:1d:d0:e7:37:93:3a:a4:32:96:63:ee:cc:48:23: ce:be:02:ee:d9:4c:46:da:2b:08:1e:23:d4:c4:1d:9f:e5:c7: d3:14:b7:25:21:54:83:72:08:1f:12:7a:55:dd:44:1a:41:c2: b9:4d:8b:20:d3:5e:e6:a3:8d:82:4f:70:94:a9:d1:78:f2:5e: 8b:f3:e2:d9:85:e4:88:20:15:f5:75:67:b7:90:64:36:8d:f2: e5:7a:e4:b1:7b:91:85:35:da:74:5e:06:05:37:47:27:fa:60: 43:7c:8a:c5:a5:67:7d:4b:d5:fb:15:b6:a9:fe:1f:5f:bb:67: 29:56:f1:47:dd:d9:4f:45:29:6d:c8:6c:cf:a9:ee:4a:7e:3e: 82:32:6d:bb:ec:ac:e5:f9:ad:05:ad:f8:7d:40:60:63:d0:25: 07:5a:08:d0:3a:1d:c9:2c:eb:ac:a9:48:7f:c5:b4:e2:b3:90: d9:fe:13:bc:65:b9:7b:82:c3:0d:1c:78:7d:9e:3a:be:cf:c4: db:1b:27:bc:e3:e5:50:db:28:6a:4d:d4:75:7e:22:2b:2f:27: 76:2e:56:b6:a8:57:96:2f:3f:af:c4:f6:e8:b0:d4:ec:09:06: 6e:2a:a0:4c:29:11:99:63:da:eb:bc:2f:94:05:ea:14:8c:2d: a4:65:43:ed -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXJEwgaH95PC6lxnvdBe5TnofljgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjQxNTIyNTBaFw0yNjA5MjMxNTI3NTBaMDMxMTAvBgNV BAMTKEFBMDc4RThGNUVBNEVGRUY4RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIiD/Uc+p4sl1JBA/8wuhXDCA EQOI+wM9TqfDMJeEsUA9Z7QJxnip93XYObkCLCb+n5i629yhKBC2kJqtuOcqCQH5 PfGF1SU0M4xrh8kiStxxcNJU9Mb5hAFe0YLgBc5ZnRftDy2s6cDKcVjcnJqBo1rO VUffbWo50W3dEy+cE3a+g11TUTcVMab67ibLQ46EWwjMt7zhW7IhVPc2+C69jc7R cRBWsVZfJUnUnmonwXxh7GFscOD77jyQm1LtBoyWu0PCxeRbIy3pcUbL+EsozPQe x1L0yiePfiyUDvs2w+szJYAlT6OQ4ExigdBm85D6O40AVmLKiU7dYluicqbrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqB46PXqTv745w A+CpshFltauB1DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFk dUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qx ZHVFdUY4ZUxCdGlXcWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzAvQUEw NzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVCNUFCODFENC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLa1AAwQCtb9gMA0EAgACMAcDBQAoBEEYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPEzANBgkqhkiG9w0BAQsFAAOCAQEAGjM2yx3Q 5zeTOqQylmPuzEgjzr4C7tlMRtorCB4j1MQdn+XH0xS3JSFUg3IIHxJ6Vd1EGkHC uU2LINNe5qONgk9wlKnRePJei/Pi2YXkiCAV9XVnt5BkNo3y5XrksXuRhTXadF4G BTdHJ/pgQ3yKxaVnfUvV+xW2qf4fX7tnKVbxR93ZT0Upbchsz6nuSn4+gjJtu+ys 5fmtBa34fUBgY9AlB1oI0DodySzrrKlIf8W04rOQ2f4TvGW5e4LDDRx4fZ46vs/E 2xsnvOPlUNsoak3UdX4iKy8ndi5WtqhXli8/r8T26LDU7AkGbiqgTCkRmWPa67wv lAXqFIwtpGVD7Q== -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:38 2025 by rpki-client