$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer File: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer (raw, json) Hash identifier: IG0veRXy6YTwMZ3EHNf6QTc93OwOmEOT7hDkHQ+JsBY= Subject key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A90635418FC1639B92953F53775D12B045CECA7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft caRepository: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 28 Sep 2025 11:49:18 +0000 Certificate not after: Sun 27 Sep 2026 11:54:18 +0000 Subordinate resources: AS: 267471 IP: 192.141.76.0/22 IP: 2804:4200::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:90:63:54:18:fc:16:39:b9:29:53:f5:37:75:d1:2b:04:5c:ec:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 28 11:49:18 2025 GMT Not After : Sep 27 11:54:18 2026 GMT Subject: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:c5:04:3c:8d:8e:2d:61:f9:25:aa:c9:35: 1d:bf:44:6e:f3:1c:c2:c9:e8:80:5e:6a:00:21:96: 7f:1c:c8:4c:cb:e2:04:9d:18:bf:c9:03:a5:bd:b5: 94:49:35:44:67:32:fa:b0:f2:6f:8e:b1:58:80:23: 8e:47:73:6b:2f:1f:83:d4:50:db:24:aa:2f:50:1a: 6b:62:ef:a4:57:77:1e:7c:1a:6d:32:23:10:b7:33: 18:ac:f8:ab:06:7f:ca:48:f9:17:87:30:b1:e4:ba: 99:68:db:01:79:bf:5e:06:b2:d5:7c:b2:df:e9:f0: e8:e8:cf:93:d5:50:7f:cb:05:6a:e9:ae:37:a1:1e: 91:66:71:3a:a9:24:41:55:c2:29:84:6c:f3:cd:ba: 6d:95:e7:6b:37:19:96:45:a2:5c:50:96:2d:88:bd: b1:8b:5a:62:9f:a6:d5:d1:0f:37:3e:45:47:fc:f7: 55:2b:be:86:6e:9b:7d:cd:06:8b:44:47:1a:3d:26: db:e4:3b:bb:ff:45:d4:05:84:67:88:ef:30:d7:f0: 11:fe:e1:4f:b1:10:7f:6e:fe:6e:b7:d7:8f:31:8b: cc:38:00:d2:6b:da:50:13:7c:d1:54:06:bb:c2:87: 45:f1:fd:08:6a:05:1f:91:89:8a:b4:bc:1b:f7:54: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.76.0/22 IPv6: 2804:4200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267471 Signature Algorithm: sha256WithRSAEncryption bc:d2:be:e9:57:4e:08:f0:6f:4f:b1:39:b9:92:0c:16:5c:e9: 00:4a:4d:9e:11:5c:0d:5f:27:e2:37:bd:86:0a:80:44:e6:d5: ad:03:21:5d:b5:fd:4b:51:22:c9:a9:5d:9d:11:69:6e:9b:d5: bd:07:68:ab:6e:fb:89:0b:38:e8:18:48:34:90:a2:13:22:12: 23:a2:c8:56:3d:a0:cb:62:44:7b:77:b4:7a:d6:25:4d:88:85: b5:30:1b:41:9c:7b:f4:7d:f6:01:61:ac:89:58:81:5c:24:f8: f4:03:8c:90:67:62:07:c0:c1:2d:12:41:bb:48:ac:95:9b:ba: ff:7e:59:46:8f:2e:34:25:7c:19:c3:ac:0c:66:2c:be:76:32: 75:1c:34:46:f6:6e:a8:88:48:7d:8a:2e:fb:33:d0:43:2f:f3: 56:a9:f3:5c:1f:47:ca:d6:70:eb:f3:00:6d:cd:83:b5:d0:3b: 1b:25:54:84:c1:b2:33:78:e9:0c:b6:e5:19:ad:9d:3e:98:3a: 9b:12:45:84:fc:29:31:ae:dc:27:7a:bf:2a:1d:8e:11:88:73: 33:4e:8f:f7:76:e0:0e:73:43:f0:4a:19:85:bd:ea:71:1c:9e: 4a:b6:49:8e:81:2f:3f:a9:dc:52:02:5c:b0:ef:65:b0:7d:4d: 4f:e9:fb:b9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCpBjVBj8Fjm5KVP1N3XRKwRc7KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjgxMTQ5MThaFw0yNjA5MjcxMTU0MThaMDMxMTAvBgNV BAMTKEQ0NUQ0M0YxQjYwQURGRDJGRTMzOTk2QTkwQkJCNjJFRjU1QTFEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs68UEPI2OLWH5JarJNR2/RG7z HMLJ6IBeagAhln8cyEzL4gSdGL/JA6W9tZRJNURnMvqw8m+OsViAI45Hc2svH4PU UNskqi9QGmti76RXdx58Gm0yIxC3Mxis+KsGf8pI+ReHMLHkuplo2wF5v14GstV8 st/p8Ojoz5PVUH/LBWrprjehHpFmcTqpJEFVwimEbPPNum2V52s3GZZFolxQli2I vbGLWmKfptXRDzc+RUf891UrvoZum33NBotERxo9JtvkO7v/RdQFhGeI7zDX8BH+ 4U+xEH9u/m63148xi8w4ANJr2lATfNFUBrvCh0Xx/QhqBR+RiYq0vBv3VHDbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUXUPxtgrf0v4z mWqQu7Yu9VodAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1lT YmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdZ U2JkZzJkZlU5ektxZm5zeFNwaWM4bkRweUZiQTd0ejdlVUQ4ZlM1eERwLzAvRDQ1 RDQzRjFCNjBBREZEMkZFMzM5OTZBOTBCQkI2MkVGNTVBMUQwMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwI1MMA0EAgACMAcDBQAoBEIAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUzzANBgkqhkiG9w0BAQsFAAOCAQEAvNK+6VdOCPBvT7E5 uZIMFlzpAEpNnhFcDV8n4je9hgqARObVrQMhXbX9S1EiyaldnRFpbpvVvQdoq277 iQs46BhINJCiEyISI6LIVj2gy2JEe3e0etYlTYiFtTAbQZx79H32AWGsiViBXCT4 9AOMkGdiB8DBLRJBu0islZu6/35ZRo8uNCV8GcOsDGYsvnYydRw0RvZuqIhIfYou +zPQQy/zVqnzXB9HytZw6/MAbc2DtdA7GyVUhMGyM3jpDLblGa2dPpg6mxJFhPwp Ma7cJ3q/Kh2OEYhzM06P93bgDnND8EoZhb3qcRyeSrZJjoEvP6ncUgJcsO9lsH1N T+n7uQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:37 2025 by rpki-client