$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer File: D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer (raw, json) Hash identifier: FtiVFqk7pMvZ/WqnYYYTE+bZROuK5kt/pDFJ3AW70+k= Subject key identifier: D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33C5F92FFE0FB1F79C1AA1A1E8EA583772FAC8BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft caRepository: rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 25 Sep 2025 12:49:07 +0000 Certificate not after: Thu 24 Sep 2026 12:54:07 +0000 Subordinate resources: AS: 271108 IP: 45.228.200.0/23 IP: 2804:7660::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c5:f9:2f:fe:0f:b1:f7:9c:1a:a1:a1:e8:ea:58:37:72:fa:c8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 25 12:49:07 2025 GMT Not After : Sep 24 12:54:07 2026 GMT Subject: CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:b5:af:f2:81:04:20:4e:d5:37:4e:e5:d0: a0:c5:f9:b6:b0:29:33:fc:62:48:7a:bb:40:e7:2b: 3e:b7:37:a2:cd:59:09:d2:0d:f9:cc:75:dc:98:9d: 3a:4a:b4:f3:e9:53:ea:c0:77:77:be:86:19:9e:36: d1:b9:61:11:24:57:a4:fb:5e:93:92:2f:78:c4:ed: b0:2b:c3:18:91:3c:6a:33:a0:ae:a0:1b:ef:88:d9: 25:ff:00:5c:19:2b:87:a7:94:2c:f4:cf:c0:97:75: ac:2b:dc:17:60:d6:39:c1:05:4c:a7:06:0c:0b:17: 0b:9e:7c:c9:5e:4e:3c:87:fd:88:30:03:3d:c8:f7: 13:40:e1:42:b7:d3:3c:82:f3:0a:88:66:ab:56:84: b0:9c:6e:8b:aa:af:5e:9b:a1:e7:b3:d8:73:55:ff: ee:23:18:e8:83:43:4b:ef:cd:ac:4a:f4:36:ab:13: 4a:59:51:50:b1:be:ae:c1:94:03:c9:f3:ff:ba:c3: 58:60:f9:c4:f4:d5:e1:85:1a:80:5d:82:1a:c6:eb: eb:6d:f1:f0:94:92:c2:25:45:68:3c:18:f5:2a:96: 59:83:1d:e0:9e:73:57:0e:63:92:8f:b3:48:6b:e0: 28:28:39:ca:03:48:05:b0:7d:5a:fa:6f:51:54:24: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.200.0/23 IPv6: 2804:7660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271108 Signature Algorithm: sha256WithRSAEncryption 63:4d:99:67:cc:ee:4a:5b:7a:d5:ee:c0:48:01:a7:51:85:63: 7b:be:59:66:db:98:10:90:f2:48:f9:23:eb:0c:34:34:6f:b6: ce:63:bc:92:be:da:ad:69:c5:e7:c0:56:13:ef:f1:68:de:04: 0b:f2:9b:ec:df:77:72:07:bd:ab:77:af:78:1a:a3:8f:fe:7a: 06:f9:de:be:5f:c5:63:47:bd:9a:90:61:a7:e9:06:6b:7c:0b: 2c:c1:4d:e6:50:5c:ff:a7:2f:48:5b:88:3a:90:6b:4d:9c:45: 4b:eb:4d:ee:45:2b:89:d2:f6:e6:05:7b:cb:39:44:d4:bd:95: da:31:f4:66:41:e8:8f:5b:67:14:de:a6:91:f5:55:01:c5:58: 90:7c:1c:5a:e7:14:0e:5d:5f:90:0d:6b:3f:b9:77:6d:57:47: db:b2:c0:ae:f6:ea:6c:37:54:1b:e3:3c:98:0f:9c:ee:98:5f: a2:15:1b:5d:a0:a2:2e:1e:18:22:33:fb:3a:27:29:cf:17:d2: ba:70:de:85:8c:bf:9a:1f:47:96:92:e2:6f:b2:3b:1a:b9:b5: 91:a4:49:c0:17:4b:df:7f:bc:f5:07:eb:29:e4:35:6f:f8:00: 8f:33:95:c3:f4:b3:6a:f8:4d:28:b1:77:95:2b:cd:4b:33:0e: a9:5c:f1:46 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUM8X5L/4PsfecGqGh6OpYN3L6yL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjUxMjQ5MDdaFw0yNjA5MjQxMjU0MDdaMDMxMTAvBgNV BAMTKEQ0NzhDODkyMUMxRjk4MzdCRTBERDExMEQ3RUM5NzREQTE3NjZEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SLWv8oEEIE7VN07l0KDF+baw KTP8Ykh6u0DnKz63N6LNWQnSDfnMddyYnTpKtPPpU+rAd3e+hhmeNtG5YREkV6T7 XpOSL3jE7bArwxiRPGozoK6gG++I2SX/AFwZK4enlCz0z8CXdawr3Bdg1jnBBUyn BgwLFwuefMleTjyH/YgwAz3I9xNA4UK30zyC8wqIZqtWhLCcbouqr16boeez2HNV /+4jGOiDQ0vvzaxK9DarE0pZUVCxvq7BlAPJ8/+6w1hg+cT01eGFGoBdghrG6+tt 8fCUksIlRWg8GPUqllmDHeCec1cOY5KPs0hr4CgoOcoDSAWwfVr6b1FUJC/tAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUeMiSHB+YN74N 0RDX7JdNoXZtHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVXZZ VlBZeW52NkFEYTdyWnVLSmtVTThzcFZqRE1zVEppbnAzOFZUdEJmdi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vVXZZ VlBZeW52NkFEYTdyWnVLSmtVTThzcFZqRE1zVEppbnAzOFZUdEJmdi8wL0Q0NzhD ODkyMUMxRjk4MzdCRTBERDExMEQ3RUM5NzREQTE3NjZEMUQubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAS3kyDANBAIAAjAHAwUAKAR2YDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEIwQwDQYJKoZIhvcNAQELBQADggEBAGNNmWfM7kpbetXuwEgB p1GFY3u+WWbbmBCQ8kj5I+sMNDRvts5jvJK+2q1pxefAVhPv8WjeBAvym+zfd3IH vat3r3gao4/+egb53r5fxWNHvZqQYafpBmt8CyzBTeZQXP+nL0hbiDqQa02cRUvr Te5FK4nS9uYFe8s5RNS9ldox9GZB6I9bZxTeppH1VQHFWJB8HFrnFA5dX5ANaz+5 d21XR9uywK726mw3VBvjPJgPnO6YX6IVG12goi4eGCIz+zonKc8X0rpw3oWMv5of R5aS4m+yOxq5tZGkScAXS99/vPUH6ynkNW/4AI8zlcP0s2r4TSixd5UrzUszDqlc 8UY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:11 2025 by rpki-client