$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer File: D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer (raw, json) Hash identifier: H/x/QHDMd6TyVW5E0ShphSKWge0N+luYXcNJ/MaqexU= Subject key identifier: D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7BF56F61D31DF05E3A532311E3E3D884C0DEF0AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.mft caRepository: rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 21:27:30 +0000 Certificate not after: Tue 22 Sep 2026 21:32:30 +0000 Subordinate resources: AS: 269220 IP: 45.182.60.0 -- 45.182.62.255 IP: 2804:6134::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f5:6f:61:d3:1d:f0:5e:3a:53:23:11:e3:e3:d8:84:c0:de:f0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 21:27:30 2025 GMT Not After : Sep 22 21:32:30 2026 GMT Subject: CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:12:c7:8c:70:25:00:d7:ff:e5:5a:62:09: 5a:3c:95:28:94:a6:dc:03:84:a7:9b:8d:04:84:1a: cd:7b:05:50:8d:cb:99:82:75:e3:3d:96:e7:32:6e: e3:ad:ee:51:a9:53:b6:55:5f:89:68:fb:13:0e:65: 34:a6:d9:01:32:f7:88:c4:44:72:ea:e5:90:13:c5: 46:e7:01:4b:41:09:ec:83:3b:66:9a:b8:7c:dc:d9: 19:27:f8:c5:6f:66:5a:83:58:4f:e9:b5:03:a3:65: cf:80:c1:10:ed:63:95:3f:42:45:5f:06:ef:f1:79: 62:9c:aa:5c:d5:50:7c:ea:d5:38:55:a4:d3:80:97: e0:b3:25:17:86:f9:65:cb:a4:67:2b:4a:b0:4d:86: 76:a4:96:0b:a7:13:99:21:6e:cc:9f:fb:6c:f0:b8: 7c:62:84:cc:c1:8e:5a:66:da:0c:93:1d:26:1a:20: 70:f2:9e:d5:c4:3b:cb:ad:3a:11:61:f6:80:97:f0: e7:53:7b:56:cc:c0:fa:ec:59:9d:44:40:38:79:f1: 77:7d:d1:0c:53:75:30:b3:51:c3:64:9c:9b:85:f6: f3:19:95:ad:d8:ee:6d:09:77:67:09:fa:4b:58:df: 52:f5:2c:0a:a2:9b:3f:80:b8:67:dc:78:e9:80:4d: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.60.0-45.182.62.255 IPv6: 2804:6134::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269220 Signature Algorithm: sha256WithRSAEncryption 85:b4:45:45:f2:ca:85:af:40:fa:ce:08:71:09:f0:4f:ad:9c: 1d:10:32:eb:a6:87:88:e9:d1:df:dc:70:64:67:21:a4:9f:96: a8:e1:3a:07:60:be:be:86:1e:9b:68:92:9d:27:a2:60:80:66: 16:b1:d2:07:06:ba:ca:a0:ab:4c:b7:2d:ec:6f:18:8a:f1:97: 60:8a:ff:f4:9e:88:74:1b:ef:65:53:3e:dd:2b:bf:de:a5:d2: 93:a4:c2:1d:68:95:5c:b6:66:00:11:37:56:18:28:9a:6c:20: b5:94:45:5c:ac:50:a5:19:d1:94:e9:a3:2f:62:a5:de:63:bd: 63:f6:86:76:57:5a:41:d2:91:3b:78:95:c1:44:c2:33:25:5b: b9:dc:82:eb:2d:5c:46:65:2f:3e:2f:03:12:7b:03:74:15:2f: 30:0c:16:81:78:8f:1d:54:18:a1:3b:c9:a6:00:52:77:b1:92: d4:77:56:78:cf:84:b3:ad:25:7c:34:30:86:fd:74:8c:34:4b: af:1a:20:5b:66:8b:dc:d0:a7:5a:31:ee:79:a2:63:97:e6:df: d1:53:b4:76:07:cd:39:3b:73:30:0c:ff:4e:e2:ba:10:03:e5: e3:5e:21:b6:48:43:f6:77:fd:2b:8e:84:6c:b7:1b:9e:52:2e: b6:7d:f6:12 -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUe/VvYdMd8F46UyMR4+PYhMDe8K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMyMTI3MzBaFw0yNjA5MjIyMTMyMzBaMDMxMTAvBgNV BAMTKEQ2RTMxNUQ1MDVBOUZEMzI3RjhDNUZDRkIyODRGOTZCREYzMTVFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwBLHjHAlANf/5VpiCVo8lSiU ptwDhKebjQSEGs17BVCNy5mCdeM9lucybuOt7lGpU7ZVX4lo+xMOZTSm2QEy94jE RHLq5ZATxUbnAUtBCeyDO2aauHzc2Rkn+MVvZlqDWE/ptQOjZc+AwRDtY5U/QkVf Bu/xeWKcqlzVUHzq1ThVpNOAl+CzJReG+WXLpGcrSrBNhnaklgunE5khbsyf+2zw uHxihMzBjlpm2gyTHSYaIHDyntXEO8utOhFh9oCX8OdTe1bMwPrsWZ1EQDh58Xd9 0QxTdTCzUcNknJuF9vMZla3Y7m0Jd2cJ+ktY31L1LAqimz+AuGfceOmATSdXAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTW4xXVBan9Mn+M X8+yhPlr3zFejzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXRU NDFTbTZjWlByM0R5VXVBTTdKVDdQZnJ4aU54a1paZGZ2UFpETmo3WXAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F0 VDQxU202Y1pQcjNEeVV1QU03SlQ3UGZyeGlOeGtaWmRmdlBaRE5qN1lwLzAvRDZF MzE1RDUwNUE5RkQzMjdGOEM1RkNGQjI4NEY5NkJERjMxNUU4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAIttjwDBAAttj4wDQQCAAIwBwMFACgEYTQwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBBukMA0GCSqGSIb3DQEBCwUAA4IBAQCFtEVF 8sqFr0D6zghxCfBPrZwdEDLrpoeI6dHf3HBkZyGkn5ao4ToHYL6+hh6baJKdJ6Jg gGYWsdIHBrrKoKtMty3sbxiK8Zdgiv/0noh0G+9lUz7dK7/epdKTpMIdaJVctmYA ETdWGCiabCC1lEVcrFClGdGU6aMvYqXeY71j9oZ2V1pB0pE7eJXBRMIzJVu53ILr LVxGZS8+LwMSewN0FS8wDBaBeI8dVBihO8mmAFJ3sZLUd1Z4z4SzrSV8NDCG/XSM NEuvGiBbZovc0KdaMe55omOX5t/RU7R2B805O3MwDP9O4roQA+XjXiG2SEP2d/0r joRstxueUi62ffYS -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:27 2025 by rpki-client