$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer File: D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer (raw, json) Hash identifier: 7II///F6OqIOo2cg7ciciKDV1ZWu0JfLNkTgRPu0AiE= Subject key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0B009AF5F7705BDB103CDBFDC7D32F5B6E60B93D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft caRepository: rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 00:41:58 +0000 Certificate not after: Tue 06 Oct 2026 00:46:58 +0000 Subordinate resources: AS: 268593 IP: 45.162.64.0/22 IP: 2804:5394::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:00:9a:f5:f7:70:5b:db:10:3c:db:fd:c7:d3:2f:5b:6e:60:b9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 00:41:58 2025 GMT Not After : Oct 6 00:46:58 2026 GMT Subject: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:de:a4:e6:17:60:8c:44:38:d6:d2:33:fe: f9:6d:00:b5:c0:9c:c4:5e:05:83:d8:f3:b1:8b:52: 5d:fa:30:ad:14:50:0a:03:da:c3:b5:df:0f:41:a0: 5c:eb:8d:17:a8:67:73:52:28:31:57:14:2f:ca:92: 37:61:23:93:f0:5e:c8:35:15:ff:2a:08:e1:3f:3f: f7:1f:91:fa:82:16:ea:be:7b:4c:f0:2d:38:71:be: 87:84:50:a0:5c:5d:7e:4b:af:7b:2c:ca:48:fc:57: 2b:d1:99:61:58:29:fc:58:01:bb:67:24:25:21:38: c8:84:3e:54:a9:2e:66:fe:54:fe:5a:fc:95:12:63: fa:c8:43:83:31:90:75:b3:ea:6b:9e:65:08:7f:a3: 96:fd:75:68:c7:b1:c3:d1:52:13:31:ea:eb:0e:13: 87:1f:c6:6d:81:db:99:f3:24:e5:2b:45:8d:33:75: af:85:0a:50:98:08:9f:72:74:1d:c0:5f:82:3e:7b: 38:d7:fb:83:a2:44:c8:79:3b:3a:b2:09:ca:af:7a: 9c:05:e8:83:69:70:9e:7d:8a:f5:22:f6:34:28:23: b5:94:d2:86:67:68:0d:4d:8b:63:cd:64:38:7e:70: f6:d6:cd:d4:ee:32:6f:09:82:00:8a:51:31:cb:08: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.64.0/22 IPv6: 2804:5394::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268593 Signature Algorithm: sha256WithRSAEncryption 8f:fc:2b:76:ce:30:31:2c:d5:d0:ff:26:9f:7f:43:c0:3d:47: cd:6d:da:6b:41:70:91:34:0e:be:f3:f0:8c:4e:14:0c:d1:60: 42:30:e8:ce:71:f6:37:a1:cd:38:c0:d6:26:f0:ac:ab:02:0f: 01:4f:b0:fb:3b:e9:05:3e:76:a9:ca:2d:7b:ef:87:7e:76:e4: 6a:4d:e8:9a:91:67:42:ba:6e:40:24:3b:c2:a1:f6:14:f6:f9: 1f:dc:56:0a:5c:6b:fc:17:85:08:e3:65:47:a5:a5:77:51:6f: aa:6a:bb:f3:8d:d4:05:f7:51:cb:53:4a:cb:bf:b3:12:ba:04: 4e:8e:41:c8:f2:f8:91:9b:8a:6f:bb:88:bb:a1:25:ec:a9:2b: 7e:d0:08:ad:cf:ec:23:48:af:df:cb:ef:9f:86:ee:06:27:b2: 3b:90:59:53:40:2d:a5:86:16:6a:33:a6:19:a7:f9:b7:3f:d1: 17:14:6c:60:eb:5e:67:3b:40:66:37:a0:55:6a:45:b2:38:c3: d9:fb:16:99:27:b5:83:b6:02:ed:b8:84:23:93:e5:3b:4a:0e: 31:74:30:5f:13:4a:47:76:2d:69:6f:a7:26:60:f1:56:41:17: 08:1e:8a:ab:9c:1b:c6:30:9a:a6:63:1d:ff:54:9d:51:89:5a: 54:85:a6:79 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCwCa9fdwW9sQPNv9x9MvW25guT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDcwMDQxNThaFw0yNjEwMDYwMDQ2NThaMDMxMTAvBgNV BAMTKEQ5NkQ2NzExMThCRkNENUIxRkE5MjI1OTc2QUEyREUzQThBNTJGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnt96k5hdgjEQ41tIz/vltALXA nMReBYPY87GLUl36MK0UUAoD2sO13w9BoFzrjReoZ3NSKDFXFC/KkjdhI5PwXsg1 Ff8qCOE/P/cfkfqCFuq+e0zwLThxvoeEUKBcXX5Lr3ssykj8VyvRmWFYKfxYAbtn JCUhOMiEPlSpLmb+VP5a/JUSY/rIQ4MxkHWz6mueZQh/o5b9dWjHscPRUhMx6usO E4cfxm2B25nzJOUrRY0zda+FClCYCJ9ydB3AX4I+ezjX+4OiRMh5OzqyCcqvepwF 6INpcJ59ivUi9jQoI7WU0oZnaA1Ni2PNZDh+cPbWzdTuMm8JggCKUTHLCMYRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZbWcRGL/NWx+p Ill2qi3jqKUveDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1RQ dXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13eW4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNU UHVyalBEbThBN0VZMVpMTHJKaW5tMUVQY2o2S3RwTkdnbzFTRjVNd3luLzAvRDk2 RDY3MTExOEJGQ0Q1QjFGQTkyMjU5NzZBQTJERTNBOEE1MkY3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaJAMA0EAgACMAcDBQAoBFOUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZMTANBgkqhkiG9w0BAQsFAAOCAQEAj/wrds4wMSzV0P8m n39DwD1HzW3aa0FwkTQOvvPwjE4UDNFgQjDoznH2N6HNOMDWJvCsqwIPAU+w+zvp BT52qcote++Hfnbkak3ompFnQrpuQCQ7wqH2FPb5H9xWClxr/BeFCONlR6Wld1Fv qmq7843UBfdRy1NKy7+zEroETo5ByPL4kZuKb7uIu6El7KkrftAIrc/sI0iv38vv n4buBieyO5BZU0AtpYYWajOmGaf5tz/RFxRsYOteZztAZjegVWpFsjjD2fsWmSe1 g7YC7biEI5PlO0oOMXQwXxNKR3YtaW+nJmDxVkEXCB6Kq5wbxjCapmMd/1SdUYla VIWmeQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:39:20 2025 by rpki-client