$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer File: EA94FB33637123FD82BC561313AE44D1A8CF9D23.cer (raw, json) Hash identifier: 0fP/nYCkldfRrBhrXgR66wXWKPs0bzRbT+2OwRd9skQ= Subject key identifier: EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42C9FEAAF31547258CB063232CFE8F580CA50769 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.mft caRepository: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Oct 2025 18:43:59 +0000 Certificate not after: Tue 06 Oct 2026 18:48:59 +0000 Subordinate resources: AS: 267596 IP: 45.71.20.0/22 IP: 2804:43e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c9:fe:aa:f3:15:47:25:8c:b0:63:23:2c:fe:8f:58:0c:a5:07:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 18:43:59 2025 GMT Not After : Oct 6 18:48:59 2026 GMT Subject: CN=EA94FB33637123FD82BC561313AE44D1A8CF9D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:54:82:12:6e:77:a7:96:97:a0:4f:9e:6f: f9:de:06:ee:01:51:b0:1a:17:b7:c9:61:ee:67:5b: 89:0f:52:c5:35:de:a8:75:64:89:9f:f1:b8:5c:9a: 79:15:66:00:12:55:fd:43:88:c3:62:6f:38:92:fc: a7:87:32:68:c4:12:2a:7b:e3:52:e4:f5:3e:2b:de: ce:fa:92:cc:46:bb:dd:36:ee:26:b9:f0:ef:c8:b6: a5:ba:df:29:5f:b7:09:ef:bc:9e:30:fd:29:70:27: 66:0d:a4:f1:4d:2e:c9:de:a8:d3:c8:a2:d0:3a:8f: 52:99:07:50:ac:ea:fd:1a:c6:08:52:a5:c3:29:b6: 07:ba:81:26:25:74:ab:bb:2c:01:be:d2:7a:e8:6f: e9:46:4b:26:dc:95:e9:10:d4:6b:62:bf:f4:4c:83: 01:70:3b:92:33:2b:02:ab:00:cd:1f:3d:44:0c:83: 3f:e0:21:f4:5a:d7:08:7c:6c:46:1c:47:f7:17:4d: ca:b7:19:a1:01:7f:70:94:f3:b8:b3:d9:51:44:ac: 1a:6b:fa:0e:3a:50:f3:7a:65:dd:7c:43:76:c7:c1: 77:56:10:36:e1:e1:b2:09:2a:1e:47:a3:d3:5a:44: 0c:a0:ba:1a:38:af:50:7a:6f:c5:97:05:a0:7e:51: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:94:FB:33:63:71:23:FD:82:BC:56:13:13:AE:44:D1:A8:CF:9D:23 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/EA94FB33637123FD82BC561313AE44D1A8CF9D23.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.20.0/22 IPv6: 2804:43e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267596 Signature Algorithm: sha256WithRSAEncryption a1:8f:b0:49:aa:a5:e3:34:c8:69:81:35:ee:24:57:2d:9d:d3: 9c:74:5e:23:e0:5e:f5:b5:f4:7c:42:66:4a:90:cb:92:00:d4: c0:fe:12:d4:c0:fe:7f:ac:41:1a:bd:16:b8:24:a7:20:62:de: ad:6a:78:44:a0:17:9f:6e:c0:ea:4c:5d:48:09:f8:93:bf:9a: a6:b8:65:f2:b1:d7:27:10:cb:94:8f:fe:2f:b6:30:3e:5e:e2: 14:e4:c0:ff:91:e8:52:c1:65:34:7e:5a:f0:48:94:d2:e7:3f: d9:b3:c3:e8:00:6c:b9:9f:ae:d5:37:20:ab:c9:10:ee:a2:4a: 43:61:96:c8:fc:fe:27:c2:cb:9e:3f:16:8f:92:8d:03:31:5f: 7b:18:6e:e9:74:b0:97:88:69:ce:56:b7:52:42:c5:e5:17:ea: 16:57:16:d8:15:1f:03:dc:20:be:a6:c6:61:6e:d6:e3:20:d0: e0:2d:ba:b8:a4:55:6e:de:17:8f:f3:6f:47:3c:81:8b:70:4f: 2b:70:85:e8:a9:c4:0b:60:81:ee:1c:e5:ab:08:56:ae:f8:06: 1f:dc:5a:fc:e8:a4:ee:8f:17:2c:d6:b5:f3:72:06:07:bf:e0: d0:f2:f3:74:2a:f5:a2:fb:2f:f5:25:4d:7c:e4:7e:9e:1f:4c: 49:70:a4:0b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQsn+qvMVRyWMsGMjLP6PWAylB2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDcxODQzNTlaFw0yNjEwMDYxODQ4NTlaMDMxMTAvBgNV BAMTKEVBOTRGQjMzNjM3MTIzRkQ4MkJDNTYxMzEzQUU0NEQxQThDRjlEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSVSCEm53p5aXoE+eb/neBu4B UbAaF7fJYe5nW4kPUsU13qh1ZImf8bhcmnkVZgASVf1DiMNibziS/KeHMmjEEip7 41Lk9T4r3s76ksxGu9027ia58O/ItqW63ylftwnvvJ4w/SlwJ2YNpPFNLsneqNPI otA6j1KZB1Cs6v0axghSpcMptge6gSYldKu7LAG+0nrob+lGSybclekQ1Gtiv/RM gwFwO5IzKwKrAM0fPUQMgz/gIfRa1wh8bEYcR/cXTcq3GaEBf3CU87iz2VFErBpr +g46UPN6Zd18Q3bHwXdWEDbh4bIJKh5Ho9NaRAyguho4r1B6b8WXBaB+UQBXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqlPszY3Ej/YK8 VhMTrkTRqM+dIzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkE1 YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3c3ovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pB NWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzEvRUE5 NEZCMzM2MzcxMjNGRDgyQkM1NjEzMTNBRTQ0RDFBOENGOUQyMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUcUMA0EAgACMAcDBQAoBEPgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVTDANBgkqhkiG9w0BAQsFAAOCAQEAoY+wSaql4zTIaYE1 7iRXLZ3TnHReI+Be9bX0fEJmSpDLkgDUwP4S1MD+f6xBGr0WuCSnIGLerWp4RKAX n27A6kxdSAn4k7+aprhl8rHXJxDLlI/+L7YwPl7iFOTA/5HoUsFlNH5a8EiU0uc/ 2bPD6ABsuZ+u1Tcgq8kQ7qJKQ2GWyPz+J8LLnj8Wj5KNAzFfexhu6XSwl4hpzla3 UkLF5RfqFlcW2BUfA9wgvqbGYW7W4yDQ4C26uKRVbt4Xj/NvRzyBi3BPK3CF6KnE C2CB7hzlqwhWrvgGH9xa/Oik7o8XLNa183IGB7/g0PLzdCr1ovsv9SVNfOR+nh9M SXCkCw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:41 2025 by rpki-client