$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer File: EF854F36A2B85F7CA74543A1F5518487D375E292.cer (raw, json) Hash identifier: aKzQqnQ75Tq1tq3e8nKr9Hd/Kg9SLFP9PIRNn12Q02E= Subject key identifier: EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09C437C11EF5FCFB537E8DF0677341BC76B5120B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft caRepository: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 13:34:32 +0000 Certificate not after: Wed 07 Oct 2026 13:39:32 +0000 Subordinate resources: AS: 263866 IP: 138.186.112.0/22 IP: 2804:26f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c4:37:c1:1e:f5:fc:fb:53:7e:8d:f0:67:73:41:bc:76:b5:12:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 13:34:32 2025 GMT Not After : Oct 7 13:39:32 2026 GMT Subject: CN=EF854F36A2B85F7CA74543A1F5518487D375E292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:7b:32:6f:94:e1:b2:60:ce:85:22:ae:87: 82:fe:93:bf:08:5b:7d:f5:42:3f:37:ce:0e:ad:0a: 12:c4:b5:32:57:9b:4b:ce:ff:97:a7:ae:82:df:79: 57:9e:8f:63:8f:65:fd:75:a6:23:ff:08:ca:59:15: 9b:c4:dc:18:d1:7b:70:b2:64:e7:34:c9:d3:6a:03: 05:08:b0:88:1f:a5:35:df:b2:73:66:ce:59:87:82: 91:f7:a7:47:be:c1:de:75:e9:6d:bf:54:64:f5:a6: 87:5c:6e:44:b4:bf:20:7b:8c:a2:60:ac:73:1c:ab: 9f:c5:9d:0d:4f:0c:38:f8:e5:47:0f:70:e7:5f:e0: a8:6b:f5:c9:5d:85:e7:b1:bf:f7:7d:f7:c0:1c:cb: 67:11:a9:6c:ba:c0:f7:a5:6f:f9:eb:bb:ca:55:b1: 19:fc:f1:4e:b0:a7:17:82:ba:2c:8a:e5:74:52:52: 14:b5:a2:70:25:0d:2d:62:a5:14:95:8b:86:54:d5: bc:4c:4c:8c:97:1f:5e:56:23:22:4e:8f:56:09:f1: 80:b9:2d:81:3b:99:0e:e3:35:4a:df:3c:52:d5:b1: df:bc:d5:5a:9f:f2:9a:da:06:f2:34:3f:d5:bc:0c: e7:66:04:23:b8:f3:00:ed:fd:4e:66:e7:94:00:2e: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.112.0/22 IPv6: 2804:26f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263866 Signature Algorithm: sha256WithRSAEncryption 44:3b:82:2f:6b:cc:a5:3a:8a:c2:88:af:7d:a6:b7:31:fd:20: 18:b4:1e:04:95:7e:24:23:c5:d6:65:ce:99:05:b0:ac:7e:2f: 5c:19:3f:3b:47:14:48:d1:d1:fe:03:71:7f:71:e6:5e:6e:c1: bf:9e:1d:7a:d5:98:9b:81:cb:14:18:7b:a6:83:18:e9:d2:b1: 23:4c:e0:f0:98:50:86:ec:5c:51:46:e5:42:68:93:0a:24:e9: 21:f7:1e:7e:52:ae:eb:0a:6b:89:d5:af:77:81:b2:eb:ad:7d: 55:9d:05:62:1a:86:ac:19:05:12:0a:e7:13:85:a1:6a:cf:1a: ab:70:b1:13:2c:5f:42:8b:3e:e7:67:1a:a3:d9:d2:c6:9e:f7: 73:56:14:d3:d7:3a:5e:a1:3d:8f:6a:f0:3d:7e:3f:a1:c9:8f: 6f:9f:c5:ad:d7:54:43:c1:10:ee:23:bc:5b:b9:d1:0c:13:71: 03:73:3c:e1:83:ec:83:b4:18:5a:f5:ad:1e:01:c5:77:04:26: 13:3a:40:1e:46:4c:37:57:a5:90:cb:47:1a:87:9c:66:49:4d: 9c:30:ad:23:84:8a:9c:ea:34:d0:48:b1:ac:92:70:0f:ca:95: de:a3:f4:d9:89:c3:2c:46:9a:6e:80:20:10:32:00:7f:d6:75: b1:11:a2:ed -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUCcQ3wR71/PtTfo3wZ3NBvHa1EgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDgxMzM0MzJaFw0yNjEwMDcxMzM5MzJaMDMxMTAvBgNV BAMTKEVGODU0RjM2QTJCODVGN0NBNzQ1NDNBMUY1NTE4NDg3RDM3NUUyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9Hsyb5ThsmDOhSKuh4L+k78I W331Qj83zg6tChLEtTJXm0vO/5enroLfeVeej2OPZf11piP/CMpZFZvE3BjRe3Cy ZOc0ydNqAwUIsIgfpTXfsnNmzlmHgpH3p0e+wd516W2/VGT1podcbkS0vyB7jKJg rHMcq5/FnQ1PDDj45UcPcOdf4Khr9cldheexv/d998Acy2cRqWy6wPelb/nru8pV sRn88U6wpxeCuiyK5XRSUhS1onAlDS1ipRSVi4ZU1bxMTIyXH15WIyJOj1YJ8YC5 LYE7mQ7jNUrfPFLVsd+81Vqf8praBvI0P9W8DOdmBCO48wDt/U5m55QALrnRAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvhU82orhffKdF Q6H1UYSH03XikjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUUpa aktDbTZVMkFRaFBGRjJWOHFaWGVVRFdWYm1qazlBWTVvcU5hZURuOS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUUpa aktDbTZVMkFRaFBGRjJWOHFaWGVVRFdWYm1qazlBWTVvcU5hZURuOS8wL0VGODU0 RjM2QTJCODVGN0NBNzQ1NDNBMUY1NTE4NDg3RDM3NUUyOTIubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAoq6cDANBAIAAjAHAwUAKAQm9DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBrowDQYJKoZIhvcNAQELBQADggEBAEQ7gi9rzKU6isKIr32m tzH9IBi0HgSVfiQjxdZlzpkFsKx+L1wZPztHFEjR0f4DcX9x5l5uwb+eHXrVmJuB yxQYe6aDGOnSsSNM4PCYUIbsXFFG5UJokwok6SH3Hn5SrusKa4nVr3eBsuutfVWd BWIahqwZBRIK5xOFoWrPGqtwsRMsX0KLPudnGqPZ0sae93NWFNPXOl6hPY9q8D1+ P6HJj2+fxa3XVEPBEO4jvFu50QwTcQNzPOGD7IO0GFr1rR4BxXcEJhM6QB5GTDdX pZDLRxqHnGZJTZwwrSOEipzqNNBIsayScA/Kld6j9NmJwyxGmm6AIBAyAH/WdbER ou0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:54 2025 by rpki-client