$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/05BBCA5A86038E045DA98F756A6D1BDDBED83780.cer File: 05BBCA5A86038E045DA98F756A6D1BDDBED83780.cer (raw, json) Hash identifier: +ULdiDWhqJZg+hEJHttyoy+2qI3utnaVNxz2Z+Pof0c= Subject key identifier: 05:BB:CA:5A:86:03:8E:04:5D:A9:8F:75:6A:6D:1B:DD:BE:D8:37:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39DCB558D49CCC96979327CE223CCA8978901F59 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/05BBCA5A86038E045DA98F756A6D1BDDBED83780.mft caRepository: rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Feb 2025 20:10:21 +0000 Certificate not after: Mon 23 Feb 2026 20:15:21 +0000 Subordinate resources: AS: 266349 IP: 45.225.188.0/22 IP: 170.238.232.0/22 IP: 2804:3674::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Oct 2025 15:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dc:b5:58:d4:9c:cc:96:97:93:27:ce:22:3c:ca:89:78:90:1f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 20:10:21 2025 GMT Not After : Feb 23 20:15:21 2026 GMT Subject: CN=05BBCA5A86038E045DA98F756A6D1BDDBED83780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:57:4f:3f:30:4a:6c:db:5c:51:e2:a7:6f: 32:1c:8c:f2:74:cc:2f:83:9b:8e:c9:8a:b5:23:91: b6:de:4e:77:64:d5:8e:22:a6:e1:e0:3f:0b:7b:41: ea:cf:94:98:cb:bd:3b:ad:30:f7:b4:7c:05:11:d6: ae:3e:7c:7a:22:76:3d:71:c6:32:12:a6:4c:f4:38: 6e:c2:38:f8:2d:57:54:1d:d5:d6:75:0a:64:22:d8: fb:df:a3:91:3c:da:2b:f5:66:6e:4a:fa:82:3a:1e: e1:01:0d:c7:e6:f8:20:5e:00:bf:e2:0d:b3:79:fb: e1:8b:b7:f6:12:2c:85:5f:f7:87:88:ad:f2:89:1d: 2e:86:12:e6:fc:a3:bb:8e:2f:5e:9e:98:00:19:93: f1:8d:9f:a4:d0:9c:4b:80:b5:f6:4d:96:25:da:89: 6f:7b:77:31:5b:ef:c2:ea:ac:32:20:88:2d:3e:39: ec:b8:ac:72:62:37:7d:20:68:80:46:58:6b:9f:69: e9:de:5c:0f:a6:ef:61:87:b8:bf:89:0a:64:84:d2: 0f:db:49:bc:88:92:80:c2:ff:44:d9:b4:c3:c5:17: 8e:4e:89:35:b8:0b:17:64:eb:1d:5e:53:67:da:d8: 91:ba:ad:29:03:b0:49:a9:a9:76:cd:c7:f2:33:68: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:BB:CA:5A:86:03:8E:04:5D:A9:8F:75:6A:6D:1B:DD:BE:D8:37:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EzgHs6vsfVkoWcTHHznMoxx2sbUwD1cKNJvB7wkz8rkS/0/05BBCA5A86038E045DA98F756A6D1BDDBED83780.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.188.0/22 170.238.232.0/22 IPv6: 2804:3674::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266349 Signature Algorithm: sha256WithRSAEncryption c3:5b:42:e2:6b:8d:f9:61:85:ee:f6:ed:50:80:77:8b:65:34: c4:f5:d2:2a:9e:07:95:a3:e6:d6:a6:41:57:76:e6:9f:b4:3a: c0:ed:aa:83:17:dc:2c:84:08:69:30:38:8d:08:49:36:88:f3: e7:e8:59:e1:a6:9d:b6:34:0b:70:33:76:f0:7e:ec:d4:5e:f1: a6:54:12:3e:89:22:95:93:f7:b4:af:40:00:05:ad:fa:90:d4: 07:de:7d:93:42:84:31:f0:a1:4d:f9:67:8c:c7:ca:cd:35:48: 26:7f:fb:fa:80:61:e9:be:ad:39:49:62:25:da:1a:73:d1:bd: b7:4d:4c:82:7e:0a:a6:83:58:54:b1:19:01:5d:be:03:dc:02: f3:fc:97:f0:20:af:51:13:a1:42:19:ba:dd:f1:af:0b:c7:7e: 55:0a:83:f5:7a:0e:3b:ba:11:01:6c:78:17:61:96:39:6b:70: de:68:4f:9e:be:8f:6a:0f:23:ae:38:a1:e9:3b:57:04:af:a2: c3:1d:ae:e8:01:ec:90:81:eb:7e:7b:57:b3:80:84:d8:49:ed: d1:21:26:cd:cd:6c:5e:fc:93:7c:92:11:7b:a7:d3:bf:a5:60: 21:47:08:f0:60:69:20:eb:ba:e6:73:33:40:92:d4:f1:c1:9e: e6:59:40:13 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOdy1WNSczJaXkyfOIjzKiXiQH1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjQyMDEwMjFaFw0yNjAyMjMyMDE1MjFaMDMxMTAvBgNV BAMTKDA1QkJDQTVBODYwMzhFMDQ1REE5OEY3NTZBNkQxQkREQkVEODM3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVO1dPPzBKbNtcUeKnbzIcjPJ0 zC+Dm47JirUjkbbeTndk1Y4ipuHgPwt7QerPlJjLvTutMPe0fAUR1q4+fHoidj1x xjISpkz0OG7COPgtV1Qd1dZ1CmQi2Pvfo5E82iv1Zm5K+oI6HuEBDcfm+CBeAL/i DbN5++GLt/YSLIVf94eIrfKJHS6GEub8o7uOL16emAAZk/GNn6TQnEuAtfZNliXa iW97dzFb78LqrDIgiC0+Oey4rHJiN30gaIBGWGufaeneXA+m72GHuL+JCmSE0g/b SbyIkoDC/0TZtMPFF45OiTW4Cxdk6x1eU2fa2JG6rSkDsEmpqXbNx/IzaA69AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQFu8pahgOOBF2p j3VqbRvdvtg3gDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXpn SHM2dnNmVmtvV2NUSEh6bk1veHgyc2JVd0QxY0tOSnZCN3drejhya1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V6 Z0hzNnZzZlZrb1djVEhIem5Nb3h4MnNiVXdEMWNLTkp2Qjd3a3o4cmtTLzAvMDVC QkNBNUE4NjAzOEUwNDVEQTk4Rjc1NkE2RDFCRERCRUQ4Mzc4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeG8AwQCqu7oMA0EAgACMAcDBQAoBDZ0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQbTANBgkqhkiG9w0BAQsFAAOCAQEAw1tC4muN +WGF7vbtUIB3i2U0xPXSKp4HlaPm1qZBV3bmn7Q6wO2qgxfcLIQIaTA4jQhJNojz 5+hZ4aadtjQLcDN28H7s1F7xplQSPokilZP3tK9AAAWt+pDUB959k0KEMfChTfln jMfKzTVIJn/7+oBh6b6tOUliJdoac9G9t01Mgn4KpoNYVLEZAV2+A9wC8/yX8CCv UROhQhm63fGvC8d+VQqD9XoOO7oRAWx4F2GWOWtw3mhPnr6Pag8jrjih6TtXBK+i wx2u6AHskIHrfntXs4CE2Ent0SEmzc1sXvyTfJIRe6fTv6VgIUcI8GBpIOu65nMz QJLU8cGe5llAEw== -----END CERTIFICATE-----Generated at Mon Oct 27 14:25:23 2025 by rpki-client