$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer File: 0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer (raw, json) Hash identifier: VtNsT2G7nkoIlsXuUmQuSgeH7to06OcYohBl2YyjsDc= Subject key identifier: 0C:AC:38:2B:5A:42:47:79:6D:76:A6:64:F9:F3:A3:9C:71:5A:BD:15 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A3F9DA013CB7EA27196BD3742C2A4398C363F30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/0CAC382B5A4247796D76A664F9F3A39C715ABD15.mft caRepository: rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Oct 2025 15:30:12 +0000 Certificate not after: Mon 19 Oct 2026 15:35:12 +0000 Subordinate resources: AS: 53167 IP: 143.202.132.0/22 IP: 177.22.176.0/21 IP: 186.219.128.0/20 IP: 2804:2a4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3f:9d:a0:13:cb:7e:a2:71:96:bd:37:42:c2:a4:39:8c:36:3f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 15:30:12 2025 GMT Not After : Oct 19 15:35:12 2026 GMT Subject: CN=0CAC382B5A4247796D76A664F9F3A39C715ABD15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:59:a4:e0:bc:e3:65:a4:7a:bb:2a:a7:9d: cf:a8:ba:33:01:30:fe:46:92:94:c6:c7:d1:1f:44: 73:da:f9:49:b7:19:c1:c6:ec:49:fc:3f:46:44:16: d1:e8:63:3d:d8:39:37:1a:02:cb:7c:9a:af:c5:f4: 0e:eb:57:1e:3e:71:b9:a1:80:03:96:ab:99:a5:0f: 40:38:18:36:d8:90:5b:30:2e:4f:f0:cf:a1:cc:7f: 0e:7c:9b:25:5d:95:ee:6e:ca:78:c5:3b:da:05:9a: 2e:08:1f:ac:99:83:d3:36:77:2f:2b:bd:aa:23:02: ed:b7:2a:ba:ea:2c:4f:0a:c6:12:a1:d4:32:8d:cb: 0d:bd:bb:71:a8:37:03:36:07:3a:4c:61:93:f2:0d: d4:39:9b:8f:89:35:8f:78:11:c9:7d:62:41:1c:b2: 83:e6:0e:62:f5:f8:51:1f:ab:7c:12:29:69:7d:34: a8:e0:89:07:18:de:c4:f8:75:fa:b8:ee:74:63:fa: 63:a3:9b:41:30:27:5a:82:0a:90:c9:bb:c1:9d:f6: 97:b7:79:ac:0c:5d:7a:09:28:98:85:cd:86:34:7d: e2:19:ff:ed:63:2e:16:7f:73:c8:d8:77:f3:7b:e4: cd:ab:f8:f2:45:67:6b:8b:cf:44:a4:c2:31:98:ba: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:AC:38:2B:5A:42:47:79:6D:76:A6:64:F9:F3:A3:9C:71:5A:BD:15 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/0CAC382B5A4247796D76A664F9F3A39C715ABD15.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.132.0/22 177.22.176.0/21 186.219.128.0/20 IPv6: 2804:2a4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53167 Signature Algorithm: sha256WithRSAEncryption 24:c1:72:66:50:e0:22:ad:3d:4c:b5:b6:4b:e4:b1:10:e1:66: f5:ef:ad:33:53:04:ac:77:29:2e:ed:7e:42:b7:14:3a:67:b9: 9a:74:a6:fc:e7:bd:87:33:7c:85:c5:d8:fc:24:47:38:8c:e2: 4e:2a:9a:6e:d9:86:d4:96:21:fc:c2:fb:3a:91:60:7a:7d:a3: 1f:fc:89:2e:d1:19:01:8e:70:bd:a2:2c:5f:1e:62:d1:af:1a: 64:7a:d0:8d:0c:f4:12:de:3b:64:a0:95:82:08:7e:eb:2e:f6: 11:96:f8:3a:a4:70:3f:a7:2d:de:6a:a7:d7:cf:0f:66:9a:56: 52:f8:3f:16:e3:f1:ff:f6:7d:0a:2a:6b:44:51:75:20:0c:c8: 01:22:c8:64:83:16:12:57:3a:ee:8f:d3:7b:88:2a:ed:03:8b: 2f:3f:25:46:d8:b3:a0:30:80:d8:99:c2:94:51:1f:87:3e:c2: e3:f0:96:70:ac:06:ed:3b:16:d9:13:e6:60:eb:89:7d:83:3f: 75:c4:54:43:81:d6:81:13:1f:0c:cc:a6:f2:92:f1:1d:90:e6: 00:be:ed:4b:f7:eb:22:d8:40:92:4b:0a:ea:a6:39:01:8d:06: 9d:c3:7c:42:5f:77:db:39:39:df:2a:75:17:2f:28:ae:f5:c3: 10:c1:c6:28 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUSj+doBPLfqJxlr03QsKkOYw2PzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjAxNTMwMTJaFw0yNjEwMTkxNTM1MTJaMDMxMTAvBgNV BAMTKDBDQUMzODJCNUE0MjQ3Nzk2RDc2QTY2NEY5RjNBMzlDNzE1QUJEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKVmk4LzjZaR6uyqnnc+oujMB MP5GkpTGx9EfRHPa+Um3GcHG7En8P0ZEFtHoYz3YOTcaAst8mq/F9A7rVx4+cbmh gAOWq5mlD0A4GDbYkFswLk/wz6HMfw58myVdle5uynjFO9oFmi4IH6yZg9M2dy8r vaojAu23KrrqLE8KxhKh1DKNyw29u3GoNwM2BzpMYZPyDdQ5m4+JNY94Ecl9YkEc soPmDmL1+FEfq3wSKWl9NKjgiQcY3sT4dfq47nRj+mOjm0EwJ1qCCpDJu8Gd9pe3 eawMXXoJKJiFzYY0feIZ/+1jLhZ/c8jYd/N75M2r+PJFZ2uLz0SkwjGYuqddAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMrDgrWkJHeW12 pmT586OccVq9FTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1pG UlVWaTJVNFpqUTc4QmdFRjc5TlFmelZ4RjVMeFRUOXZ2ZDlvZHUxVlAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Na RlJVVmkyVTRaalE3OEJnRUY3OU5RZnpWeEY1THhUVDl2dmQ5b2R1MVZQLzAvMENB QzM4MkI1QTQyNDc3OTZENzZBNjY0RjlGM0EzOUM3MTVBQkQxNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCj8qEAwQDsRawAwQEutuAMA0EAgACMAcDBQAoBCpM MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPrzANBgkqhkiG9w0BAQsFAAOCAQEA JMFyZlDgIq09TLW2S+SxEOFm9e+tM1MErHcpLu1+QrcUOme5mnSm/Oe9hzN8hcXY /CRHOIziTiqabtmG1JYh/ML7OpFgen2jH/yJLtEZAY5wvaIsXx5i0a8aZHrQjQz0 Et47ZKCVggh+6y72EZb4OqRwP6ct3mqn188PZppWUvg/FuPx//Z9CiprRFF1IAzI ASLIZIMWElc67o/Te4gq7QOLLz8lRtizoDCA2JnClFEfhz7C4/CWcKwG7TsW2RPm YOuJfYM/dcRUQ4HWgRMfDMym8pLxHZDmAL7tS/frIthAkksK6qY5AY0GncN8Ql93 2zk53yp1Fy8orvXDEMHGKA== -----END CERTIFICATE-----Generated at Mon Nov 3 11:57:22 2025 by rpki-client