$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer File: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer (raw, json) Hash identifier: 0SV/JZaMdpHHv4JG8/5bOevfXmWQB1TiPCYHEljBopc= Subject key identifier: 0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B3B32A51FECDAA1A815B730EB9AA3245EE0E72E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft caRepository: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Oct 2025 17:35:33 +0000 Certificate not after: Fri 23 Oct 2026 17:40:33 +0000 Subordinate resources: AS: 273455 IP: 2804:8ee8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3b:32:a5:1f:ec:da:a1:a8:15:b7:30:eb:9a:a3:24:5e:e0:e7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 24 17:35:33 2025 GMT Not After : Oct 23 17:40:33 2026 GMT Subject: CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:31:b7:d4:ca:96:24:73:fa:66:99:3b:9c: c4:2e:52:dc:7f:e6:30:67:b8:31:24:0f:59:16:7d: 44:1b:2d:4f:1d:6e:e8:7e:41:e1:db:c6:99:99:d9: e7:8d:d8:97:49:ad:b3:27:87:30:5b:fb:9c:64:5d: 5c:2a:8b:b3:cf:11:ea:45:e4:98:71:d6:6d:e3:3f: 54:35:2c:f4:d0:c9:d5:ba:22:0f:cd:24:ce:7c:31: e5:41:44:77:73:11:a4:f7:7b:0e:98:1d:9f:69:d1: 7c:5f:a4:cc:e3:d0:d1:50:93:65:99:f1:c7:89:98: 38:c9:03:7a:3f:20:ed:9e:9d:be:8f:68:59:ef:15: cf:a7:3a:5e:3f:7a:46:86:3f:ac:09:6d:5f:c9:2a: 8e:73:4b:bf:77:97:1d:f5:75:52:dd:a2:d7:9b:25: e7:f6:eb:cb:a2:9d:5f:b6:b1:28:13:48:f3:32:d2: 40:39:03:ec:14:c1:ac:01:be:9b:0c:13:b9:0e:1e: 30:37:b5:40:09:31:f3:14:39:8d:6a:d7:5f:1a:e1: 32:35:25:3e:f1:86:84:ed:6a:7c:4c:1b:46:99:f2: 45:91:b8:90:f6:5d:33:eb:22:ea:90:21:55:36:04: 5d:64:6f:47:c8:58:e0:d7:1e:1a:8f:d4:b7:e8:da: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8ee8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273455 Signature Algorithm: sha256WithRSAEncryption c2:8a:8c:a6:c7:8c:7b:6d:27:81:df:06:a9:b4:f1:c6:a9:2e: bc:8e:b9:db:1d:e5:84:97:cb:6f:aa:bd:1e:93:a9:cd:a6:7f: 87:0a:ac:a8:1e:19:82:f6:46:05:cb:87:4b:e9:69:06:5d:b2: 9f:62:e8:a8:3a:5a:4d:a6:94:7f:f1:c6:3f:01:b9:05:d4:8e: 23:5a:f3:f0:47:9b:8c:0d:f4:03:72:1d:6e:61:b1:ac:64:07: 75:92:ab:d9:7c:bd:2b:86:dd:ad:01:40:c7:45:c6:21:00:ea: 86:cf:48:7b:7d:5f:47:9b:45:68:a9:22:01:2a:6b:02:20:2d: b0:e7:62:cf:de:ca:05:d8:83:cc:fa:bb:c5:99:34:6f:e5:f3: bb:f6:9a:e0:bb:49:17:03:58:3e:f7:3f:41:67:06:19:ec:bb: 8a:ea:3e:1b:1e:69:95:66:48:fd:d2:c3:4b:48:a8:fd:9c:c8: b4:1f:e0:03:98:89:bd:81:c2:59:3e:42:24:b1:fc:75:60:af: 46:db:ad:16:12:71:5d:ca:5e:42:7a:59:50:26:12:c6:f6:e4: f7:fd:15:a1:83:6c:2d:f1:cd:7b:00:14:ff:eb:65:58:b9:ee: 99:00:77:f4:50:7c:53:b7:1e:b5:0d:cd:d7:4b:ba:ce:b5:40: 9b:19:04:e6 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUWzsypR/s2qGoFbcw65qjJF7g5y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjQxNzM1MzNaFw0yNjEwMjMxNzQwMzNaMDMxMTAvBgNV BAMTKDBDRTEwRjNEMkY3MjQ2Nzg3RTcxNzFEMUExRDg4QkEwQkFBNjUzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpzG31MqWJHP6Zpk7nMQuUtx/ 5jBnuDEkD1kWfUQbLU8dbuh+QeHbxpmZ2eeN2JdJrbMnhzBb+5xkXVwqi7PPEepF 5Jhx1m3jP1Q1LPTQydW6Ig/NJM58MeVBRHdzEaT3ew6YHZ9p0XxfpMzj0NFQk2WZ 8ceJmDjJA3o/IO2enb6PaFnvFc+nOl4/ekaGP6wJbV/JKo5zS793lx31dVLdoteb Jef268uinV+2sSgTSPMy0kA5A+wUwawBvpsME7kOHjA3tUAJMfMUOY1q118a4TI1 JT7xhoTtanxMG0aZ8kWRuJD2XTPrIuqQIVU2BF1kb0fIWODXHhqP1Lfo2ry/AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQM4Q89L3JGeH5x cdGh2IuguqZT5zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkdF cHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3NnEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZH RXB6RU0yQUhQQTh1U3ZhWTV1eG9QOW1RYXZCN3lDN1NlcHR0U3VENzZxLzAvMENF MTBGM0QyRjcyNDY3ODdFNzE3MUQxQTFEODhCQTBCQUE2NTNFNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASO6DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LC8wDQYJKoZIhvcNAQELBQADggEBAMKKjKbHjHttJ4HfBqm08capLryOudsd5YSX y2+qvR6Tqc2mf4cKrKgeGYL2RgXLh0vpaQZdsp9i6Kg6Wk2mlH/xxj8BuQXUjiNa 8/BHm4wN9ANyHW5hsaxkB3WSq9l8vSuG3a0BQMdFxiEA6obPSHt9X0ebRWipIgEq awIgLbDnYs/eygXYg8z6u8WZNG/l87v2muC7SRcDWD73P0FnBhnsu4rqPhseaZVm SP3Sw0tIqP2cyLQf4AOYib2Bwlk+QiSx/HVgr0bbrRYScV3KXkJ6WVAmEsb25Pf9 FaGDbC3xzXsAFP/rZVi57pkAd/RQfFO3HrUNzddLus61QJsZBOY= -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:38 2025 by rpki-client