$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D05DB8387F5334BB020DA8E16953D4C469BA72B.cer File: 0D05DB8387F5334BB020DA8E16953D4C469BA72B.cer (raw, json) Hash identifier: /Fq+cRjv2BwaVv2y//zM34lxsM0nkv/VSLKzXeWDVwE= Subject key identifier: 0D:05:DB:83:87:F5:33:4B:B0:20:DA:8E:16:95:3D:4C:46:9B:A7:2B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4875FCE2D3448CAC60C5E7FD2180C1580E4FA737 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/0D05DB8387F5334BB020DA8E16953D4C469BA72B.mft caRepository: rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 31 Oct 2025 18:08:47 +0000 Certificate not after: Fri 30 Oct 2026 18:13:47 +0000 Subordinate resources: AS: 265086 IP: 170.233.32.0/22 IP: 2804:3294::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:75:fc:e2:d3:44:8c:ac:60:c5:e7:fd:21:80:c1:58:0e:4f:a7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 31 18:08:47 2025 GMT Not After : Oct 30 18:13:47 2026 GMT Subject: CN=0D05DB8387F5334BB020DA8E16953D4C469BA72B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:e1:e0:ef:ac:5c:44:b9:af:b2:42:43:fb: f5:a0:29:56:19:d8:5f:ac:06:f1:50:ab:08:c4:6a: a6:57:15:17:66:dd:65:d1:e7:e6:8d:d7:58:40:a0: bc:f0:89:8b:56:02:ce:76:12:24:92:89:b4:11:9e: c8:6e:4c:5c:64:1c:d1:d0:d5:78:14:df:78:11:3e: 2a:fd:8d:b5:ce:7e:5f:55:30:e9:4c:e3:a5:de:74: d8:70:ea:6d:01:04:8f:b8:2d:24:d4:fd:f2:10:ff: 9b:c5:55:19:60:82:40:f8:b3:99:b4:11:7d:4f:6e: fc:a1:b9:ed:65:b5:04:ad:4b:26:e2:13:22:6b:e5: 10:af:38:d6:61:74:a5:91:f1:01:e8:ed:53:c1:01: 4b:1a:18:7e:18:3d:17:54:a4:5c:fb:d9:eb:43:8f: f4:f5:33:d1:b1:cc:b3:82:42:f7:40:35:b9:96:48: 24:40:60:8f:0b:07:9a:e7:6c:d6:9a:4d:bc:a9:3d: 53:95:68:aa:60:be:9c:91:de:d4:7d:47:f8:ff:a3: 80:fd:7d:6e:b8:24:09:21:70:b2:62:79:4e:de:f7: d8:32:0e:09:a1:e6:f3:c4:4b:66:24:44:f0:7a:e1: 79:85:30:b1:48:30:2b:e4:14:a5:0c:47:b0:cd:ed: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:05:DB:83:87:F5:33:4B:B0:20:DA:8E:16:95:3D:4C:46:9B:A7:2B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/0D05DB8387F5334BB020DA8E16953D4C469BA72B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.32.0/22 IPv6: 2804:3294::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265086 Signature Algorithm: sha256WithRSAEncryption 0a:09:54:c6:a2:d2:af:04:34:61:4d:54:18:7c:2f:98:f1:23: 9e:43:dd:1c:40:90:bf:ab:f5:aa:6b:7b:fe:73:32:a1:59:2e: a6:72:01:24:6a:db:42:de:8e:0d:46:63:f1:91:07:b5:e0:aa: f5:16:78:f6:54:fa:cd:02:5f:18:bd:13:14:22:98:2a:8d:03: 64:4f:d6:b4:2a:0d:95:6e:c1:f4:9e:7f:cd:4e:53:37:05:59: bf:cb:11:6d:40:fd:f6:89:a7:6b:a5:07:cf:51:d9:8a:1a:b3: 72:f6:8a:cd:12:67:bc:7b:aa:ea:b2:df:3e:d7:57:91:f4:94: f9:c9:06:5e:4f:d9:68:c0:fa:e1:4e:7f:9c:ff:2d:f8:18:66: bc:86:17:40:6a:08:81:a0:fb:05:40:d8:b2:c4:2c:4d:76:fe: 90:27:96:1f:ff:b3:37:49:c4:d1:15:2f:ec:4e:05:ba:c4:52: 3b:d5:de:96:29:89:95:23:b5:2b:d1:37:0b:e3:8b:f1:b9:12: 18:8e:9d:cb:5b:c3:7b:ef:42:56:96:16:76:ba:0d:dc:e1:a6: f2:a4:e7:b9:ee:ed:c0:8d:8b:20:5e:9f:70:b3:fb:88:1f:cb: af:23:8f:17:8b:6f:c9:9e:9b:9b:f9:64:7c:93:41:33:5f:0d: e4:e1:e3:ad -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUSHX84tNEjKxgxef9IYDBWA5PpzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzExODA4NDdaFw0yNjEwMzAxODEzNDdaMDMxMTAvBgNV BAMTKDBEMDVEQjgzODdGNTMzNEJCMDIwREE4RTE2OTUzRDRDNDY5QkE3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTeHg76xcRLmvskJD+/WgKVYZ 2F+sBvFQqwjEaqZXFRdm3WXR5+aN11hAoLzwiYtWAs52EiSSibQRnshuTFxkHNHQ 1XgU33gRPir9jbXOfl9VMOlM46XedNhw6m0BBI+4LSTU/fIQ/5vFVRlggkD4s5m0 EX1Pbvyhue1ltQStSybiEyJr5RCvONZhdKWR8QHo7VPBAUsaGH4YPRdUpFz72etD j/T1M9GxzLOCQvdANbmWSCRAYI8LB5rnbNaaTbypPVOVaKpgvpyR3tR9R/j/o4D9 fW64JAkhcLJieU7e99gyDgmh5vPES2YkRPB64XmFMLFIMCvkFKUMR7DN7ZiFAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNBduDh/UzS7Ag 2o4WlT1MRpunKzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2di cGpqcDNRaEN4UkI3Y0MyRFBiQkpxYlBGTVpSQlJYcUtnUldYakFCRC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2di cGpqcDNRaEN4UkI3Y0MyRFBiQkpxYlBGTVpSQlJYcUtnUldYakFCRC8wLzBEMDVE QjgzODdGNTMzNEJCMDIwREE4RTE2OTUzRDRDNDY5QkE3MkIubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqrpIDANBAIAAjAHAwUAKAQylDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEC34wDQYJKoZIhvcNAQELBQADggEBAAoJVMai0q8ENGFNVBh8 L5jxI55D3RxAkL+r9apre/5zMqFZLqZyASRq20Lejg1GY/GRB7XgqvUWePZU+s0C Xxi9ExQimCqNA2RP1rQqDZVuwfSef81OUzcFWb/LEW1A/faJp2ulB89R2Yoas3L2 is0SZ7x7quqy3z7XV5H0lPnJBl5P2WjA+uFOf5z/LfgYZryGF0BqCIGg+wVA2LLE LE12/pAnlh//szdJxNEVL+xOBbrEUjvV3pYpiZUjtSvRNwvji/G5EhiOnctbw3vv QlaWFna6DdzhpvKk57nu7cCNiyBen3Cz+4gfy68jjxeLb8mem5v5ZHyTQTNfDeTh 460= -----END CERTIFICATE-----Generated at Sun Nov 2 23:00:20 2025 by rpki-client