$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer File: 163A822EB1F1299E4F1A306D50A95304A748A422.cer (raw, json) Hash identifier: lITA8D/eroqzSR3+oElwnk6TEw810jAyOhGViuMHpKc= Subject key identifier: 16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69EC26212938FA7032B7DEEA58B5061290F06C09 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft caRepository: rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Oct 2025 19:07:47 +0000 Certificate not after: Mon 05 Oct 2026 19:12:47 +0000 Subordinate resources: AS: 264241 IP: 138.118.4.0/22 IP: 168.196.8.0/22 IP: 2804:24c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ec:26:21:29:38:fa:70:32:b7:de:ea:58:b5:06:12:90:f0:6c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 6 19:07:47 2025 GMT Not After : Oct 5 19:12:47 2026 GMT Subject: CN=163A822EB1F1299E4F1A306D50A95304A748A422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:d8:7c:e2:ae:f4:0b:91:54:1a:71:de:a9: 13:9a:35:d4:e3:55:76:95:d0:c8:2e:e0:5b:ad:1c: e3:bb:dc:5c:4c:30:05:3c:32:50:e0:dd:d8:3b:27: 72:61:e6:36:c2:23:22:d2:fe:35:e6:0f:aa:b6:e9: c0:c3:b4:57:69:3d:a2:9b:42:dd:e3:1a:48:81:14: d6:5d:60:5f:aa:44:25:aa:b1:77:e7:93:ca:72:97: 82:70:ba:81:8b:9f:e6:ac:d3:55:e5:7c:0b:b2:de: 7d:43:90:be:d0:77:b8:7a:6e:50:36:5b:76:84:0f: 69:8b:8d:e8:4e:ed:ef:c5:22:43:cc:0b:2d:03:2a: 23:3c:ae:02:55:5b:da:96:7b:37:4c:69:8b:c8:c5: ca:96:ab:f5:ac:06:1a:c8:bd:a1:18:92:39:c3:3e: e2:c1:e6:a1:c6:2e:97:9b:e0:a8:74:57:d6:3b:08: 12:7b:7b:71:95:b0:e4:ab:8f:fd:2b:05:59:f8:0c: 53:8b:30:ba:f4:e3:11:08:87:88:26:8d:a2:0d:d4: ac:3a:68:02:ea:92:5f:79:8c:5d:a6:d4:47:a4:3d: b5:da:e7:70:2b:25:b6:fa:7f:73:04:d7:36:22:c7: 26:98:40:01:b8:3e:13:df:77:34:8d:c6:71:4d:f3: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.4.0/22 168.196.8.0/22 IPv6: 2804:24c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264241 Signature Algorithm: sha256WithRSAEncryption 6a:2b:fa:7a:e1:f2:94:c6:01:2e:b6:ea:ca:bf:6c:a8:a3:32: 3a:14:6d:55:8d:84:24:df:a0:4b:44:08:2f:f6:76:c5:28:7e: 09:7a:c6:89:4b:51:1c:2d:aa:16:44:85:d0:83:2c:1a:97:b6: 8f:b7:78:b1:92:dd:e6:ab:80:94:06:d0:5b:08:55:cc:65:3b: b1:cf:fe:f6:b1:4f:e3:e5:44:61:39:4e:2b:cc:d5:dc:b9:c0: 2d:a7:aa:ea:7b:be:dc:83:4d:3f:53:27:94:4e:f9:13:7d:63: ba:7b:57:14:86:fd:c6:63:30:70:1e:e7:f4:e7:0a:74:28:ef: ff:b9:b2:37:a0:54:4e:ca:da:f1:6b:53:27:c2:99:f6:bd:34: ee:e7:88:ce:d1:a5:7d:92:ab:0b:b2:fd:0c:64:d5:30:36:96: 7d:77:d4:9e:00:3a:5c:10:47:bb:8a:00:67:a0:12:ec:22:c0: 0d:9a:87:22:98:13:17:24:5a:4e:52:d2:c9:90:75:2d:9e:84: db:06:67:94:11:8b:ac:3c:36:de:01:88:8e:b6:03:bd:7b:74: d3:7b:5c:4e:6f:bd:2a:88:b4:90:d0:07:9a:a0:72:52:91:0f: a6:4e:d7:52:9c:c1:2a:3c:b3:4b:03:72:e7:e5:5f:a8:d0:6c: 38:0b:5a:c3 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUaewmISk4+nAyt97qWLUGEpDwbAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDYxOTA3NDdaFw0yNjEwMDUxOTEyNDdaMDMxMTAvBgNV BAMTKDE2M0E4MjJFQjFGMTI5OUU0RjFBMzA2RDUwQTk1MzA0QTc0OEE0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uNh84q70C5FUGnHeqROaNdTj VXaV0Mgu4FutHOO73FxMMAU8MlDg3dg7J3Jh5jbCIyLS/jXmD6q26cDDtFdpPaKb Qt3jGkiBFNZdYF+qRCWqsXfnk8pyl4JwuoGLn+as01XlfAuy3n1DkL7Qd7h6blA2 W3aED2mLjehO7e/FIkPMCy0DKiM8rgJVW9qWezdMaYvIxcqWq/WsBhrIvaEYkjnD PuLB5qHGLpeb4Kh0V9Y7CBJ7e3GVsOSrj/0rBVn4DFOLMLr04xEIh4gmjaIN1Kw6 aALqkl95jF2m1EekPbXa53ArJbb6f3ME1zYixyaYQAG4PhPfdzSNxnFN8xfJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWOoIusfEpnk8a MG1QqVMEp0ikIjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0E0 UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdvMzcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdB NFA2M2I5MlJCR1Zja0V0OXhNelJlWVhHbUpTdVdDUkp1RnJObkh3bzM3LzAvMTYz QTgyMkVCMUYxMjk5RTRGMUEzMDZENTBBOTUzMDRBNzQ4QTQyMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinYEAwQCqMQIMA0EAgACMAcDBQAoBCTEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIMTANBgkqhkiG9w0BAQsFAAOCAQEAaiv6euHy lMYBLrbqyr9sqKMyOhRtVY2EJN+gS0QIL/Z2xSh+CXrGiUtRHC2qFkSF0IMsGpe2 j7d4sZLd5quAlAbQWwhVzGU7sc/+9rFP4+VEYTlOK8zV3LnALaeq6nu+3INNP1Mn lE75E31juntXFIb9xmMwcB7n9OcKdCjv/7myN6BUTsra8WtTJ8KZ9r007ueIztGl fZKrC7L9DGTVMDaWfXfUngA6XBBHu4oAZ6AS7CLADZqHIpgTFyRaTlLSyZB1LZ6E 2wZnlBGLrDw23gGIjrYDvXt003tcTm+9Koi0kNAHmqByUpEPpk7XUpzBKjyzSwNy 5+VfqNBsOAtaww== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:45 2025 by rpki-client