$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer File: 18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer (raw, json) Hash identifier: uvZnqqS8TAByc5K+RxLzqmwB5m8w0d7LpXjzjWHawWE= Subject key identifier: 18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6E9203E73416C535760AC1C4BA9965E73DDC96F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft caRepository: rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 11 Sep 2025 14:16:33 +0000 Certificate not after: Thu 10 Sep 2026 14:21:33 +0000 Subordinate resources: AS: 28620 IP: 201.55.128.0/19 IP: 201.55.176.0/20 IP: 2804:afc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:92:03:e7:34:16:c5:35:76:0a:c1:c4:ba:99:65:e7:3d:dc:96:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 11 14:16:33 2025 GMT Not After : Sep 10 14:21:33 2026 GMT Subject: CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:a5:e3:a8:91:87:08:c5:a1:3a:93:5b:12: 01:71:63:31:84:c3:6c:c7:f0:71:d8:23:67:2b:62: fb:f4:0a:7b:3b:03:85:0f:04:70:4b:2a:3f:99:c0: 7b:cd:e8:f3:7d:3f:7f:00:5a:41:32:50:33:b7:23: ab:e3:ca:c6:b6:42:ae:14:66:63:f9:52:bd:d0:7b: 4d:08:b9:43:07:e9:f9:0f:71:f0:04:ae:ad:15:40: 7b:8c:34:86:a1:9a:eb:f2:3c:69:2f:9f:b9:95:94: 8c:c6:3e:ab:07:01:a2:e1:96:05:5d:6f:9a:fe:02: eb:02:fb:03:10:27:43:9c:e6:3d:2e:36:99:5a:6d: c2:77:53:b2:2c:d3:5d:90:f6:35:38:00:70:54:0b: d8:3c:8e:8d:84:e2:ee:7c:b3:22:0f:6f:7b:14:10: 9f:01:21:12:17:73:4c:bb:7e:15:97:2e:f0:58:d4: 94:cd:b0:60:96:78:fb:69:7b:1d:69:c5:3f:dc:72: 23:eb:01:82:82:d6:1e:79:8e:3b:fc:aa:a4:7d:b4: b1:1a:60:d8:00:15:9f:9a:57:fc:a4:5c:e2:15:7c: 54:ed:f7:06:38:f8:95:15:8d:a8:63:70:51:36:f7: 68:c0:84:c7:86:72:9e:67:40:61:ef:0e:a1:eb:e5: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.55.128.0/19 201.55.176.0/20 IPv6: 2804:afc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28620 Signature Algorithm: sha256WithRSAEncryption 33:40:6f:42:5f:46:0e:10:3b:f4:a3:14:55:21:a7:34:41:74: 12:06:4b:aa:e5:91:f8:87:ff:8e:13:f8:8d:44:b4:bc:3f:91: aa:83:ae:33:7c:06:ad:2b:ab:a6:94:c8:b3:8c:34:1b:b1:fc: 11:85:5e:77:ab:b6:f4:d8:39:20:90:5c:2a:38:1d:82:77:db: 3a:a4:d1:63:97:ea:ff:80:83:d0:7f:77:bf:df:d0:c0:f0:86: 98:85:7a:35:d4:d8:34:bf:0f:f9:ed:a7:67:15:3e:14:2e:df: de:3a:31:1f:5f:8e:7f:de:79:e8:bb:fe:be:4d:fb:7f:4a:07: 84:ba:1e:f9:3c:d1:9d:05:19:99:c6:5b:9b:cb:ff:a5:a2:06: 2a:8a:06:5e:d3:65:f3:0c:a7:07:2c:7c:08:25:ac:06:df:4f: 7a:91:76:15:91:31:af:19:6f:1d:03:38:d3:34:d5:a0:74:25: 61:62:35:81:c1:e4:46:5a:a9:20:b5:c4:f3:3a:a1:7c:fe:88: f8:8a:00:25:b0:1a:d8:16:24:99:c3:1c:e1:ad:52:f0:ab:d8: bd:cb:42:d9:bc:dc:06:22:e2:e2:ec:d5:73:eb:87:07:1f:bd: 9c:ef:d6:a4:93:f0:52:3c:6e:9f:79:64:7a:35:0e:47:a8:8d: 8a:e1:69:9e -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUbpID5zQWxTV2CsHEupll5z3clvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTExNDE2MzNaFw0yNjA5MTAxNDIxMzNaMDMxMTAvBgNV BAMTKDE4RUNCNUFFQjUwRjUxRDZEOTNDN0JGNDkyMjlENjlGRENBRTIxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/76XjqJGHCMWhOpNbEgFxYzGE w2zH8HHYI2crYvv0Cns7A4UPBHBLKj+ZwHvN6PN9P38AWkEyUDO3I6vjysa2Qq4U ZmP5Ur3Qe00IuUMH6fkPcfAErq0VQHuMNIahmuvyPGkvn7mVlIzGPqsHAaLhlgVd b5r+AusC+wMQJ0Oc5j0uNplabcJ3U7Is012Q9jU4AHBUC9g8jo2E4u58syIPb3sU EJ8BIRIXc0y7fhWXLvBY1JTNsGCWePtpex1pxT/cciPrAYKC1h55jjv8qqR9tLEa YNgAFZ+aV/ykXOIVfFTt9wY4+JUVjahjcFE292jAhMeGcp5nQGHvDqHr5eSHAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQY7LWutQ9R1tk8 e/SSKdaf3K4hazAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0FR ckFCMlhqYVRVU3FpRmp4MnlacHV4RXNlUHBkUjdLVWh5eGRzVFNBOHAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dB UXJBQjJYamFUVVNxaUZqeDJ5WnB1eEVzZVBwZFI3S1VoeXhkc1RTQThwLzAvMThF Q0I1QUVCNTBGNTFENkQ5M0M3QkY0OTIyOUQ2OUZEQ0FFMjE2Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQFyTeAAwQEyTewMA0EAgACMAcDBQAoBAr8MBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm/MMA0GCSqGSIb3DQEBCwUAA4IBAQAzQG9CX0YO EDv0oxRVIac0QXQSBkuq5ZH4h/+OE/iNRLS8P5Gqg64zfAatK6umlMizjDQbsfwR hV53q7b02DkgkFwqOB2Cd9s6pNFjl+r/gIPQf3e/39DA8IaYhXo11Ng0vw/57adn FT4ULt/eOjEfX45/3nnou/6+Tft/SgeEuh75PNGdBRmZxluby/+logYqigZe02Xz DKcHLHwIJawG3096kXYVkTGvGW8dAzjTNNWgdCVhYjWBweRGWqkgtcTzOqF8/oj4 igAlsBrYFiSZwxzhrVLwq9i9y0LZvNwGIuLi7NVz64cHH72c79akk/BSPG6feWR6 NQ5HqI2K4Wme -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:02 2025 by rpki-client