$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer File: 1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer (raw, json) Hash identifier: lbDyAUNHdsNoYRsgcBjJjS7GwL2If4wVWmz/8rwCe9g= Subject key identifier: 19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E3AED4EB8652A98E5FB7CF91BE33B05E0EF5BE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft caRepository: rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 06 Aug 2025 04:54:51 +0000 Certificate not after: Wed 05 Aug 2026 04:59:51 +0000 Subordinate resources: AS: 263473 IP: 191.242.64.0/21 IP: 2804:1260::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3a:ed:4e:b8:65:2a:98:e5:fb:7c:f9:1b:e3:3b:05:e0:ef:5b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 6 04:54:51 2025 GMT Not After : Aug 5 04:59:51 2026 GMT Subject: CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:60:85:38:78:75:c8:56:b1:e8:5d:34:d4: aa:18:b7:63:7b:1b:0c:af:39:69:d8:30:b3:76:64: c6:aa:2a:db:09:2c:5f:fc:f1:d8:fc:43:a0:5f:b6: 1f:38:3e:30:89:0b:ed:a8:e7:48:80:0a:08:f5:aa: d1:c6:91:b2:79:a7:24:ca:be:48:95:6a:5a:fd:ab: f3:3d:48:2f:c6:f1:7d:f3:5d:67:fd:43:78:a7:d9: 89:ba:be:7c:cb:54:d5:1c:fc:b7:6c:43:9d:d9:05: 25:d6:ef:eb:25:b4:cf:08:cd:33:69:9a:33:2b:b5: a1:90:2f:5e:95:af:b3:90:7a:22:ab:29:4d:5f:ff: 64:6c:97:d5:71:1f:19:be:4c:5d:51:c2:55:89:f5: ed:c6:7f:ce:76:f5:1a:ab:30:bb:8b:55:3d:90:ff: d0:c4:70:e8:4e:c4:52:f8:56:4f:73:19:f9:3b:40: 62:46:aa:a2:6c:62:07:9a:85:0a:04:0a:54:37:e9: 7f:fd:3e:45:1e:63:8c:d6:2b:53:48:83:68:4c:ed: 4b:4a:c1:1a:01:93:de:0d:83:4a:16:e1:d6:da:2d: fe:b8:f5:3a:cc:55:fb:6d:8c:4e:52:d3:cd:12:d9: 76:6e:ba:26:ea:32:b5:6b:ce:9b:ac:90:88:50:7e: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.242.64.0/21 IPv6: 2804:1260::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263473 Signature Algorithm: sha256WithRSAEncryption 92:16:da:69:58:3a:1f:2d:74:1c:19:2a:74:bf:65:25:51:3f: 34:fa:3e:74:85:3c:fe:ea:11:e0:25:ba:f0:3d:64:c5:55:b1: 28:c0:3e:fb:53:54:73:e4:0d:30:53:44:57:de:86:a8:87:ce: bd:1f:8d:ca:73:89:56:ab:f7:6f:14:d9:4f:fe:86:8b:4d:69: 9e:45:a8:99:cd:4b:b6:c1:5e:97:3a:b5:df:d5:fc:6c:dd:5a: 2d:12:5a:b8:3b:f9:9d:bf:e0:93:a5:72:a1:b1:8e:9c:41:95: e2:a9:2f:2a:31:a6:5d:d1:6c:71:e1:74:58:73:bc:12:51:62: 91:53:24:8e:23:68:00:b7:d0:e2:64:cf:47:e2:9e:1d:6c:f2: 36:5e:24:cf:39:90:6f:8a:83:b3:0c:30:81:98:12:c6:4d:3f: 7c:1d:5c:95:f8:82:da:4c:b4:93:1c:c6:fe:34:63:8e:44:38: b2:04:69:12:26:64:69:c9:d0:4c:d1:67:98:e4:f9:6b:3a:99: 24:69:83:e8:f3:e6:b4:4c:0e:3e:5e:ce:30:5a:13:55:87:b1: 17:c1:be:c9:fa:29:e4:d6:52:cb:96:44:2b:e7:cd:8c:da:74: b4:93:69:b8:b9:85:4b:5b:70:7f:3f:0f:84:41:fe:cf:3d:ed: c4:57:dc:06 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXjrtTrhlKpjl+3z5G+M7BeDvW+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDYwNDU0NTFaFw0yNjA4MDUwNDU5NTFaMDMxMTAvBgNV BAMTKDE5MjBBMEFEMjI4NkVCMjZCNUQ4ODdBMEUyREEyRTUyOTBGN0FENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F2CFOHh1yFax6F001KoYt2N7 GwyvOWnYMLN2ZMaqKtsJLF/88dj8Q6Bfth84PjCJC+2o50iACgj1qtHGkbJ5pyTK vkiValr9q/M9SC/G8X3zXWf9Q3in2Ym6vnzLVNUc/LdsQ53ZBSXW7+sltM8IzTNp mjMrtaGQL16Vr7OQeiKrKU1f/2Rsl9VxHxm+TF1RwlWJ9e3Gf8529RqrMLuLVT2Q /9DEcOhOxFL4Vk9zGfk7QGJGqqJsYgeahQoEClQ36X/9PkUeY4zWK1NIg2hM7UtK wRoBk94Ng0oW4dbaLf649TrMVfttjE5S080S2XZuuibqMrVrzpuskIhQft+pAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZIKCtIobrJrXY h6Di2i5SkPetUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUQ0 VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZiVEUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FE NFRodnVCc0JZR0VqSktIWEpIdDYzMlhMYTU2VG1YZ3hwdEpZZmc2YlRFLzAvMTky MEEwQUQyMjg2RUIyNkI1RDg4N0EwRTJEQTJFNTI5MEY3QUQ1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDv/JAMA0EAgACMAcDBQAoBBJgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQFMTANBgkqhkiG9w0BAQsFAAOCAQEAkhbaaVg6Hy10HBkq dL9lJVE/NPo+dIU8/uoR4CW68D1kxVWxKMA++1NUc+QNMFNEV96GqIfOvR+NynOJ Vqv3bxTZT/6Gi01pnkWomc1LtsFelzq139X8bN1aLRJauDv5nb/gk6VyobGOnEGV 4qkvKjGmXdFsceF0WHO8ElFikVMkjiNoALfQ4mTPR+KeHWzyNl4kzzmQb4qDswww gZgSxk0/fB1clfiC2ky0kxzG/jRjjkQ4sgRpEiZkacnQTNFnmOT5azqZJGmD6PPm tEwOPl7OMFoTVYexF8G+yfop5NZSy5ZEK+fNjNp0tJNpuLmFS1twfz8PhEH+zz3t xFfcBg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:22:09 2025 by rpki-client