$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer File: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer (raw, json) Hash identifier: quZShjbOkUBUnNKhVllIG6nfttFN9TDIOWbWgAGPo4E= Subject key identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64AFD23702BD5B3A13EEF520B6B72784F2428DE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft caRepository: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 14:35:33 +0000 Certificate not after: Wed 04 Nov 2026 14:40:33 +0000 Subordinate resources: AS: 269632 IP: 45.190.28.0/22 IP: 2804:6780::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 03:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:af:d2:37:02:bd:5b:3a:13:ee:f5:20:b6:b7:27:84:f2:42:8d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 5 14:35:33 2025 GMT Not After : Nov 4 14:40:33 2026 GMT Subject: CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:fa:b2:99:7b:6e:61:94:f9:49:5e:b0:bf: d7:f7:89:e1:1f:c5:e4:c0:08:38:7e:12:5a:16:6f: 4a:e1:30:09:90:70:be:83:45:a8:c4:7f:db:55:26: d2:55:ad:7c:b2:04:43:d3:29:b0:f5:3d:1a:17:04: 12:98:b0:62:7f:76:1e:d2:1d:26:80:1a:b2:de:1c: e4:84:91:39:00:d7:f0:1e:7f:3a:90:08:02:75:d2: cd:a9:8b:fc:a1:89:06:73:03:3b:7a:28:d8:52:a3: b3:e0:23:73:96:44:3b:46:a6:34:41:8d:b7:f2:85: db:6f:99:b8:59:d8:bd:0f:dd:d8:f2:99:8a:4b:92: 98:de:51:25:eb:2f:b3:ae:c4:bd:eb:a0:de:42:86: 61:74:44:ed:32:b1:ca:f2:57:df:ad:19:c7:4c:73: ee:31:b3:f0:00:08:9a:84:d1:a1:d9:69:47:e9:c4: db:30:20:f0:0d:aa:01:2f:db:77:2f:14:4b:41:83: 2a:1c:70:64:39:25:7a:d2:8b:63:fe:d3:60:db:a9: 29:36:b1:b0:8e:a1:83:8e:42:b5:6c:eb:88:f4:46: 26:30:80:a3:c3:7b:b2:79:a1:f2:6b:5a:3f:30:9e: d4:ed:c4:9d:16:95:91:f7:36:97:40:74:c5:cc:cb: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.28.0/22 IPv6: 2804:6780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269632 Signature Algorithm: sha256WithRSAEncryption ae:a5:35:3c:39:49:a1:c0:3b:b9:cb:c6:3a:94:8c:da:0f:80: ef:1e:28:fb:cf:ff:77:0c:7b:19:88:02:08:9e:c7:76:63:96: 9e:94:08:31:ec:8c:26:35:3a:76:49:d3:eb:0a:8c:d9:fb:bf: 2f:be:f3:0d:f7:f3:77:63:a9:75:8b:b8:ff:5a:65:f1:1a:f6: ce:a1:5e:db:db:27:93:28:d2:e2:3f:df:79:9e:74:80:c5:de: a3:53:4a:5f:f9:7e:1e:ef:f0:aa:77:fb:c5:b3:bf:69:02:88: be:98:ab:29:54:8e:0b:22:f6:a6:c2:6e:32:34:82:df:bc:4b: bd:d6:3b:f5:17:c1:98:03:3b:5a:33:78:39:0e:95:ad:44:04: 11:59:91:b0:be:ce:ba:64:da:fd:5c:2d:19:78:eb:3e:5c:21: e3:3f:58:26:78:19:22:03:ec:ae:7a:b2:e7:af:0c:bd:27:59: 2d:9b:24:af:c5:fe:d4:45:22:b2:a3:02:82:6e:28:0c:5c:34: 8a:f8:bc:d2:3a:21:78:15:4d:86:77:c7:da:ad:55:8f:89:bc: 6d:ff:31:99:02:82:08:6e:b4:5e:30:b0:e2:cc:a2:60:22:6f: 28:ef:cf:2f:9e:84:c3:90:61:f6:08:92:af:6c:2a:7d:f3:51: fc:fd:f4:6d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZK/SNwK9WzoT7vUgtrcnhPJCjegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDUxNDM1MzNaFw0yNjExMDQxNDQwMzNaMDMxMTAvBgNV BAMTKDFCRkE3MEMzQkY5OUFGQ0E4RTFDOTY5OUQ1RjY0OERGMkNCNDQxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rfqymXtuYZT5SV6wv9f3ieEf xeTACDh+EloWb0rhMAmQcL6DRajEf9tVJtJVrXyyBEPTKbD1PRoXBBKYsGJ/dh7S HSaAGrLeHOSEkTkA1/AefzqQCAJ10s2pi/yhiQZzAzt6KNhSo7PgI3OWRDtGpjRB jbfyhdtvmbhZ2L0P3djymYpLkpjeUSXrL7OuxL3roN5ChmF0RO0yscryV9+tGcdM c+4xs/AACJqE0aHZaUfpxNswIPANqgEv23cvFEtBgyoccGQ5JXrSi2P+02DbqSk2 sbCOoYOOQrVs64j0RiYwgKPDe7J5ofJrWj8wntTtxJ0WlZH3NpdAdMXMyyb9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb+nDDv5mvyo4c lpnV9kjfLLRBpTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU13 MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVN dzJmYmd6Z3c2aEZNd2pYYmlEU1F5cVRRZk00d25NWXcyQjlBNTRMNUw4LzAvMUJG QTcwQzNCRjk5QUZDQThFMUM5Njk5RDVGNjQ4REYyQ0I0NDFBNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb4cMA0EAgACMAcDBQAoBGeAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQdQDANBgkqhkiG9w0BAQsFAAOCAQEArqU1PDlJocA7ucvG OpSM2g+A7x4o+8//dwx7GYgCCJ7HdmOWnpQIMeyMJjU6dknT6wqM2fu/L77zDffz d2OpdYu4/1pl8Rr2zqFe29snkyjS4j/feZ50gMXeo1NKX/l+Hu/wqnf7xbO/aQKI vpirKVSOCyL2psJuMjSC37xLvdY79RfBmAM7WjN4OQ6VrUQEEVmRsL7OumTa/Vwt GXjrPlwh4z9YJngZIgPsrnqy568MvSdZLZskr8X+1EUisqMCgm4oDFw0ivi80joh eBVNhnfH2q1Vj4m8bf8xmQKCCG60XjCw4syiYCJvKO/PL56Ew5Bh9giSr2wqffNR /P30bQ== -----END CERTIFICATE-----Generated at Thu Nov 6 02:50:58 2025 by rpki-client