$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D27227F1560DF2B60341C7259E9A068591B18A3.cer File: 1D27227F1560DF2B60341C7259E9A068591B18A3.cer (raw, json) Hash identifier: V/4rs87Bzv9IJPJmsZVqDY35Zm6Yt+drrL/fgPYG26k= Subject key identifier: 1D:27:22:7F:15:60:DF:2B:60:34:1C:72:59:E9:A0:68:59:1B:18:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0428D68035ABCD88B23B45F1EAD4FBE922D77379 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.mft caRepository: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Oct 2025 12:34:33 +0000 Certificate not after: Fri 23 Oct 2026 12:39:33 +0000 Subordinate resources: AS: 268692 IP: 45.165.208.0/22 IP: 2804:5524::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:28:d6:80:35:ab:cd:88:b2:3b:45:f1:ea:d4:fb:e9:22:d7:73:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 24 12:34:33 2025 GMT Not After : Oct 23 12:39:33 2026 GMT Subject: CN=1D27227F1560DF2B60341C7259E9A068591B18A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:f2:a5:65:5b:f1:7d:1d:5b:0d:bc:cd:86: 06:f2:9b:6f:10:80:94:60:33:c6:e7:ab:f3:e8:ea: ca:1a:75:43:b3:46:4e:99:e2:3b:58:d8:28:e0:f8: cc:cc:65:83:ae:21:a5:39:83:55:a0:bd:ca:20:f2: a5:e9:b3:bd:7e:2d:00:b3:dc:13:c6:c3:e7:29:92: ea:98:47:de:87:05:33:1e:1e:03:b2:38:48:8e:fd: 96:d0:fe:e6:d1:de:a1:de:b8:3c:ba:07:ad:ee:a2: df:a3:d3:24:0b:ab:ac:e9:55:bd:dc:a7:35:38:0b: c4:6b:50:ae:31:86:00:dd:c0:e6:2d:fb:4f:44:5f: 1c:d2:03:6b:aa:f8:8e:f4:64:82:9d:96:87:46:0a: 12:29:f4:b5:7c:0e:4e:c3:f1:1a:b5:01:06:8b:53: f8:40:72:05:25:36:ae:f6:00:ed:98:10:00:58:08: fc:78:52:b0:e4:fa:30:2b:74:ba:5a:0c:b0:9f:da: fd:b2:43:0e:4a:70:30:8e:ef:5a:ab:df:85:88:34: 85:d0:0e:98:a1:df:98:70:46:52:7e:22:0f:01:23: 52:e8:a1:2e:d6:57:7a:cd:8d:3e:40:fa:1b:ac:e0: e5:79:b3:50:45:71:a7:03:66:66:06:e4:1a:34:90: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:27:22:7F:15:60:DF:2B:60:34:1C:72:59:E9:A0:68:59:1B:18:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1D27227F1560DF2B60341C7259E9A068591B18A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.208.0/22 IPv6: 2804:5524::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268692 Signature Algorithm: sha256WithRSAEncryption 2b:7f:51:0d:08:55:51:bc:4b:cd:15:66:0f:9a:c1:6e:b8:d6: 73:f0:53:f8:f6:3e:52:bf:d1:64:e4:0c:13:75:35:25:75:59: 14:b0:f2:54:33:78:22:d6:77:6f:e7:7b:2d:58:7a:f9:72:52: aa:61:11:0b:23:ae:2d:3e:57:af:39:a6:5a:cc:aa:15:5b:ef: c6:94:40:8a:2d:ac:4c:e9:d8:4d:e8:53:f5:62:83:f6:6e:14: bd:f1:0d:36:1d:33:6c:e2:4d:58:4c:95:4f:c4:3a:e0:16:c7: bb:11:60:5b:3f:a8:13:2a:5a:77:ba:d5:87:c8:38:4d:b9:16: e3:c6:29:e3:15:09:da:14:b1:4c:da:3a:18:df:e7:33:a3:40: 6e:e6:50:53:4f:54:b6:9f:77:f0:dc:91:8f:f8:61:3f:6c:45: dd:8b:2a:f7:f0:bf:3c:15:03:5b:54:6c:db:b2:fd:ec:e6:56: 95:99:81:7e:bb:88:c0:95:d3:79:6e:64:ce:eb:5f:5c:2a:3e: 08:32:d4:f4:5a:ea:09:3d:01:dd:d6:aa:9b:ed:6f:f3:f4:e1: 65:77:3b:7f:27:ab:55:75:97:e1:79:a5:44:8d:7d:5f:bf:57: 31:09:ef:4b:68:2d:0c:a1:76:92:89:50:b9:6e:c3:aa:c7:ef: 65:36:ca:be -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBCjWgDWrzYiyO0Xx6tT76SLXc3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjQxMjM0MzNaFw0yNjEwMjMxMjM5MzNaMDMxMTAvBgNV BAMTKDFEMjcyMjdGMTU2MERGMkI2MDM0MUM3MjU5RTlBMDY4NTkxQjE4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBfKlZVvxfR1bDbzNhgbym28Q gJRgM8bnq/Po6soadUOzRk6Z4jtY2Cjg+MzMZYOuIaU5g1Wgvcog8qXps71+LQCz 3BPGw+cpkuqYR96HBTMeHgOyOEiO/ZbQ/ubR3qHeuDy6B63uot+j0yQLq6zpVb3c pzU4C8RrUK4xhgDdwOYt+09EXxzSA2uq+I70ZIKdlodGChIp9LV8Dk7D8Rq1AQaL U/hAcgUlNq72AO2YEABYCPx4UrDk+jArdLpaDLCf2v2yQw5KcDCO71qr34WINIXQ Dpih35hwRlJ+Ig8BI1LooS7WV3rNjT5A+hus4OV5s1BFcacDZmYG5Bo0kP+DAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdJyJ/FWDfK2A0 HHJZ6aBoWRsYozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGZr blZEZW1vNnJhMmpnbmJkaUU2WnhlMUZzdzRRQTNocXQybXNwZVRVTksvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhm a25WRGVtbzZyYTJqZ25iZGlFNlp4ZTFGc3c0UUEzaHF0Mm1zcGVUVU5LLzAvMUQy NzIyN0YxNTYwREYyQjYwMzQxQzcyNTlFOUEwNjg1OTFCMThBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaXQMA0EAgACMAcDBQAoBFUkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZlDANBgkqhkiG9w0BAQsFAAOCAQEAK39RDQhVUbxLzRVm D5rBbrjWc/BT+PY+Ur/RZOQME3U1JXVZFLDyVDN4ItZ3b+d7LVh6+XJSqmERCyOu LT5XrzmmWsyqFVvvxpRAii2sTOnYTehT9WKD9m4UvfENNh0zbOJNWEyVT8Q64BbH uxFgWz+oEypad7rVh8g4TbkW48Yp4xUJ2hSxTNo6GN/nM6NAbuZQU09Utp938NyR j/hhP2xF3Ysq9/C/PBUDW1Rs27L97OZWlZmBfruIwJXTeW5kzutfXCo+CDLU9Frq CT0B3daqm+1v8/ThZXc7fyerVXWX4XmlRI19X79XMQnvS2gtDKF2kolQuW7Dqsfv ZTbKvg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:22:57 2025 by rpki-client