$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer File: 22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer (raw, json) Hash identifier: c/FzzeKMDEbWIgwrjQNIcG/Er96KyO9eZ4T/eFGQr5s= Subject key identifier: 22:DF:C9:57:03:9A:AE:7A:7D:C1:7B:E2:EC:7A:FD:D1:75:7D:FA:05 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6C05EAC221BEBC35CE5ABEB637FD51F059E11533 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft caRepository: rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Aug 2025 13:43:19 +0000 Certificate not after: Tue 25 Aug 2026 13:48:19 +0000 Subordinate resources: AS: 271548 IP: 181.174.212.0/22 IP: 2804:7d3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:05:ea:c2:21:be:bc:35:ce:5a:be:b6:37:fd:51:f0:59:e1:15:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 13:43:19 2025 GMT Not After : Aug 25 13:48:19 2026 GMT Subject: CN=22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:ca:92:40:39:31:63:8d:28:78:c6:68:0d: 82:e3:d2:d6:6c:37:01:d1:18:82:87:af:4a:cd:8e: 23:2f:14:33:75:54:ea:1c:00:bf:fd:e2:a8:e1:84: 03:2d:78:ee:2d:91:5a:ea:a7:f7:87:3e:50:f6:6a: 35:26:23:ef:e2:ce:94:85:55:a4:92:ec:3c:ae:1c: cf:1c:23:11:39:48:f6:61:1c:43:4f:e7:47:ee:01: 7d:4d:80:72:fd:fb:81:3b:44:49:82:e5:2d:91:e2: 80:5d:95:a3:f4:6e:0d:8e:92:be:1f:1e:70:2a:9c: ed:ef:e5:80:ba:5a:2e:9e:18:db:e9:e5:90:9f:eb: e6:c9:92:e9:20:af:01:55:ef:03:d6:d7:c4:4c:6d: 0f:8e:7e:ae:ef:9d:53:5f:c8:f1:f7:9c:75:59:b2: 26:82:71:0f:cc:66:46:00:79:68:a5:14:90:1b:73: b3:6e:3d:85:d8:e9:62:2a:62:89:e6:cc:8e:35:31: e4:38:94:ab:2e:50:74:fb:54:c2:98:ad:86:47:07: 6e:54:51:02:89:79:db:f6:f5:c0:26:92:0c:16:4e: da:87:4c:5a:77:62:6f:b2:f6:de:44:72:df:86:ee: 2f:1f:27:2f:8b:a3:d2:55:2a:fe:56:d2:a9:c8:66: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:DF:C9:57:03:9A:AE:7A:7D:C1:7B:E2:EC:7A:FD:D1:75:7D:FA:05 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.174.212.0/22 IPv6: 2804:7d3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271548 Signature Algorithm: sha256WithRSAEncryption 3d:58:72:53:57:78:6b:05:15:7a:de:c1:cf:e9:68:35:fa:23: 3a:2c:19:d2:6f:3b:fd:d0:58:98:e3:e7:f5:89:a8:ab:f6:ee: c1:08:72:3a:1d:4d:d8:2b:9e:fa:72:8a:4d:cf:05:9f:d8:f7: f4:28:46:85:59:18:ff:a7:e6:d8:b6:98:04:d3:5e:b7:46:de: c5:b1:5f:ef:74:3f:d9:8a:15:42:26:31:25:41:32:50:e4:21: 3a:e9:f6:cc:70:7e:d0:50:25:c4:ea:27:bd:fc:e8:0d:cf:41: c0:c4:b3:47:24:07:1b:dc:52:7d:1c:6e:79:62:2a:a0:85:ae: af:cb:0f:d6:5f:ce:b8:a6:03:0e:c9:81:54:d4:cc:82:dd:f2: 50:e8:af:4d:91:6f:3f:0e:72:2a:98:84:3b:3b:55:be:b4:14: c9:18:b2:24:94:aa:2e:3e:0b:48:bb:86:7d:21:e9:99:b2:f8: 95:5f:e8:3f:95:45:a6:5d:7a:20:de:c2:31:5a:34:7a:91:6a: cc:a0:84:ec:90:7f:02:ad:e0:47:92:24:19:b6:70:5d:ad:cd: 60:ee:0b:5f:d4:c2:f4:bf:25:8a:54:2b:fc:f6:97:73:1a:43: 77:60:72:ef:09:0e:a4:02:5d:10:53:fa:95:ea:b9:cc:d0:c1: 68:55:9e:84 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbAXqwiG+vDXOWr62N/1R8FnhFTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjYxMzQzMTlaFw0yNjA4MjUxMzQ4MTlaMDMxMTAvBgNV BAMTKDIyREZDOTU3MDM5QUFFN0E3REMxN0JFMkVDN0FGREQxNzU3REZBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnMqSQDkxY40oeMZoDYLj0tZs NwHRGIKHr0rNjiMvFDN1VOocAL/94qjhhAMteO4tkVrqp/eHPlD2ajUmI+/izpSF VaSS7DyuHM8cIxE5SPZhHENP50fuAX1NgHL9+4E7REmC5S2R4oBdlaP0bg2Okr4f HnAqnO3v5YC6Wi6eGNvp5ZCf6+bJkukgrwFV7wPW18RMbQ+Ofq7vnVNfyPH3nHVZ siaCcQ/MZkYAeWilFJAbc7NuPYXY6WIqYonmzI41MeQ4lKsuUHT7VMKYrYZHB25U UQKJedv29cAmkgwWTtqHTFp3Ym+y9t5Ect+G7i8fJy+Lo9JVKv5W0qnIZjqVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQi38lXA5quen3B e+Lsev3RdX36BTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzFR NXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhkaUovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Mx UTV3eWliaWdZcjk5M0ZYUUxxWjZMQ0dLVnVDOURXMlJVblFYSnRIZGlKLzAvMjJE RkM5NTcwMzlBQUU3QTdEQzE3QkUyRUM3QUZERDE3NTdERkEwNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCta7UMA0EAgACMAcDBQAoBH08MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkvDANBgkqhkiG9w0BAQsFAAOCAQEAPVhyU1d4awUVet7B z+loNfojOiwZ0m87/dBYmOPn9Ymoq/buwQhyOh1N2Cue+nKKTc8Fn9j39ChGhVkY /6fm2LaYBNNet0bexbFf73Q/2YoVQiYxJUEyUOQhOun2zHB+0FAlxOonvfzoDc9B wMSzRyQHG9xSfRxueWIqoIWur8sP1l/OuKYDDsmBVNTMgt3yUOivTZFvPw5yKpiE OztVvrQUyRiyJJSqLj4LSLuGfSHpmbL4lV/oP5VFpl16IN7CMVo0epFqzKCE7JB/ Aq3gR5IkGbZwXa3NYO4LX9TC9L8lilQr/PaXcxpDd2By7wkOpAJdEFP6leq5zNDB aFWehA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:30:54 2025 by rpki-client