$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer File: 25E8B473764AD2BD5079162C0353342232397DC5.cer (raw, json) Hash identifier: zrrq6NJkkUmFAgoV9V76HWgKFOpaH4/U7lwNNVWGKPc= Subject key identifier: 25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7118A8C964625408CDEE085576BD317F58C48587 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft caRepository: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Aug 2026 16:51:21 +0000 Certificate not after: Wed 25 Aug 2027 16:56:21 +0000 Subordinate resources: AS: 273400 IP: 45.172.174.0/23 IP: 2804:8e10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Oct 2026 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:18:a8:c9:64:62:54:08:cd:ee:08:55:76:bd:31:7f:58:c4:85:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 16:51:21 2026 GMT Not After : Aug 25 16:56:21 2027 GMT Subject: CN=25E8B473764AD2BD5079162C0353342232397DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:a5:8b:bb:5f:0b:f1:66:1b:3d:b9:d1:ce: 8c:99:43:ea:4f:fb:ca:4c:70:ea:6c:89:8c:54:e6: 41:96:a7:ff:3e:c1:4e:9d:b5:9e:f5:59:f1:89:e8: 47:9c:31:30:49:71:cb:90:06:5f:ac:a1:7b:5f:89: 63:f8:d1:b0:33:67:83:7c:e7:1d:39:06:8d:90:d5: 6c:0b:6a:34:35:70:fa:14:cd:b1:b1:c3:e4:75:39: fc:df:f1:24:7a:22:11:fe:7c:3d:e8:54:db:91:7a: 38:d2:b2:c8:fb:46:5a:14:11:e7:a2:53:44:4f:29: 4b:31:b9:4c:e3:fc:e3:77:f6:31:02:43:92:b3:60: 9b:cc:cc:a6:03:96:b6:3b:db:56:ea:c0:1f:59:5a: 6d:9e:2a:d2:c5:68:57:39:5e:41:75:ae:17:80:83: df:e2:b7:75:99:86:26:c7:47:06:e1:50:87:30:91: 03:93:a6:60:ef:61:49:2c:9d:5a:77:9f:4b:10:44: 81:56:bb:3e:fc:5b:9a:79:2e:47:8d:37:c3:23:90: e9:f0:c6:d2:4a:1f:ae:f8:80:ce:46:10:45:64:a7: 79:4e:cc:3d:5a:fe:83:c8:97:21:8d:92:f1:d1:ef: e8:99:d5:56:62:a5:a5:3e:47:40:07:da:64:de:ea: 13:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.174.0/23 IPv6: 2804:8e10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273400 Signature Algorithm: sha256WithRSAEncryption 1d:0d:e5:12:f3:f5:ba:e2:bd:fd:fe:81:ff:8f:1d:43:de:86: ec:0d:e2:2d:d1:31:c8:7c:e3:26:db:18:ea:fd:52:b8:71:90: 01:ce:35:a8:36:40:61:ce:4f:0d:fc:ca:38:a9:7c:d5:1e:c4: ea:98:17:98:c9:2e:5d:4f:51:2d:f5:54:e5:8b:db:6f:e2:ae: 96:94:35:c6:4d:87:f2:8d:8d:a4:1a:60:c3:f7:99:89:3a:29: 13:7f:d7:ba:a2:0a:71:94:25:72:97:fb:38:65:df:ca:0d:59: d9:7c:25:03:7f:2b:9f:9a:00:41:35:62:fe:f6:a1:7a:d9:b6: 4b:37:78:4e:e1:95:8f:df:98:5e:af:33:8e:7d:72:f8:85:1f: f5:0d:ad:a9:4c:d9:9b:23:fa:fa:2f:9b:73:f1:7e:7b:04:28: d3:02:4d:28:c3:ae:92:3d:cc:2f:79:db:12:b1:5f:14:d1:40: d8:bd:d3:3b:13:c9:dd:76:fb:4b:a8:c8:4f:0e:be:03:df:6d: 0c:df:1e:2f:79:02:49:07:b4:88:1d:97:2c:ff:1d:f2:69:c0: 59:ec:2f:7d:b2:33:61:89:fe:9f:cb:8a:34:17:7e:08:26:13: 45:10:5a:94:ab:2a:0c:94:96:d9:50:ee:5f:a1:ec:c8:d7:0c: 45:f4:be:79 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcRioyWRiVAjN7ghVdr0xf1jEhYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MjYxNjUxMjFaFw0yNzA4MjUxNjU2MjFaMDMxMTAvBgNV BAMTKDI1RThCNDczNzY0QUQyQkQ1MDc5MTYyQzAzNTMzNDIyMzIzOTdEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPaWLu18L8WYbPbnRzoyZQ+pP +8pMcOpsiYxU5kGWp/8+wU6dtZ71WfGJ6EecMTBJccuQBl+soXtfiWP40bAzZ4N8 5x05Bo2Q1WwLajQ1cPoUzbGxw+R1Ofzf8SR6IhH+fD3oVNuRejjSssj7RloUEeei U0RPKUsxuUzj/ON39jECQ5KzYJvMzKYDlrY721bqwB9ZWm2eKtLFaFc5XkF1rheA g9/it3WZhibHRwbhUIcwkQOTpmDvYUksnVp3n0sQRIFWuz78W5p5LkeNN8MjkOnw xtJKH674gM5GEEVkp3lOzD1a/oPIlyGNkvHR7+iZ1VZipaU+R0AH2mTe6hPRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl6LRzdkrSvVB5 FiwDUzQiMjl9xTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jk N21tS2oxTnRMVkNhUUFMeFVzRUZDaHl1QkxvZ2RpcmhRcTNqR0tRcTEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi ZDdtbUtqMU50TFZDYVFBTHhVc0VGQ2h5dUJMb2dkaXJoUXEzakdLUXExLzAvMjVF OEI0NzM3NjRBRDJCRDUwNzkxNjJDMDM1MzM0MjIzMjM5N0RDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBLayuMA0EAgACMAcDBQAoBI4QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQr+DANBgkqhkiG9w0BAQsFAAOCAQEAHQ3lEvP1uuK9/f6B /48dQ96G7A3iLdExyHzjJtsY6v1SuHGQAc41qDZAYc5PDfzKOKl81R7E6pgXmMku XU9RLfVU5Yvbb+KulpQ1xk2H8o2NpBpgw/eZiTopE3/XuqIKcZQlcpf7OGXfyg1Z 2XwlA38rn5oAQTVi/vahetm2Szd4TuGVj9+YXq8zjn1y+IUf9Q2tqUzZmyP6+i+b c/F+ewQo0wJNKMOukj3ML3nbErFfFNFA2L3TOxPJ3Xb7S6jITw6+A99tDN8eL3kC SQe0iB2XLP8d8mnAWewvfbIzYYn+n8uKNBd+CCYTRRBalKsqDJSW2VDuX6HsyNcM RfS+eQ== -----END CERTIFICATE-----Generated at Thu Oct 8 16:16:36 2026 by rpki-client