$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer File: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer (raw, json) Hash identifier: 5ju3eC2hjWQmaPX2TgNxrxpXODBgTPDHMm5i27A+t4c= Subject key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 163A1295F22369597690B270DD2FD64FFF0882E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft caRepository: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 21:46:12 +0000 Certificate not after: Thu 13 Aug 2026 21:51:12 +0000 Subordinate resources: AS: 266169 IP: 45.6.188.0/22 IP: 45.233.128.0/22 IP: 2804:3bc4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3a:12:95:f2:23:69:59:76:90:b2:70:dd:2f:d6:4f:ff:08:82:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 14 21:46:12 2025 GMT Not After : Aug 13 21:51:12 2026 GMT Subject: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:fe:3b:de:05:30:73:58:a1:d7:06:3c:2d: a8:58:68:88:b6:79:5c:4f:09:da:b7:50:f7:1a:8e: 30:dc:80:e1:ce:27:09:cc:68:21:c2:49:f8:88:be: 7b:96:62:1f:98:e4:1b:7d:d8:34:a8:c6:c4:f9:7a: 18:01:7f:1e:9d:11:7d:1a:01:d7:23:dc:60:e4:49: 93:10:90:44:51:76:a5:e1:0d:25:aa:64:46:9e:0b: 89:fa:85:91:d3:35:00:46:9c:35:ad:3d:a4:59:cf: 7a:87:6c:7d:d4:39:9e:9d:90:01:d9:31:e6:44:92: ba:a1:25:aa:3e:11:25:1c:f3:2e:4d:b0:66:7c:d2: 39:da:90:99:c1:32:9a:a6:61:af:53:91:20:5c:dd: fa:39:37:50:0a:01:53:fe:8a:07:21:62:00:2a:0a: 29:29:61:fc:14:47:1f:8e:6f:0f:c4:5a:02:ac:8b: b8:01:cd:4e:96:ac:dd:35:0b:d9:57:3f:99:9a:59: 90:a2:e4:2a:8d:1f:9f:c3:b4:d7:74:2f:3a:56:30: b1:c7:c9:1c:11:a1:65:47:8c:e6:38:95:e6:55:ae: 31:8f:86:1c:ac:62:14:bb:b9:52:8b:7c:97:31:0b: f5:66:a7:82:ee:6c:9d:32:de:d4:2b:7e:7e:cb:fc: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.188.0/22 45.233.128.0/22 IPv6: 2804:3bc4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266169 Signature Algorithm: sha256WithRSAEncryption a1:c8:ea:cc:5a:dd:8f:35:ff:f2:55:87:e5:e2:8d:d1:15:01: 5a:d5:fe:05:31:04:b2:ba:3d:52:1c:72:5e:ca:06:6d:9b:e3: ed:3c:1c:af:fb:ec:50:39:02:69:01:61:f0:19:c4:6e:c4:75: cb:90:e7:6a:35:4f:70:b4:6d:e3:68:05:57:80:97:23:04:7b: 1c:e6:2f:9f:2a:57:a1:6e:24:09:ec:3c:48:d8:f7:07:03:35: 41:ad:da:c1:fe:23:b3:01:04:ec:4c:1e:af:ea:23:29:61:dd: 3a:f3:9c:16:d9:36:3d:84:99:62:93:f4:f4:af:81:76:0c:0e: 60:ac:8f:e2:35:85:86:6f:95:d0:29:dd:c4:6d:dd:fd:88:d9: a9:80:8c:93:ca:c1:21:27:9c:af:29:81:cc:4a:aa:8e:27:09: 5d:b4:af:4e:e2:ef:47:5d:6a:10:f5:6f:e8:12:c7:3e:e0:6f: 35:2f:d4:3c:d8:58:43:b2:c1:6f:bb:44:5b:d8:dc:90:a2:ff: 91:90:6f:40:97:b6:8d:51:27:b8:59:30:62:f4:82:72:12:bc: 4f:43:e2:bc:8b:14:05:25:d5:02:dc:71:85:87:42:d2:9f:89: 8d:4b:eb:4c:d9:65:61:e5:c0:6e:9c:78:39:24:4a:34:4a:4b: 55:6c:5c:10 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFjoSlfIjaVl2kLJw3S/WT/8IguYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MTQyMTQ2MTJaFw0yNjA4MTMyMTUxMTJaMDMxMTAvBgNV BAMTKDJBMDVBRjJGQTNCQUJFRUFFREJFRTI2M0MyNEY3RkMxREFDMzZDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFf473gUwc1ih1wY8LahYaIi2 eVxPCdq3UPcajjDcgOHOJwnMaCHCSfiIvnuWYh+Y5Bt92DSoxsT5ehgBfx6dEX0a Adcj3GDkSZMQkERRdqXhDSWqZEaeC4n6hZHTNQBGnDWtPaRZz3qHbH3UOZ6dkAHZ MeZEkrqhJao+ESUc8y5NsGZ80jnakJnBMpqmYa9TkSBc3fo5N1AKAVP+igchYgAq CikpYfwURx+Obw/EWgKsi7gBzU6WrN01C9lXP5maWZCi5CqNH5/DtNd0LzpWMLHH yRwRoWVHjOY4leZVrjGPhhysYhS7uVKLfJcxC/Vmp4LubJ0y3tQrfn7L/LujAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqBa8vo7q+6u2+ 4mPCT3/B2sNsGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzNz RlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNxMW0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcz c0ZWUjdYUUNnOHMzTHdZZ0FnWTNBQ21ya0hadEZhTkhLYVVvZGpzcTFtLzEvMkEw NUFGMkZBM0JBQkVFQUVEQkVFMjYzQzI0RjdGQzFEQUMzNkMxOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQa8AwQCLemAMA0EAgACMAcDBQAoBDvEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPuTANBgkqhkiG9w0BAQsFAAOCAQEAocjqzFrd jzX/8lWH5eKN0RUBWtX+BTEEsro9UhxyXsoGbZvj7Twcr/vsUDkCaQFh8BnEbsR1 y5DnajVPcLRt42gFV4CXIwR7HOYvnypXoW4kCew8SNj3BwM1Qa3awf4jswEE7Ewe r+ojKWHdOvOcFtk2PYSZYpP09K+BdgwOYKyP4jWFhm+V0CndxG3d/YjZqYCMk8rB ISecrymBzEqqjicJXbSvTuLvR11qEPVv6BLHPuBvNS/UPNhYQ7LBb7tEW9jckKL/ kZBvQJe2jVEnuFkwYvSCchK8T0PivIsUBSXVAtxxhYdC0p+JjUvrTNllYeXAbpx4 OSRKNEpLVWxcEA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:13 2025 by rpki-client