$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer File: 2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer (raw, json) Hash identifier: 3R+FtNfaXrVzPkv1+4SyNgdPnBqmSrotZH/7cmlaVtc= Subject key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 641A74877C71804AAF75560AF648E4CA2DC49CC3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft caRepository: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 16:46:13 +0000 Certificate not after: Mon 14 Sep 2026 16:51:13 +0000 Subordinate resources: AS: 263518 IP: 168.197.84.0/22 IP: 191.243.212.0/22 IP: 2804:1324::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1a:74:87:7c:71:80:4a:af:75:56:0a:f6:48:e4:ca:2d:c4:9c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 16:46:13 2025 GMT Not After : Sep 14 16:51:13 2026 GMT Subject: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:22:52:a7:48:b9:a0:b7:9c:7e:ff:bb:34: 1d:4d:56:c2:9a:4d:85:dc:be:90:80:79:7e:28:7c: bc:43:e4:2b:88:01:eb:89:79:3b:61:72:02:a1:ac: 6e:72:bb:d1:f1:d6:39:38:d9:37:d9:1c:1d:3c:bc: 8a:14:54:73:57:0d:7d:2e:63:93:16:64:0c:8c:d2: b8:46:fb:49:69:a2:ed:58:63:c2:39:04:84:46:a9: 42:93:9d:50:bd:fe:e4:9b:d7:d9:5e:06:ec:df:6a: 28:4d:87:56:99:0e:38:f6:07:7d:b1:df:ed:4a:fc: 6b:cd:45:70:4e:0b:85:76:73:be:d5:db:a6:0a:ea: 66:42:46:31:9c:39:63:33:e5:2b:9d:37:99:ff:e4: 9e:15:38:ab:a1:c7:1f:93:ac:29:82:a4:ab:e3:80: be:2a:e6:16:25:5a:99:20:67:c3:5d:7a:4f:02:12: 62:c1:27:13:e2:be:a7:34:ea:79:ab:48:e0:ca:6b: 67:86:a9:73:66:b0:0f:01:ea:cc:73:3a:28:0f:b3: b9:18:fc:6a:1e:c4:89:50:52:d2:d9:5d:a6:d1:ae: 03:f5:ba:dd:78:06:31:de:bc:db:98:25:47:13:69: 7c:02:1e:53:09:06:20:a2:86:90:31:6d:1a:37:77: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.84.0/22 191.243.212.0/22 IPv6: 2804:1324::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263518 Signature Algorithm: sha256WithRSAEncryption 34:cb:e1:42:6c:3f:a0:96:83:b8:60:8f:e2:99:7e:ad:f4:98: 6d:f2:4f:d3:d6:90:4a:07:c2:d5:6b:ca:b5:5b:37:ad:ac:fe: 52:f9:1f:01:bb:36:d7:46:4b:3c:7a:1a:f0:5c:32:31:9a:03: 60:a1:0e:f6:34:4e:bd:d5:b1:e2:a6:23:88:22:b5:f7:e4:09: bf:73:a8:4d:70:ae:cd:f6:a5:9e:d4:ad:c3:1e:86:9c:b2:3a: 4a:0a:28:9c:d7:60:31:f0:40:d3:94:36:a8:d7:16:55:6a:69: c0:86:be:a0:d0:06:e1:aa:74:a1:29:75:a9:49:04:dc:5b:19: da:5a:e7:f8:05:69:45:74:87:c5:0e:75:fd:56:6d:f2:b3:79: 17:f5:5e:b4:b7:0b:f9:c9:fc:e6:38:ee:95:75:10:17:46:b0: 34:6d:4f:0f:80:10:cb:19:b6:ae:84:80:51:07:0b:ad:e9:e3: fb:84:b2:19:64:30:8b:d9:02:6f:6b:f6:10:60:2c:17:0c:35: 3a:15:f6:55:66:c9:d9:ce:4e:22:ae:4b:8c:d6:48:5c:b6:5e: cd:d9:3b:89:ed:19:d9:19:7b:8f:b1:63:c9:82:b7:90:23:d9: 7d:fb:03:49:a1:51:0c:ca:9d:8e:c6:15:69:2c:cd:27:3e:2c: 4f:1c:29:bc -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZBp0h3xxgEqvdVYK9kjkyi3EnMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTUxNjQ2MTNaFw0yNjA5MTQxNjUxMTNaMDMxMTAvBgNV BAMTKDJGNDkxNkMwRUM1RjFFNkJGRjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdSJSp0i5oLecfv+7NB1NVsKa TYXcvpCAeX4ofLxD5CuIAeuJeTthcgKhrG5yu9Hx1jk42TfZHB08vIoUVHNXDX0u Y5MWZAyM0rhG+0lpou1YY8I5BIRGqUKTnVC9/uSb19leBuzfaihNh1aZDjj2B32x 3+1K/GvNRXBOC4V2c77V26YK6mZCRjGcOWMz5SudN5n/5J4VOKuhxx+TrCmCpKvj gL4q5hYlWpkgZ8Ndek8CEmLBJxPivqc06nmrSODKa2eGqXNmsA8B6sxzOigPs7kY /GoexIlQUtLZXabRrgP1ut14BjHevNuYJUcTaXwCHlMJBiCihpAxbRo3dxHrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvSRbA7F8ea/8a ZNyWBEVHOHdeJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG05 OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZpVG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht OTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAvMkY0 OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDczODc3NUUyNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqMVUAwQCv/PUMA0EAgACMAcDBQAoBBMkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFXjANBgkqhkiG9w0BAQsFAAOCAQEANMvhQmw/ oJaDuGCP4pl+rfSYbfJP09aQSgfC1WvKtVs3raz+UvkfAbs210ZLPHoa8FwyMZoD YKEO9jROvdWx4qYjiCK19+QJv3OoTXCuzfalntStwx6GnLI6SgoonNdgMfBA05Q2 qNcWVWppwIa+oNAG4ap0oSl1qUkE3FsZ2lrn+AVpRXSHxQ51/VZt8rN5F/VetLcL +cn85jjulXUQF0awNG1PD4AQyxm2roSAUQcLrenj+4SyGWQwi9kCb2v2EGAsFww1 OhX2VWbJ2c5OIq5LjNZIXLZezdk7ie0Z2Rl7j7FjyYK3kCPZffsDSaFRDMqdjsYV aSzNJz4sTxwpvA== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:42 2025 by rpki-client