$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer File: 2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer (raw, json) Hash identifier: gL3wQd22mt1DShA3tYX4JjgUVV9B2MRtCiolbVWW7c0= Subject key identifier: 2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59709582649097DBE162043E34EA5901586546A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft caRepository: rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 28 Oct 2025 12:05:12 +0000 Certificate not after: Tue 27 Oct 2026 12:10:12 +0000 Subordinate resources: AS: 265408 IP: 168.195.44.0/22 IP: 2804:33a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:95:82:64:90:97:db:e1:62:04:3e:34:ea:59:01:58:65:46:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 28 12:05:12 2025 GMT Not After : Oct 27 12:10:12 2026 GMT Subject: CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:3e:eb:dc:b2:7c:fc:ad:ac:93:75:68:e6: 5c:f9:b0:77:08:52:42:db:53:36:5a:25:f1:0e:48: 4e:f5:1a:39:7a:87:f8:a2:2b:0d:98:ef:9e:12:33: d1:b8:ee:3d:1e:e5:0c:43:a7:0c:29:22:8f:62:24: 8b:3f:a3:d7:29:69:25:ab:9e:cb:c0:06:89:8c:c5: a5:6f:57:30:3b:c7:f8:19:5b:50:59:7a:16:a8:61: 0a:0d:55:fe:14:f5:12:ed:90:f9:61:32:df:ee:18: 41:b4:dc:a2:a4:a4:5f:fa:03:f4:93:4e:85:28:99: 38:9d:f3:d2:62:18:ce:46:53:58:1d:28:81:08:01: 71:73:ec:59:ee:45:83:dc:15:82:a0:29:83:ad:f8: 4a:10:4b:ad:a7:c4:dd:9c:6d:7e:ff:65:6e:0a:e2: 49:98:ce:16:e4:37:7d:a1:a4:1b:04:ef:e4:89:0f: 62:2a:9e:25:75:6b:80:9a:53:87:d3:37:6d:49:c8: ac:94:cd:fa:93:36:9e:5d:7e:83:17:a4:ed:9c:f2: 90:10:77:bc:bd:11:2f:71:7e:6e:2d:bf:56:71:cf: e8:33:74:e4:89:b9:a7:5a:14:49:ad:c5:e0:84:df: 4a:1e:81:d4:46:91:38:77:0c:0e:bc:ae:db:b7:2f: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.44.0/22 IPv6: 2804:33a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265408 Signature Algorithm: sha256WithRSAEncryption 0c:82:60:22:4d:fd:72:e3:ea:79:52:eb:b3:33:79:a2:cf:17: a8:df:c4:c3:db:f8:3a:ff:e5:57:fa:d2:91:56:6b:ca:de:1f: b1:2a:cc:b7:df:f6:e7:0c:06:a6:c6:6e:c4:53:4d:fc:47:db: 96:52:e3:5a:29:bf:46:a2:6a:fe:17:a3:c7:9f:eb:e0:38:d3: 03:8c:ea:42:91:11:be:6a:ea:87:6e:66:57:92:04:69:7a:96: 28:93:fe:5d:75:48:ce:c9:11:bd:1a:44:83:57:ed:96:a3:b0: 72:2b:29:12:0c:2d:8c:af:ca:4c:cd:83:32:62:cf:b5:b5:f6: c0:18:bc:66:49:81:63:cc:69:59:11:19:19:32:7c:8c:ac:89: 05:de:48:2a:da:a7:db:2c:82:71:e7:67:b4:6a:17:e5:09:ca: 6c:97:f6:02:ea:ed:f0:3e:c1:e8:de:f6:12:fa:b1:fe:f0:81: 48:4b:2f:c6:f1:c7:e8:70:d4:c3:b2:61:ef:e0:32:57:e7:b8: 31:bc:4c:a1:71:37:2a:07:95:71:ad:92:ad:8e:3c:c6:bd:2d: 93:22:da:a8:2e:4a:ea:ae:84:d7:64:1d:95:a3:4c:88:48:ec: 09:19:b1:50:e2:cc:5d:9e:ff:3a:a7:f3:b4:78:b2:9c:59:7d: 86:1c:35:00 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWXCVgmSQl9vhYgQ+NOpZAVhlRqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjgxMjA1MTJaFw0yNjEwMjcxMjEwMTJaMDMxMTAvBgNV BAMTKDJGNkUzQTg3OEExMjVCNzRCQjI5MkNFNTQxMkE1MjNGNEIxRENCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCScj7r3LJ8/K2sk3Vo5lz5sHcI UkLbUzZaJfEOSE71Gjl6h/iiKw2Y754SM9G47j0e5QxDpwwpIo9iJIs/o9cpaSWr nsvABomMxaVvVzA7x/gZW1BZehaoYQoNVf4U9RLtkPlhMt/uGEG03KKkpF/6A/ST ToUomTid89JiGM5GU1gdKIEIAXFz7FnuRYPcFYKgKYOt+EoQS62nxN2cbX7/ZW4K 4kmYzhbkN32hpBsE7+SJD2IqniV1a4CaU4fTN21JyKyUzfqTNp5dfoMXpO2c8pAQ d7y9ES9xfm4tv1Zxz+gzdOSJuadaFEmtxeCE30oegdRGkTh3DA68rtu3L7HNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvbjqHihJbdLsp LOVBKlI/Sx3LrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWtu SDFBZXFkWFQ2R0xtdUpzWnNNcGJKUktXZWtEZUNTcmNYc3lMUERqc2YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlr bkgxQWVxZFhUNkdMbXVKc1pzTXBiSlJLV2VrRGVDU3JjWHN5TFBEanNmLzAvMkY2 RTNBODc4QTEyNUI3NEJCMjkyQ0U1NDEyQTUyM0Y0QjFEQ0JBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMMsMA0EAgACMAcDBQAoBDOgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMwDANBgkqhkiG9w0BAQsFAAOCAQEADIJgIk39cuPqeVLr szN5os8XqN/Ew9v4Ov/lV/rSkVZryt4fsSrMt9/25wwGpsZuxFNN/EfbllLjWim/ RqJq/hejx5/r4DjTA4zqQpERvmrqh25mV5IEaXqWKJP+XXVIzskRvRpEg1ftlqOw cispEgwtjK/KTM2DMmLPtbX2wBi8ZkmBY8xpWREZGTJ8jKyJBd5IKtqn2yyCcedn tGoX5QnKbJf2Aurt8D7B6N72Evqx/vCBSEsvxvHH6HDUw7Jh7+AyV+e4MbxMoXE3 KgeVca2SrY48xr0tkyLaqC5K6q6E12QdlaNMiEjsCRmxUOLMXZ7/OqfztHiynFl9 hhw1AA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:21:00 2025 by rpki-client