$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer File: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer (raw, json) Hash identifier: P3SXDGwXFu01Y0dl/Da8axum7b3K2rA92Eqop2gwuFk= Subject key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 61E83FA587F25304866CFEB71CCEB9D37C73CAB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft caRepository: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Oct 2025 21:57:29 +0000 Certificate not after: Mon 19 Oct 2026 22:02:29 +0000 Subordinate resources: AS: 52527 IP: 177.152.80.0/21 IP: 200.150.252.0/22 IP: 2804:dec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e8:3f:a5:87:f2:53:04:86:6c:fe:b7:1c:ce:b9:d3:7c:73:ca:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 21:57:29 2025 GMT Not After : Oct 19 22:02:29 2026 GMT Subject: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:78:44:76:34:e0:7d:9b:8b:97:ed:30:1c: 9c:c1:85:b5:93:db:5b:58:88:59:43:9b:5e:71:4b: c0:61:6b:db:a1:d0:fc:58:c9:67:a9:3b:3b:0c:46: 98:6b:1b:2e:16:eb:40:3e:cc:90:4b:dd:cc:ab:50: 80:1f:2b:a9:e1:92:19:d9:7c:00:81:da:e8:3c:b8: 6a:c2:4b:3a:4c:a7:ae:6f:bf:57:69:e2:85:e2:bf: f1:cf:6b:f5:d6:58:db:50:c4:e2:7c:8e:48:9a:7e: 58:6e:0a:ef:47:d0:0e:03:49:8a:e0:5f:b2:c2:20: 17:a8:17:c8:1d:86:fe:6b:64:6b:f9:22:65:f2:88: 70:70:0a:ce:fb:b6:3b:29:37:e9:de:0a:59:03:e1: bf:f8:51:97:ce:3e:3e:4d:cd:fd:b3:f7:38:7b:b2: bc:b0:eb:18:79:01:ad:be:11:c8:34:2f:bc:9b:8f: cd:e2:28:ea:0a:54:5f:de:1a:ff:ed:d2:9d:fc:f6: a2:8e:7c:94:93:5c:57:3b:7e:59:56:b3:d2:66:aa: ef:1d:32:6e:d1:bd:9a:79:1e:dc:56:b6:1a:1f:22: af:57:79:0e:3b:34:46:de:87:92:8d:67:e8:ca:bd: 2e:e1:6a:54:71:29:f2:21:27:86:67:3e:c6:c4:9c: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.152.80.0/21 200.150.252.0/22 IPv6: 2804:dec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52527 Signature Algorithm: sha256WithRSAEncryption 1d:4d:07:24:4f:b7:25:56:4e:3c:4c:f8:84:76:86:9f:95:53: 46:6c:0a:60:b2:24:28:a1:9a:f6:3f:78:12:f4:30:c8:76:10: 50:30:a5:fc:12:5a:9c:30:de:d1:59:dc:f3:76:be:57:44:64: 9a:30:75:5f:cc:9d:4a:21:ab:80:c0:34:23:10:9b:97:f5:aa: bf:0e:bf:b1:e5:a2:05:07:6b:e2:96:de:96:45:a3:04:61:db: 14:d7:01:39:66:46:3f:f9:78:a9:bd:6c:3b:08:c6:a1:37:76: cc:b1:d5:60:71:1f:55:fd:80:76:35:aa:a9:e0:08:ec:d0:20: 4e:dd:22:49:0e:00:12:f5:8d:b7:44:e6:57:3b:a4:3a:e5:43: da:06:b0:19:a0:56:5d:39:15:3b:4b:b1:86:f3:b6:8f:e1:8d: 91:c0:32:c8:30:95:af:6c:d6:4f:7f:91:ec:57:cf:80:f8:f1: 04:af:f6:c7:fd:69:63:61:c9:54:86:f1:7c:2b:21:27:d7:1d: 04:00:01:3b:cf:8d:62:2b:50:2c:83:b9:9f:ad:d3:12:a0:cb: 22:b9:2e:97:88:c8:87:f8:72:48:c8:6c:c9:c7:34:3f:c8:4e: 1c:e3:eb:fa:2e:82:65:82:34:f5:80:16:78:da:82:a6:97:90: cc:df:3a:9d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYeg/pYfyUwSGbP63HM6503xzyrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjAyMTU3MjlaFw0yNjEwMTkyMjAyMjlaMDMxMTAvBgNV BAMTKDM1NTQ4RUI2QjNFNUIzQTI1NzA2ODBEQkJFREFFMDJENjUzRDA4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85XhEdjTgfZuLl+0wHJzBhbWT 21tYiFlDm15xS8Bha9uh0PxYyWepOzsMRphrGy4W60A+zJBL3cyrUIAfK6nhkhnZ fACB2ug8uGrCSzpMp65vv1dp4oXiv/HPa/XWWNtQxOJ8jkiaflhuCu9H0A4DSYrg X7LCIBeoF8gdhv5rZGv5ImXyiHBwCs77tjspN+neClkD4b/4UZfOPj5Nzf2z9zh7 sryw6xh5Aa2+Ecg0L7ybj83iKOoKVF/eGv/t0p389qKOfJSTXFc7fllWs9Jmqu8d Mm7RvZp5HtxWthofIq9XeQ47NEbeh5KNZ+jKvS7halRxKfIhJ4ZnPsbEnAKzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1VI62s+WzolcG gNu+2uAtZT0IqDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSExY WEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2daSkovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hM WFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAvMzU1 NDhFQjZCM0U1QjNBMjU3MDY4MERCQkVEQUUwMkQ2NTNEMDhBOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsZhQAwQCyJb8MA0EAgACMAcDBQAoBA3sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNLzANBgkqhkiG9w0BAQsFAAOCAQEAHU0HJE+3 JVZOPEz4hHaGn5VTRmwKYLIkKKGa9j94EvQwyHYQUDCl/BJanDDe0Vnc83a+V0Rk mjB1X8ydSiGrgMA0IxCbl/Wqvw6/seWiBQdr4pbelkWjBGHbFNcBOWZGP/l4qb1s OwjGoTd2zLHVYHEfVf2AdjWqqeAI7NAgTt0iSQ4AEvWNt0TmVzukOuVD2gawGaBW XTkVO0uxhvO2j+GNkcAyyDCVr2zWT3+R7FfPgPjxBK/2x/1pY2HJVIbxfCshJ9cd BAABO8+NYitQLIO5n63TEqDLIrkul4jIh/hySMhsycc0P8hOHOPr+i6CZYI09YAW eNqCppeQzN86nQ== -----END CERTIFICATE-----Generated at Mon Nov 3 11:58:23 2025 by rpki-client