$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3645559635FEB57B094C7B62BAA7BE7350BDE693.cer File: 3645559635FEB57B094C7B62BAA7BE7350BDE693.cer (raw, json) Hash identifier: ut0uDR9IzZ2O3BLCVJ4hn33V1WNVLlB2JYL2Nlr9z0U= Subject key identifier: 36:45:55:96:35:FE:B5:7B:09:4C:7B:62:BA:A7:BE:73:50:BD:E6:93 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3201B22C8B42F293CC4A22483ECD3026EE5BD993 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.mft caRepository: rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 12:36:36 +0000 Certificate not after: Mon 21 Sep 2026 12:41:36 +0000 Subordinate resources: AS: 267086 IP: 45.224.185.0/24 IP: 2801:80:22e0::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:b2:2c:8b:42:f2:93:cc:4a:22:48:3e:cd:30:26:ee:5b:d9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 22 12:36:36 2025 GMT Not After : Sep 21 12:41:36 2026 GMT Subject: CN=3645559635FEB57B094C7B62BAA7BE7350BDE693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:92:59:67:c9:24:90:32:2c:56:f6:60:77: fe:8e:45:08:f1:71:d0:32:69:81:b8:40:5d:ee:f2: ae:87:62:bc:d6:63:8a:91:f1:76:45:40:d2:80:44: 62:5d:a2:97:94:2c:99:81:fd:89:9f:11:16:18:bf: 69:3a:f8:a8:dc:dc:75:76:9f:d1:32:0a:4d:c4:45: b6:23:30:f7:72:83:ee:1a:04:03:48:55:bd:98:2a: b4:cd:43:27:0a:cf:e1:06:61:67:55:46:04:e5:eb: 87:54:65:3e:0d:52:ca:44:d0:fa:1f:5e:53:81:b0: 06:f3:f7:d9:b6:90:be:8d:2c:fd:a4:28:fb:2a:29: d0:fc:57:f0:fe:30:c5:b3:cd:3c:86:90:14:b7:2e: 38:c3:61:fa:5e:22:1f:d1:7a:93:5a:89:21:b9:bd: 69:a8:e6:7c:73:58:4f:0a:89:60:16:25:0b:11:61: dd:ad:29:01:80:00:fa:28:18:1f:d7:eb:6c:83:cf: 21:9a:50:cc:79:26:9b:56:cb:9b:26:ea:30:98:75: 23:5e:70:ad:94:c3:19:63:4c:dd:ff:4e:fe:81:cc: f0:e5:3b:76:9b:3d:e6:65:0a:fb:7e:d3:60:64:15: ff:90:cb:5c:9e:a4:1c:dc:c3:5c:90:6e:4a:d4:b8: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:45:55:96:35:FE:B5:7B:09:4C:7B:62:BA:A7:BE:73:50:BD:E6:93 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.185.0/24 IPv6: 2801:80:22e0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267086 Signature Algorithm: sha256WithRSAEncryption ad:6f:6b:52:cc:7d:26:52:db:b3:aa:f6:60:18:f2:e9:5f:45: a3:67:58:6c:78:23:2e:17:23:39:a6:03:85:d7:c7:c7:b3:32: 77:80:05:0e:47:11:43:fe:54:58:e6:80:a2:39:4d:52:12:a0: 80:7b:f6:5a:46:14:e2:84:17:0f:15:8e:a8:0a:a9:cd:05:b3: 96:fe:de:ff:ee:e7:b7:dd:67:6a:40:07:b8:bc:d8:44:c6:7b: 6b:de:9a:7f:97:26:72:3f:74:2b:ba:a1:02:07:ee:82:ea:89: fd:00:1e:e9:51:40:c0:7b:41:03:14:ef:d1:ec:71:04:77:55: 0b:e2:6b:76:12:73:69:5a:3e:65:66:ef:9d:36:60:3d:94:7e: a2:00:df:57:9a:b5:a0:7b:d9:ae:11:4d:50:45:63:c6:92:34: a3:e0:39:08:cc:c5:eb:0a:97:02:50:f9:e3:bc:d1:48:3c:d5: 92:01:bf:6f:5e:25:db:ce:c8:32:f6:8a:1a:7e:0a:99:5b:ef: dd:46:5f:87:c1:70:54:57:b3:ff:fd:e1:18:85:80:1a:b4:22: 25:0d:fd:f9:44:8c:b1:9b:90:cd:08:9a:54:e6:9c:48:f7:b3: d8:50:49:ac:0b:10:f9:c0:93:b5:b4:a3:f7:76:86:0d:d1:c6: 04:b5:81:ca -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUMgGyLItC8pPMSiJIPs0wJu5b2ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjIxMjM2MzZaFw0yNjA5MjExMjQxMzZaMDMxMTAvBgNV BAMTKDM2NDU1NTk2MzVGRUI1N0IwOTRDN0I2MkJBQTdCRTczNTBCREU2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqJJZZ8kkkDIsVvZgd/6ORQjx cdAyaYG4QF3u8q6HYrzWY4qR8XZFQNKARGJdopeULJmB/YmfERYYv2k6+Kjc3HV2 n9EyCk3ERbYjMPdyg+4aBANIVb2YKrTNQycKz+EGYWdVRgTl64dUZT4NUspE0Pof XlOBsAbz99m2kL6NLP2kKPsqKdD8V/D+MMWzzTyGkBS3LjjDYfpeIh/RepNaiSG5 vWmo5nxzWE8KiWAWJQsRYd2tKQGAAPooGB/X62yDzyGaUMx5JptWy5sm6jCYdSNe cK2UwxljTN3/Tv6BzPDlO3abPeZlCvt+02BkFf+Qy1yepBzcw1yQbkrUuGHZAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2RVWWNf61ewlM e2K6p75zUL3mkzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjdB QmhYQ1k4bnBrSzlqU0VzaEhabXZnUzhQTkQ3UzlyTUpzOWlteFdBQ04vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y3 QUJoWENZOG5wa0s5alNFc2hIWm12Z1M4UE5EN1M5ck1KczlpbXhXQUNOLzAvMzY0 NTU1OTYzNUZFQjU3QjA5NEM3QjYyQkFBN0JFNzM1MEJERTY5My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQALeC5MA8EAgACMAkDBwAoAQCAIuAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBBNOMA0GCSqGSIb3DQEBCwUAA4IBAQCtb2tSzH0mUtuz qvZgGPLpX0WjZ1hseCMuFyM5pgOF18fHszJ3gAUORxFD/lRY5oCiOU1SEqCAe/Za RhTihBcPFY6oCqnNBbOW/t7/7ue33WdqQAe4vNhExntr3pp/lyZyP3QruqECB+6C 6on9AB7pUUDAe0EDFO/R7HEEd1UL4mt2EnNpWj5lZu+dNmA9lH6iAN9XmrWge9mu EU1QRWPGkjSj4DkIzMXrCpcCUPnjvNFIPNWSAb9vXiXbzsgy9ooafgqZW+/dRl+H wXBUV7P//eEYhYAatCIlDf35RIyxm5DNCJpU5pxI97PYUEmsCxD5wJO1tKP3doYN 0cYEtYHK -----END CERTIFICATE-----Generated at Mon Nov 3 05:19:21 2025 by rpki-client