$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42989E8C598C3C118B7B923968905EB4878C7F12.cer File: 42989E8C598C3C118B7B923968905EB4878C7F12.cer (raw, json) Hash identifier: FypRCA7ZvO4yncQ9YFhFqZTBXVAJWV7GI3cktSgmoII= Subject key identifier: 42:98:9E:8C:59:8C:3C:11:8B:7B:92:39:68:90:5E:B4:87:8C:7F:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B758BDB21E70F6F2B37933B0BC3702AF039C734 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.mft caRepository: rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 25 Oct 2025 11:47:03 +0000 Certificate not after: Sat 24 Oct 2026 11:52:03 +0000 Subordinate resources: AS: 268605 IP: 45.164.60.0/22 IP: 2804:53c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:75:8b:db:21:e7:0f:6f:2b:37:93:3b:0b:c3:70:2a:f0:39:c7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 25 11:47:03 2025 GMT Not After : Oct 24 11:52:03 2026 GMT Subject: CN=42989E8C598C3C118B7B923968905EB4878C7F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:43:d2:47:9f:11:fc:8c:09:e1:61:36:cc: dc:41:9c:6f:53:3f:ae:9d:f3:91:62:37:57:d6:da: 3e:86:3d:6a:71:89:c4:98:3b:d7:d4:c0:c5:30:8b: 86:f5:1d:69:eb:18:53:f5:21:22:14:44:b8:6b:d8: 09:03:4a:07:67:34:22:0e:da:a7:76:3b:2f:cd:e8: da:de:20:63:c0:a1:d1:91:09:e7:f8:a0:b2:80:31: 86:36:91:d6:65:29:53:5a:cd:e3:da:ff:96:73:ac: 96:38:c4:8d:d7:26:5c:67:ea:b3:f3:c0:b6:d1:90: d1:3d:4d:fd:48:ad:0f:ca:83:05:88:5b:5e:4c:b2: dd:87:37:bf:71:80:13:86:f0:43:d1:33:dd:6a:bf: b1:ab:bb:c8:1b:6b:0b:0b:47:3b:ff:1b:ae:4d:a0: 50:94:d0:76:93:03:82:b6:56:5c:89:82:a8:00:5a: 11:e6:5b:c0:dc:2f:06:5d:e5:2b:83:cd:24:b2:e2: 43:0b:bb:38:fd:b4:13:99:1b:14:4f:a6:49:54:ee: aa:e8:34:f3:47:bf:8c:6a:93:67:bb:93:5c:51:96: 59:32:43:ef:41:a5:b9:b7:9e:92:ea:b0:8a:af:d7: 39:1c:67:24:04:e3:40:2f:ff:79:cb:ee:4b:f2:32: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:98:9E:8C:59:8C:3C:11:8B:7B:92:39:68:90:5E:B4:87:8C:7F:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.60.0/22 IPv6: 2804:53c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268605 Signature Algorithm: sha256WithRSAEncryption 25:cd:60:65:89:67:d6:67:9d:d5:dc:1a:b5:7e:52:39:5a:58: 42:6d:81:93:3f:9a:9e:f4:e8:0c:a5:42:4f:8b:93:9d:8e:14: 7b:eb:06:e9:d8:3d:76:bd:7e:d5:f6:1e:3d:31:45:ab:98:dd: 3d:72:eb:ea:a5:e5:cc:8d:c1:32:57:c4:0f:90:d0:4e:c9:a2: d7:c7:f4:be:a4:e3:d1:80:cb:a2:9a:5b:c2:f6:bd:a0:1a:6c: bc:4c:5c:38:62:93:19:5d:c4:72:83:32:7e:4b:40:a0:6d:89: 29:11:d8:78:e0:2e:3a:96:f4:12:76:89:4d:75:88:13:9a:22: 26:3a:b2:01:d4:6b:87:dc:04:96:12:7d:3a:db:50:96:4b:ee: 93:0e:9c:39:7d:06:a5:89:05:ea:d3:8d:e9:62:93:00:10:ad: 97:6d:9f:82:7b:df:30:13:e9:a2:89:b0:22:cf:67:27:2b:b9: 8a:fe:e2:8a:c7:4a:7a:2f:90:da:4c:86:d6:4c:59:9e:7a:2d: 43:3d:18:bd:cf:1c:9a:3f:10:7d:e8:fc:c0:cb:40:bc:61:1a: a9:7c:0d:a6:25:c8:41:fb:bd:22:f6:74:02:65:04:b4:1d:09: 3a:9b:2e:02:72:b6:95:52:99:19:4a:36:20:9b:ae:d4:57:dd: ec:b9:4e:19 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUe3WL2yHnD28rN5M7C8NwKvA5xzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjUxMTQ3MDNaFw0yNjEwMjQxMTUyMDNaMDMxMTAvBgNV BAMTKDQyOTg5RThDNTk4QzNDMTE4QjdCOTIzOTY4OTA1RUI0ODc4QzdGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkUPSR58R/IwJ4WE2zNxBnG9T P66d85FiN1fW2j6GPWpxicSYO9fUwMUwi4b1HWnrGFP1ISIURLhr2AkDSgdnNCIO 2qd2Oy/N6NreIGPAodGRCef4oLKAMYY2kdZlKVNazePa/5ZzrJY4xI3XJlxn6rPz wLbRkNE9Tf1IrQ/KgwWIW15Mst2HN79xgBOG8EPRM91qv7Gru8gbawsLRzv/G65N oFCU0HaTA4K2VlyJgqgAWhHmW8DcLwZd5SuDzSSy4kMLuzj9tBOZGxRPpklU7qro NPNHv4xqk2e7k1xRllkyQ+9Bpbm3npLqsIqv1zkcZyQE40Av/3nL7kvyMjPtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCmJ6MWYw8EYt7 kjlokF60h4x/EjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODJj RVVDQkI4Y2tXckVpYm11TGhBajNiRWJSZEpXdlBuRXp6R3BMUzRyM1cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgy Y0VVQ0JCOGNrV3JFaWJtdUxoQWozYkViUmRKV3ZQbkV6ekdwTFM0cjNXLzAvNDI5 ODlFOEM1OThDM0MxMThCN0I5MjM5Njg5MDVFQjQ4NzhDN0YxMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaQ8MA0EAgACMAcDBQAoBFPEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZPTANBgkqhkiG9w0BAQsFAAOCAQEAJc1gZYln1med1dwa tX5SOVpYQm2Bkz+anvToDKVCT4uTnY4Ue+sG6dg9dr1+1fYePTFFq5jdPXLr6qXl zI3BMlfED5DQTsmi18f0vqTj0YDLoppbwva9oBpsvExcOGKTGV3EcoMyfktAoG2J KRHYeOAuOpb0EnaJTXWIE5oiJjqyAdRrh9wElhJ9OttQlkvukw6cOX0GpYkF6tON 6WKTABCtl22fgnvfMBPpoomwIs9nJyu5iv7iisdKei+Q2kyG1kxZnnotQz0Yvc8c mj8Qfej8wMtAvGEaqXwNpiXIQfu9IvZ0AmUEtB0JOpsuAnK2lVKZGUo2IJuu1Ffd 7LlOGQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:19:11 2025 by rpki-client