$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer File: 497BAE4A3C3F168148480552DC251C198E80E35D.cer (raw, json) Hash identifier: 9iA0dMdL4fxtUkpuJ/DSZs2AtNtcB7gzM0axSq7sNGE= Subject key identifier: 49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2745830993B669ED8DBB00FB57B384906F81B9A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft caRepository: rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 23:27:08 +0000 Certificate not after: Wed 21 Oct 2026 23:32:08 +0000 Subordinate resources: AS: 269117 IP: 45.180.52.0/22 IP: 2804:5fb0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:45:83:09:93:b6:69:ed:8d:bb:00:fb:57:b3:84:90:6f:81:b9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 23:27:08 2025 GMT Not After : Oct 21 23:32:08 2026 GMT Subject: CN=497BAE4A3C3F168148480552DC251C198E80E35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:fb:d7:f1:c8:7f:38:61:ce:11:54:74:f1: f9:a6:7c:67:01:11:21:93:5d:0e:b5:9d:61:56:5c: 9e:b8:34:b8:4a:27:1b:64:7e:4e:3b:4c:7d:bb:5a: 7b:68:f4:5f:35:02:04:5a:24:c9:2a:4b:98:c6:01: e7:1d:aa:57:84:16:40:9f:83:53:cf:3b:b8:9d:e8: 9f:25:b8:d8:42:42:bf:d7:3c:18:e2:81:1d:1e:2e: 2c:de:8d:c0:76:9f:bf:f2:3c:b3:cb:c9:25:27:74: f3:13:1d:6a:f7:74:0e:cd:8f:1e:d3:fb:4c:3c:3a: 12:26:a6:49:c9:b1:69:d9:a4:45:f8:26:71:97:7e: 9a:a8:a8:85:57:51:fe:f4:12:8e:eb:f8:9c:20:56: 8b:d9:11:f4:74:a4:47:72:97:5d:ca:2e:f6:47:93: 32:7e:32:62:b6:25:0a:b9:26:f2:39:2f:0b:17:3a: 62:4b:6e:43:7e:09:a2:d0:fb:b9:43:d1:5c:b5:4b: 2d:32:08:e9:f7:04:a7:5f:27:83:9f:24:0d:7b:b6: 21:ad:22:de:5a:fa:9b:06:b0:41:b8:7d:10:7d:7b: c7:d0:a4:63:cd:dc:d7:0a:59:c5:80:d2:12:25:9c: c6:4d:e0:f8:85:17:9e:c8:f6:7d:5c:ca:72:b1:55: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.52.0/22 IPv6: 2804:5fb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269117 Signature Algorithm: sha256WithRSAEncryption d3:59:52:8d:dd:25:67:f6:91:e6:8a:c5:07:67:9a:d5:a8:c1: 94:08:a5:4a:d9:f5:7c:01:fc:70:62:df:fa:ef:0e:f3:f6:0b: 74:f7:e4:2c:19:fe:d2:57:7a:b4:5c:0d:5f:7b:ee:20:31:fc: c1:ef:c5:75:f8:e1:d8:0b:72:39:20:91:2a:09:43:ac:26:3a: 75:3a:4a:75:57:b7:f4:27:94:fc:6d:06:1c:6f:a6:68:b7:5f: af:a6:d0:1b:ae:07:6c:c1:e9:9d:fb:02:e6:41:1e:5c:76:bc: cb:89:d6:74:bb:f7:b1:4e:b6:ec:df:8d:44:3c:4b:c4:61:af: 12:c8:3c:7e:d9:4c:70:8f:58:6d:ff:a6:24:b3:a4:7b:8d:bd: 8e:f3:18:2b:5a:54:51:4e:28:29:92:fd:32:b2:20:3c:50:5d: ec:75:be:f3:c4:41:82:b3:91:48:a4:cf:15:61:e0:79:a2:e8: b8:4a:da:50:50:85:2c:10:10:cd:df:6f:95:80:0d:6b:4e:6f: f7:16:19:d7:8b:39:dc:bf:3d:cb:48:08:62:25:b4:fe:65:cb: 81:6e:ef:07:6d:fa:84:24:5b:d1:66:e6:70:89:fc:d2:6c:4d: 98:e4:1a:36:94:b3:8e:86:fb:79:9e:4b:92:80:fb:0d:93:a3: 87:93:82:c9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJ0WDCZO2ae2NuwD7V7OEkG+BuaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjIyMzI3MDhaFw0yNjEwMjEyMzMyMDhaMDMxMTAvBgNV BAMTKDQ5N0JBRTRBM0MzRjE2ODE0ODQ4MDU1MkRDMjUxQzE5OEU4MEUzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPvvX8ch/OGHOEVR08fmmfGcB ESGTXQ61nWFWXJ64NLhKJxtkfk47TH27Wnto9F81AgRaJMkqS5jGAecdqleEFkCf g1PPO7id6J8luNhCQr/XPBjigR0eLizejcB2n7/yPLPLySUndPMTHWr3dA7Njx7T +0w8OhImpknJsWnZpEX4JnGXfpqoqIVXUf70Eo7r+JwgVovZEfR0pEdyl13KLvZH kzJ+MmK2JQq5JvI5LwsXOmJLbkN+CaLQ+7lD0Vy1Sy0yCOn3BKdfJ4OfJA17tiGt It5a+psGsEG4fRB9e8fQpGPN3NcKWcWA0hIlnMZN4PiFF57I9n1cynKxVeNzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJe65KPD8WgUhI BVLcJRwZjoDjXTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGU2 QWtKSGloSlM5Y21IdXBTZVF5WnpaYXY5aWUxcVRKN0xnOENtTE51eVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRl NkFrSkhpaEpTOWNtSHVwU2VReVp6WmF2OWllMXFUSjdMZzhDbUxOdXlQLzAvNDk3 QkFFNEEzQzNGMTY4MTQ4NDgwNTUyREMyNTFDMTk4RTgwRTM1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbQ0MA0EAgACMAcDBQAoBF+wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbPTANBgkqhkiG9w0BAQsFAAOCAQEA01lSjd0lZ/aR5orF B2ea1ajBlAilStn1fAH8cGLf+u8O8/YLdPfkLBn+0ld6tFwNX3vuIDH8we/Fdfjh 2AtyOSCRKglDrCY6dTpKdVe39CeU/G0GHG+maLdfr6bQG64HbMHpnfsC5kEeXHa8 y4nWdLv3sU627N+NRDxLxGGvEsg8ftlMcI9Ybf+mJLOke429jvMYK1pUUU4oKZL9 MrIgPFBd7HW+88RBgrORSKTPFWHgeaLouEraUFCFLBAQzd9vlYANa05v9xYZ14s5 3L89y0gIYiW0/mXLgW7vB236hCRb0WbmcIn80mxNmOQaNpSzjob7eZ5LkoD7DZOj h5OCyQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:49 2025 by rpki-client