$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer File: 568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer (raw, json) Hash identifier: 2up+QQsb4QXPBL+ROI0j4eIB9oDe9Wv4Ii0l6vijJ8A= Subject key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1EF8FC3803565A45076B27AC67AA33FD9E9F1C81 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft caRepository: rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 04:56:34 +0000 Certificate not after: Wed 06 May 2026 05:01:34 +0000 Subordinate resources: AS: 262972 IP: 179.124.248.0/21 IP: 186.227.152.0/22 IP: 2804:ec0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f8:fc:38:03:56:5a:45:07:6b:27:ac:67:aa:33:fd:9e:9f:1c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 04:56:34 2025 GMT Not After : May 6 05:01:34 2026 GMT Subject: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:32:6a:35:00:c7:99:ed:c3:e3:6a:c2:82: 2e:9f:30:7f:04:b9:80:57:97:a9:28:27:16:93:ea: e8:d9:55:1c:7f:54:82:00:93:dd:19:f3:a3:c4:f7: 24:68:f0:f4:82:4c:45:8d:f0:a3:80:6a:e2:13:8d: fc:d1:32:de:d0:77:34:a7:aa:c5:37:64:45:5b:c0: 74:3b:14:c8:97:a9:3f:a2:17:d4:67:b9:ed:4b:cd: 51:0a:29:cc:db:21:e3:d0:0b:da:79:a3:be:73:00: 96:c1:1e:94:31:86:5d:67:48:85:d0:49:86:10:2a: 28:25:0b:19:39:87:06:b0:d4:59:5c:1b:1b:2e:07: 0c:ea:fd:ca:af:85:45:e2:0e:6e:eb:53:74:b6:d8: 5b:37:40:e3:1f:8d:44:4e:30:6a:0c:30:b1:50:63: 7d:4b:71:a5:04:94:24:42:c7:31:82:d1:18:d8:59: d5:69:7d:54:45:34:12:f8:a2:92:99:49:29:df:cb: c9:f9:16:2f:83:cb:b0:ef:f8:f1:c1:ed:a3:34:c6: 2b:63:16:b6:8b:78:e4:49:34:18:fe:eb:55:2e:16: d2:7f:cb:90:26:56:73:4d:f9:4f:69:6a:59:15:0b: 3b:bb:ad:82:ba:5c:c2:3b:78:2c:a7:fc:05:48:02: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.124.248.0/21 186.227.152.0/22 IPv6: 2804:ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262972 Signature Algorithm: sha256WithRSAEncryption 6e:7e:c0:70:fa:4b:1b:6d:0b:71:f7:5e:b0:9e:1f:7f:90:1e: 45:fe:4e:5d:38:18:94:b3:ad:9c:ad:13:c1:35:77:fc:14:33: 18:79:0b:09:09:87:ec:47:90:fd:8e:92:ef:e5:22:21:8a:c1: 26:72:10:f7:81:5e:57:ca:46:15:cf:af:b9:4f:a6:09:f6:42: f4:f1:19:71:95:08:0b:33:52:24:ac:ac:a3:df:a2:8b:a0:9a: 01:af:ce:d8:2b:5a:dd:e5:3b:95:a0:61:38:3f:5b:f0:a7:a5: 47:71:a6:6e:27:6f:09:7c:b8:aa:ea:f3:88:dc:a6:82:a1:8c: ec:10:41:f2:0d:6b:9e:99:47:1a:57:dc:49:d1:52:a0:71:f0: 92:80:03:3c:fb:41:f6:bc:ef:3c:eb:a5:51:8f:8c:d8:47:79: 5b:14:1d:fa:41:ab:21:9a:74:a5:40:3f:95:18:f2:ef:da:de: 95:ec:23:04:c0:e2:6e:f8:ae:64:b9:38:4a:b0:68:be:07:8b: 71:86:e0:e7:bc:f6:5d:d9:7e:c8:4d:97:66:27:c9:d0:e0:b4: 01:7a:66:70:d4:78:58:e2:69:78:b0:55:c0:8d:ff:76:d3:be: 38:0b:6d:98:c2:4b:5d:8b:61:ec:90:95:6e:62:cb:b8:52:3c: 46:b5:73:22 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHvj8OANWWkUHayesZ6oz/Z6fHIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcwNDU2MzRaFw0yNjA1MDYwNTAxMzRaMDMxMTAvBgNV BAMTKDU2ODE4NTMyMEJCQkU1NEY5RTRCMkVCMDZBNURCMzM0QjFEQTY4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQejJqNQDHme3D42rCgi6fMH8E uYBXl6koJxaT6ujZVRx/VIIAk90Z86PE9yRo8PSCTEWN8KOAauITjfzRMt7QdzSn qsU3ZEVbwHQ7FMiXqT+iF9Rnue1LzVEKKczbIePQC9p5o75zAJbBHpQxhl1nSIXQ SYYQKiglCxk5hwaw1FlcGxsuBwzq/cqvhUXiDm7rU3S22Fs3QOMfjUROMGoMMLFQ Y31LcaUElCRCxzGC0RjYWdVpfVRFNBL4opKZSSnfy8n5Fi+Dy7Dv+PHB7aM0xitj FraLeORJNBj+61UuFtJ/y5AmVnNN+U9palkVCzu7rYK6XMI7eCyn/AVIAm05AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWgYUyC7vlT55L LrBqXbM0sdpoiTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHVU aDZOb3Zub1E5OTV4akVFMVROcGJVcWRmRzdQV2l5allQZU42bmJ1Rm4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h1 VGg2Tm92bm9ROTk1eGpFRTFUTnBiVXFkZkc3UFdpeWpZUGVONm5idUZuLzAvNTY4 MTg1MzIwQkJCRTU0RjlFNEIyRUIwNkE1REIzMzRCMURBNjg4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDs3z4AwQCuuOYMA0EAgACMAcDBQAoBA7AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDPDANBgkqhkiG9w0BAQsFAAOCAQEAbn7AcPpL G20LcfdesJ4ff5AeRf5OXTgYlLOtnK0TwTV3/BQzGHkLCQmH7EeQ/Y6S7+UiIYrB JnIQ94FeV8pGFc+vuU+mCfZC9PEZcZUICzNSJKyso9+ii6CaAa/O2Cta3eU7laBh OD9b8KelR3GmbidvCXy4qurziNymgqGM7BBB8g1rnplHGlfcSdFSoHHwkoADPPtB 9rzvPOulUY+M2Ed5WxQd+kGrIZp0pUA/lRjy79relewjBMDibviuZLk4SrBovgeL cYbg57z2Xdl+yE2XZifJ0OC0AXpmcNR4WOJpeLBVwI3/dtO+OAttmMJLXYth7JCV bmLLuFI8RrVzIg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:18:52 2025 by rpki-client