$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer File: 578E16FCC816747804043A0671C73FD1B9B9A6A5.cer (raw, json) Hash identifier: 2+GxFrqCxQl9b19BPLqh3sX/TM6ACPXblVFTSHMFnkM= Subject key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09F2A8DF5102DF6F9A4975822E821BFAE534B4C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft caRepository: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Oct 2025 17:54:29 +0000 Certificate not after: Wed 30 Sep 2026 17:59:29 +0000 Subordinate resources: AS: 263940 IP: 138.185.252.0/22 IP: 2804:2818::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f2:a8:df:51:02:df:6f:9a:49:75:82:2e:82:1b:fa:e5:34:b4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 1 17:54:29 2025 GMT Not After : Sep 30 17:59:29 2026 GMT Subject: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:44:d3:c1:dc:74:c4:b1:75:a4:30:91:77: f7:2a:ac:da:5f:09:0e:35:d8:60:24:5d:92:cd:b7: 80:3e:ef:fe:d8:b7:03:9d:92:e0:6c:8f:c0:c1:fd: cd:13:7b:0d:7b:22:5f:5d:fc:c2:f7:54:c2:81:96: a9:82:08:63:7c:6f:ac:4f:91:7c:9a:54:9c:b9:9d: bf:56:c7:ea:24:d1:17:41:7a:20:3f:88:80:16:db: 2e:bf:1e:14:08:9b:c9:70:2c:10:da:33:08:78:7c: b0:07:78:e8:37:61:87:a4:1d:35:15:ff:c4:cd:2c: ba:61:da:01:87:5b:d4:69:71:b6:87:1b:5e:21:03: 83:23:e7:ec:3f:53:b2:54:e2:62:d9:5f:c4:73:fc: 1e:7c:67:63:b8:a7:3f:e9:9f:13:e2:db:4e:f3:e3: 1d:26:94:5d:e9:81:49:24:4c:5b:a5:14:9a:c6:ac: 35:43:ed:ef:ee:d6:68:78:b5:9f:f0:02:ca:8d:b3: be:b1:51:19:20:a9:70:22:c6:e4:e0:a7:3e:48:21: 1b:b9:fb:dc:ae:88:29:5f:52:4d:bb:af:41:e5:3c: 8f:e4:ec:87:05:c4:17:2b:1e:bf:ce:ef:73:cd:c3: 26:d3:04:dc:10:78:7e:a1:97:c0:64:5b:de:28:5c: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.252.0/22 IPv6: 2804:2818::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263940 Signature Algorithm: sha256WithRSAEncryption 38:ec:61:7c:3c:11:38:a2:8b:12:b7:66:f4:e5:ea:fa:2e:38: 8d:f0:76:52:2c:75:43:d5:8d:d6:1f:b7:28:f4:e9:b0:6b:4d: 0b:95:49:c5:67:97:fc:03:72:41:59:d2:6d:1c:ef:ab:68:f9: 0f:d6:64:23:77:8e:35:20:5a:31:ab:07:84:38:30:62:d0:2a: 1d:a5:cf:5f:5e:08:b0:a0:59:53:54:36:d3:b9:14:e4:df:38: 45:f4:8d:15:c8:85:31:e3:f2:20:1a:59:00:15:80:fc:ba:08: 05:39:ae:c8:7f:cb:23:23:90:0e:af:9e:47:61:a9:81:74:5e: 64:af:9e:3f:4f:33:84:23:d4:42:1a:2b:34:84:b8:f5:52:94: 21:93:f3:40:12:79:df:83:d3:44:ff:1c:c4:88:97:fd:79:95: 58:c4:bd:30:a1:25:f1:e6:6b:65:d2:97:6f:bc:a2:39:c5:45: 2c:2a:0c:c3:9c:e9:f8:39:cd:4e:ad:7e:99:77:d3:09:d1:c1: 3f:48:6b:f6:18:b9:19:d2:9f:98:55:4a:17:6c:47:45:86:89: 59:03:70:41:3d:fb:ea:1e:88:b0:4f:6f:70:6e:c1:b5:e5:b5: 8c:62:06:09:af:8b:f6:c2:a5:9c:74:5d:36:d4:77:dc:f1:55: 6e:e3:8a:16 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUCfKo31EC32+aSXWCLoIb+uU0tMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDExNzU0MjlaFw0yNjA5MzAxNzU5MjlaMDMxMTAvBgNV BAMTKDU3OEUxNkZDQzgxNjc0NzgwNDA0M0EwNjcxQzczRkQxQjlCOUE2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4ETTwdx0xLF1pDCRd/cqrNpf CQ412GAkXZLNt4A+7/7YtwOdkuBsj8DB/c0Tew17Il9d/ML3VMKBlqmCCGN8b6xP kXyaVJy5nb9Wx+ok0RdBeiA/iIAW2y6/HhQIm8lwLBDaMwh4fLAHeOg3YYekHTUV /8TNLLph2gGHW9RpcbaHG14hA4Mj5+w/U7JU4mLZX8Rz/B58Z2O4pz/pnxPi207z 4x0mlF3pgUkkTFulFJrGrDVD7e/u1mh4tZ/wAsqNs76xURkgqXAixuTgpz5IIRu5 +9yuiClfUk27r0HlPI/k7IcFxBcrHr/O73PNwybTBNwQeH6hl8BkW94oXOhVAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXjhb8yBZ0eAQE OgZxxz/RubmmpTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWW84 UWVUYnVLWjI1OWk1cVNZamVlVThva0tBS1U2TDhaRnUxRzVXTFQxSC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWW84 UWVUYnVLWjI1OWk1cVNZamVlVThva0tBS1U2TDhaRnUxRzVXTFQxSC8wLzU3OEUx NkZDQzgxNjc0NzgwNDA0M0EwNjcxQzczRkQxQjlCOUE2QTUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAoq5/DANBAIAAjAHAwUAKAQoGDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBwQwDQYJKoZIhvcNAQELBQADggEBADjsYXw8ETiiixK3ZvTl 6vouOI3wdlIsdUPVjdYftyj06bBrTQuVScVnl/wDckFZ0m0c76to+Q/WZCN3jjUg WjGrB4Q4MGLQKh2lz19eCLCgWVNUNtO5FOTfOEX0jRXIhTHj8iAaWQAVgPy6CAU5 rsh/yyMjkA6vnkdhqYF0XmSvnj9PM4Qj1EIaKzSEuPVSlCGT80ASed+D00T/HMSI l/15lVjEvTChJfHma2XSl2+8ojnFRSwqDMOc6fg5zU6tfpl30wnRwT9Ia/YYuRnS n5hVShdsR0WGiVkDcEE9++oeiLBPb3BuwbXltYxiBgmvi/bCpZx0XTbUd9zxVW7j ihY= -----END CERTIFICATE-----Generated at Mon Nov 3 05:21:01 2025 by rpki-client