$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer (raw, json) Hash identifier: 8QPKPJpAoExMmH3S9FSCL2hEgZgCRREwgHLTh8h4FxU= Subject key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 793974BF775801338E26DDD3CF21D7CD9FA6EB07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft caRepository: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Jun 2025 06:04:05 +0000 Certificate not after: Tue 23 Jun 2026 06:09:05 +0000 Subordinate resources: AS: 267574 IP: 45.70.28.0/22 IP: 2804:4380::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:39:74:bf:77:58:01:33:8e:26:dd:d3:cf:21:d7:cd:9f:a6:eb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 24 06:04:05 2025 GMT Not After : Jun 23 06:09:05 2026 GMT Subject: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:30:2c:a2:e4:d5:c6:5b:d0:84:d7:e1:bd: da:89:43:3e:22:4a:0b:aa:31:17:98:de:ff:9c:6a: 45:55:9b:90:15:d9:ac:92:73:ee:19:79:f7:65:66: 72:67:8b:0b:fa:d1:d0:19:52:45:12:5d:eb:f2:35: 86:c3:3b:9f:28:6a:44:58:1a:29:fa:f8:99:8b:f8: 3f:25:06:06:d6:6a:76:5a:72:c1:cb:7a:c3:1f:e9: 4e:43:ee:07:97:c2:c1:cd:c1:f1:1a:a8:31:4c:47: bb:09:ae:0c:37:a3:07:19:7a:55:fb:bb:65:68:c6: 61:d1:9f:fc:e7:ac:ac:cc:e1:b4:e2:e5:94:fb:70: c0:88:04:ce:6f:aa:a8:47:75:5a:43:41:d0:06:ca: 23:fa:0e:80:7a:e9:2c:6d:f4:50:3e:db:45:52:fb: a2:c6:80:df:86:d1:7a:70:02:5e:e1:f1:70:3f:e2: 54:26:d8:84:73:73:e1:3b:22:21:b5:2d:1a:2e:fe: f4:3c:dc:a9:b9:fd:fa:61:9f:df:d1:96:ad:fd:b5: 97:d6:50:23:21:a6:5e:af:d8:c4:60:29:86:0d:06: db:d3:79:fd:b7:55:4a:fa:34:d9:73:2d:28:98:b1: 53:9c:5a:c1:36:cb:a8:cf:bf:27:eb:25:d6:a5:67: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.28.0/22 IPv6: 2804:4380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267574 Signature Algorithm: sha256WithRSAEncryption 0b:6d:56:b7:b9:cd:17:b5:f8:58:19:48:5a:28:65:68:55:81: 86:44:46:cf:48:32:b4:3e:37:2d:fe:ec:ac:55:cf:e5:07:88: 25:4b:52:8b:15:09:a4:42:3f:9a:be:91:ca:b8:8e:70:7e:f6: 76:a0:a4:88:11:7b:a4:90:ea:c2:fe:ea:61:7c:5c:ea:7c:ad: 77:4f:63:2b:d2:23:96:3b:1e:77:b7:cd:be:48:ac:d8:3a:b1: 4e:5b:b1:ca:c6:d7:ff:9f:25:1f:64:25:99:6a:63:73:bf:1c: 36:b0:5f:2f:68:8b:a8:35:6f:f8:17:cc:af:da:be:f9:11:32: 93:b1:f6:5e:e1:83:62:a9:91:fe:b0:73:14:2c:1e:3d:15:b5: 74:63:d2:a2:ad:fb:99:b3:bd:a4:44:cf:ae:ab:c0:a7:cc:21: f5:14:4f:b0:76:62:a7:ec:8f:64:d1:89:0a:5b:27:88:48:dc: eb:de:6f:ae:ce:eb:c2:6e:18:7d:6c:35:5a:9d:b7:6f:61:03: 22:b2:40:e9:b1:c7:9d:3a:8e:db:b5:63:b4:44:2f:66:02:42: fd:84:b9:00:7f:31:82:ee:38:5a:ae:c7:d6:6e:ae:60:06:60: 9d:42:82:41:9c:64:a9:a4:3a:d5:bc:cf:95:7e:10:e2:d3:c8: bc:42:49:b7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUeTl0v3dYATOOJt3TzyHXzZ+m6wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjQwNjA0MDVaFw0yNjA2MjMwNjA5MDVaMDMxMTAvBgNV BAMTKDVBMDUyRDMxRkU0MEI1RjM3MDYzN0UyQzBFNEYxQTE4RkYwODI5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuDAsouTVxlvQhNfhvdqJQz4i SguqMReY3v+cakVVm5AV2aySc+4ZefdlZnJniwv60dAZUkUSXevyNYbDO58oakRY Gin6+JmL+D8lBgbWanZacsHLesMf6U5D7geXwsHNwfEaqDFMR7sJrgw3owcZelX7 u2VoxmHRn/znrKzM4bTi5ZT7cMCIBM5vqqhHdVpDQdAGyiP6DoB66Sxt9FA+20VS +6LGgN+G0XpwAl7h8XA/4lQm2IRzc+E7IiG1LRou/vQ83Km5/fphn9/Rlq39tZfW UCMhpl6v2MRgKYYNBtvTef23VUr6NNlzLSiYsVOcWsE2y6jPvyfrJdalZz0FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaBS0x/kC183Bj fiwOTxoY/wgpXzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN01I ZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1mTnAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdN SGZYa3VuQ2lRQnJSU0ZQNTlvajFVcjhMWHNCR3hCZ3Exc0dZVDRNZk5wLzEvNUEw NTJEMzFGRTQwQjVGMzcwNjM3RTJDMEU0RjFBMThGRjA4Mjk1Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUYcMA0EAgACMAcDBQAoBEOAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVNjANBgkqhkiG9w0BAQsFAAOCAQEAC21Wt7nNF7X4WBlI WihlaFWBhkRGz0gytD43Lf7srFXP5QeIJUtSixUJpEI/mr6RyriOcH72dqCkiBF7 pJDqwv7qYXxc6nytd09jK9Ijljsed7fNvkis2DqxTluxysbX/58lH2QlmWpjc78c NrBfL2iLqDVv+BfMr9q++REyk7H2XuGDYqmR/rBzFCwePRW1dGPSoq37mbO9pETP rqvAp8wh9RRPsHZip+yPZNGJClsniEjc695vrs7rwm4YfWw1Wp23b2EDIrJA6bHH nTqO27VjtEQvZgJC/YS5AH8xgu44Wq7H1m6uYAZgnUKCQZxkqaQ61bzPlX4Q4tPI vEJJtw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:41 2025 by rpki-client