$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer File: 5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer (raw, json) Hash identifier: S70IadcWk1gQAlz0CkNi1l49f1IpcKiLnftGinZiA54= Subject key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D5B4DFF75B1C2D2A6884BE3BA8FACDB6638FF51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft caRepository: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Oct 2025 19:21:13 +0000 Certificate not after: Mon 19 Oct 2026 19:26:13 +0000 Subordinate resources: AS: 28273 IP: 201.33.0.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5b:4d:ff:75:b1:c2:d2:a6:88:4b:e3:ba:8f:ac:db:66:38:ff:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 19:21:13 2025 GMT Not After : Oct 19 19:26:13 2026 GMT Subject: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:89:99:a4:40:e6:a6:1c:41:d4:4d:cf:22: e6:0e:53:cf:f8:e2:88:20:70:19:8d:02:c9:99:84: 26:9b:4c:1e:77:2e:1a:15:5b:ce:55:06:67:17:83: 86:6e:6d:46:29:08:be:cc:3e:2d:d9:f7:df:74:52: 54:f3:8b:4a:51:b4:ed:6c:78:56:6b:7b:85:f8:9a: 7b:d2:70:dc:d6:3e:20:d3:4b:01:af:06:8d:82:7d: 16:c8:ee:29:71:5a:fc:c9:6a:45:d6:3f:42:54:f9: 03:55:9a:09:01:14:8b:dd:0f:6d:51:28:95:95:42: ce:a8:cf:10:bc:e3:b6:f4:bf:74:c0:9c:53:b0:9b: 41:0c:e0:4c:b0:d7:bd:62:df:9a:fc:a0:27:5e:f9: 50:5f:3c:76:59:ac:4f:cf:73:59:f0:31:86:61:19: 48:30:b3:a0:23:e7:0b:24:c5:16:21:05:be:69:a0: 57:df:1b:35:97:1c:ec:36:5d:b2:be:3e:de:ab:e4: c7:d6:73:72:0a:a2:54:6e:e2:9b:2d:e4:54:ce:4a: f5:34:e3:44:f9:78:e1:80:af:11:1a:ba:67:d5:84: c5:a9:34:e6:12:a1:a8:de:09:e1:e6:04:79:d8:c6: 72:5e:ac:1a:fb:63:33:9b:a2:38:f4:0a:50:d5:d5: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28273 Signature Algorithm: sha256WithRSAEncryption c1:46:00:2b:03:d8:2c:e7:71:f2:a6:41:27:70:dd:3b:ed:ca: ab:60:e2:c5:98:fa:65:66:8e:67:dd:39:ae:0c:24:b5:a8:6e: 97:65:df:b3:f2:2a:da:f8:c2:71:86:e5:8b:6f:38:c5:40:25: 08:6c:37:50:c5:d5:06:da:ca:e6:b4:c9:ce:df:7a:d1:8b:37: 14:19:4b:09:36:cf:fa:59:05:db:fb:1e:ca:8e:b7:09:5f:87: 5f:8f:63:16:5b:9a:ca:67:c5:b2:52:3b:ad:66:25:19:9c:55: 7a:b1:54:8a:59:6c:96:16:cf:ce:c0:c4:82:b9:b8:13:75:0a: 77:12:6d:33:70:37:75:ab:94:ab:a6:5c:d2:10:98:ac:b4:04: 58:3d:e4:d0:14:78:44:61:43:6b:98:b2:86:7e:90:87:55:c9: 14:ba:6a:e7:13:39:ee:02:04:56:85:95:41:f7:74:6d:ce:60: 14:7a:61:7d:c6:19:63:86:fd:32:18:72:ed:10:5f:3d:49:94: 11:d7:7f:79:90:c8:a5:b2:f7:2c:f6:f5:9b:e0:6d:d1:7d:7a: a8:4a:02:ed:fd:80:a7:bf:57:a5:18:51:fa:fd:56:d6:76:e4: e4:b8:e3:34:dd:cf:2c:ab:51:9e:1c:f3:28:2e:4e:0d:5e:84: 9c:7f:f3:93 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUfVtN/3WxwtKmiEvjuo+s22Y4/1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjAxOTIxMTNaFw0yNjEwMTkxOTI2MTNaMDMxMTAvBgNV BAMTKDVBNjQ3NkRFQzA2NzdENEMzNjg1QURDOUFBQkJFOEZDMkEwNzlDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHomZpEDmphxB1E3PIuYOU8/4 4oggcBmNAsmZhCabTB53LhoVW85VBmcXg4ZubUYpCL7MPi3Z9990UlTzi0pRtO1s eFZre4X4mnvScNzWPiDTSwGvBo2CfRbI7ilxWvzJakXWP0JU+QNVmgkBFIvdD21R KJWVQs6ozxC847b0v3TAnFOwm0EM4Eyw171i35r8oCde+VBfPHZZrE/Pc1nwMYZh GUgws6Aj5wskxRYhBb5poFffGzWXHOw2XbK+Pt6r5MfWc3IKolRu4pst5FTOSvU0 40T5eOGArxEaumfVhMWpNOYSoajeCeHmBHnYxnJerBr7YzObojj0ClDV1cgRAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaZHbewGd9TDaF rcmqu+j8KgecpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3dh Nzc1TUZ0bjhlNEZMWXFSRHByS0RiYmpic0ZEOER2UjU5ZGdDQkVRb20vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N3 YTc3NU1GdG44ZTRGTFlxUkRwcktEYmJqYnNGRDhEdlI1OWRnQ0JFUW9tLzAvNUE2 NDc2REVDMDY3N0Q0QzM2ODVBREM5QUFCQkU4RkMyQTA3OUNBNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEySEAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm5x MA0GCSqGSIb3DQEBCwUAA4IBAQDBRgArA9gs53HypkEncN077cqrYOLFmPplZo5n 3TmuDCS1qG6XZd+z8ira+MJxhuWLbzjFQCUIbDdQxdUG2srmtMnO33rRizcUGUsJ Ns/6WQXb+x7KjrcJX4dfj2MWW5rKZ8WyUjutZiUZnFV6sVSKWWyWFs/OwMSCubgT dQp3Em0zcDd1q5SrplzSEJistARYPeTQFHhEYUNrmLKGfpCHVckUumrnEznuAgRW hZVB93RtzmAUemF9xhljhv0yGHLtEF89SZQR1395kMilsvcs9vWb4G3RfXqoSgLt /YCnv1elGFH6/VbWduTkuOM03c8sq1GeHPMoLk4NXoScf/OT -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:06 2025 by rpki-client