$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer File: 5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.cer (raw, json) Hash identifier: BE61g6WOq0yl/JtcBaLmUvbMpY/ZflReBmsHBR0cBSc= Subject key identifier: 5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4012EABF4C16D507A81CA802CB01BB25C9DCF5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.mft caRepository: rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 09:06:08 +0000 Certificate not after: Thu 05 Mar 2026 09:11:08 +0000 Subordinate resources: AS: 266914 IP: 45.224.232.0/22 IP: 2804:4540::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:12:ea:bf:4c:16:d5:07:a8:1c:a8:02:cb:01:bb:25:c9:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 09:06:08 2025 GMT Not After : Mar 5 09:11:08 2026 GMT Subject: CN=5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:b7:aa:f0:e4:9e:de:09:8f:c5:08:bc:a5: 42:19:d1:01:9e:fc:3f:7d:11:5f:bc:5d:7e:9c:0c: 1f:73:dc:d1:84:0b:25:b7:51:7d:c0:7f:a7:37:ab: 1d:f7:5a:48:a2:bf:38:05:49:e6:78:14:20:24:f7: 01:a0:2d:cd:c1:4f:80:c2:2f:f5:a0:41:4f:cc:a3: 83:d1:25:cf:67:24:a1:f3:b8:1f:af:35:41:62:36: 64:7c:d2:3d:85:8e:a4:cf:c0:08:15:30:c6:ec:bf: 77:72:a6:b7:26:69:66:96:b4:19:98:bf:bb:d2:dd: e9:f6:5a:76:c6:22:d0:12:3c:0f:5b:73:6c:3a:41: 07:54:31:ec:9c:ad:39:83:2d:bd:74:42:95:83:b5: 3f:c0:17:e6:b1:22:e1:94:af:0d:c3:8c:ee:15:38: cd:60:cb:33:e5:55:c3:87:15:e8:2e:ec:26:8f:d6: ca:0e:f3:ef:91:c7:33:7d:cf:e8:e7:64:e2:25:2d: de:27:1b:c2:c7:32:c7:d6:72:f8:32:6a:cf:59:f8: 81:ee:cb:94:dc:ec:8e:8d:55:94:90:34:8c:cf:97: 32:4a:99:66:fa:0f:82:a9:69:25:f6:f6:b8:01:aa: a4:52:6a:f5:29:66:27:2c:8a:e3:db:b5:45:44:19: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:A1:63:FB:32:84:B3:D1:A5:D7:50:C5:88:6A:DA:64:14:DC:3F:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/1/5BA163FB3284B3D1A5D750C5886ADA6414DC3FAC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.232.0/22 IPv6: 2804:4540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266914 Signature Algorithm: sha256WithRSAEncryption b4:74:73:88:b2:61:3a:c0:62:89:3c:e4:70:39:44:f2:d1:76: c0:ec:30:f3:6b:86:48:47:de:51:6a:c3:18:06:6d:98:72:a8: 7b:53:6a:73:11:e2:3e:21:15:1f:7b:12:6e:04:42:24:ef:25: c5:71:57:52:58:41:3f:6a:fa:6f:42:52:f8:c9:8e:e1:a0:af: 8c:25:33:d7:18:f3:c3:dd:44:dc:0d:d6:36:94:f8:9f:70:d5: 0e:e1:38:00:2a:66:de:be:da:e6:aa:2b:5a:85:0b:e2:5b:b5: 72:a8:25:9d:c9:8a:08:63:26:a6:3a:b6:bc:d1:59:3b:09:f1: 60:22:f9:53:5f:c3:33:52:67:fa:79:44:92:5b:7d:8f:f4:b3: 54:db:04:3d:67:5a:d5:82:4f:c9:9c:b8:10:25:9a:88:89:4e: 09:55:fe:cf:38:65:48:4f:3c:31:c5:93:e5:a0:2e:4e:c7:68: a5:66:93:c8:fb:13:c2:e0:80:45:a2:b3:3e:45:72:83:61:75: 05:96:ac:d3:0e:c8:07:74:08:30:d6:fe:8f:cc:15:43:6a:57: 83:84:f3:ae:1d:b7:bd:42:81:7c:b3:12:27:aa:f7:f7:89:8c: 8e:a3:3c:a6:d7:87:7d:97:fe:04:ea:7e:e9:1e:01:af:a4:52: fd:28:89:e5 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgITQBLqv0wW1QeoHKgCywG7Jcnc9TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI1MDMwNjA5MDYwOFoXDTI2MDMwNTA5MTEwOFowMzExMC8GA1UE AxMoNUJBMTYzRkIzMjg0QjNEMUE1RDc1MEM1ODg2QURBNjQxNERDM0ZBQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5Bt6rw5J7eCY/FCLylQhnRAZ78 P30RX7xdfpwMH3Pc0YQLJbdRfcB/pzerHfdaSKK/OAVJ5ngUICT3AaAtzcFPgMIv 9aBBT8yjg9Elz2ckofO4H681QWI2ZHzSPYWOpM/ACBUwxuy/d3KmtyZpZpa0GZi/ u9Ld6fZadsYi0BI8D1tzbDpBB1Qx7JytOYMtvXRClYO1P8AX5rEi4ZSvDcOM7hU4 zWDLM+VVw4cV6C7sJo/Wyg7z75HHM33P6Odk4iUt3icbwscyx9Zy+DJqz1n4ge7L lNzsjo1VlJA0jM+XMkqZZvoPgqlpJfb2uAGqpFJq9SlmJyyK49u1RUQZ+YkCAwEA AaOCAzowggM2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFuhY/syhLPRpddQ xYhq2mQU3D+sMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82bXBI S1UzYXVmcnFLUGkzNEhldzVUTXN2M242OTNQNEtHTDJzVWpBSDhZVC8xLzCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNm1w SEtVM2F1ZnJxS1BpMzRIZXc1VE1zdjNuNjkzUDRLR0wyc1VqQUg4WVQvMS81QkEx NjNGQjMyODRCM0QxQTVENzUwQzU4ODZBREE2NDE0REMzRkFDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt4OgwDQQCAAIwBwMFACgERUAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBKiMA0GCSqGSIb3DQEBCwUAA4IBAQC0dHOIsmE6wGKJPORw OUTy0XbA7DDza4ZIR95RasMYBm2Ycqh7U2pzEeI+IRUfexJuBEIk7yXFcVdSWEE/ avpvQlL4yY7hoK+MJTPXGPPD3UTcDdY2lPifcNUO4TgAKmbevtrmqitahQviW7Vy qCWdyYoIYyamOra80Vk7CfFgIvlTX8MzUmf6eUSSW32P9LNU2wQ9Z1rVgk/JnLgQ JZqIiU4JVf7POGVITzwxxZPloC5Ox2ilZpPI+xPC4IBForM+RXKDYXUFlqzTDsgH dAgw1v6PzBVDaleDhPOuHbe9QoF8sxInqvf3iYyOozym14d9l/4E6n7pHgGvpFL9 KInl -----END CERTIFICATE-----Generated at Mon Nov 3 12:20:06 2025 by rpki-client