$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.cer File: 5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.cer (raw, json) Hash identifier: On8r0B6CbSfDs8iJbwwPdlCca7SLTwqjU/4eqf34g8I= Subject key identifier: 5F:FF:55:FB:55:00:28:C5:AC:6A:40:A5:27:8B:48:78:D8:9D:2C:A9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7FBEF2243A3CB9C1ACD63AAB3C1C27A21AD97F8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.mft caRepository: rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 19:57:19 +0000 Certificate not after: Wed 21 Oct 2026 20:02:19 +0000 Subordinate resources: AS: 267970 IP: 45.166.132.0/22 IP: 2804:5600::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:be:f2:24:3a:3c:b9:c1:ac:d6:3a:ab:3c:1c:27:a2:1a:d9:7f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 19:57:19 2025 GMT Not After : Oct 21 20:02:19 2026 GMT Subject: CN=5FFF55FB550028C5AC6A40A5278B4878D89D2CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:b1:b3:1c:7d:ea:b9:df:53:ff:12:e2:59: c2:5f:0e:7b:23:cc:7f:1a:fc:d2:36:44:bf:56:82: 1d:e4:d4:0c:79:73:35:4e:56:cd:cc:af:0f:83:b5: 8c:36:86:90:70:15:13:ad:cc:16:d6:df:8e:51:09: ec:62:00:dd:90:64:e2:ad:5f:f3:57:d8:5b:47:87: 36:f1:01:e7:e5:7c:d8:fe:91:bf:56:5c:7d:50:59: 7f:3d:78:98:35:6c:c3:7d:b3:61:a9:3c:1f:4e:19: 4b:11:80:79:9e:1d:15:99:79:98:cb:63:d2:a0:05: a6:51:88:ab:4d:07:da:3c:07:ba:46:f6:3c:fd:69: 7d:95:43:29:b1:bb:f1:30:4d:1a:48:cc:81:bc:4a: 80:31:96:c8:24:3a:39:38:e4:c7:d0:c7:ee:31:6e: a8:fb:81:bd:f9:0f:4e:98:c8:a1:51:c6:12:09:b4: 17:d7:a2:91:6a:77:fb:25:02:a8:c6:c6:79:70:7b: 11:f2:96:51:9d:31:54:e3:53:22:32:9c:7f:7f:f3: 91:19:a3:52:10:ec:e0:7e:17:16:13:4d:f0:ca:f4: 48:77:b6:48:5c:23:60:18:c4:ad:07:62:7f:3a:32: 87:2b:e9:1a:a8:be:1c:28:c5:84:dc:dd:46:f1:2a: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:FF:55:FB:55:00:28:C5:AC:6A:40:A5:27:8B:48:78:D8:9D:2C:A9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.132.0/22 IPv6: 2804:5600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267970 Signature Algorithm: sha256WithRSAEncryption d0:b6:08:79:47:ab:b1:6c:59:57:54:49:ce:5d:7b:f0:a4:df: 33:5e:ca:ce:1c:41:38:6d:18:05:72:bb:98:e7:b5:a1:1d:54: f0:72:3c:b6:2e:15:51:8a:a7:35:86:90:12:bc:c0:0c:88:d0: e4:d5:28:4e:e4:e8:a8:1c:89:a3:89:ef:6f:d2:55:95:29:d3: 43:76:2f:9d:50:cd:5d:6f:15:c1:9c:24:3d:95:65:c5:ee:9f: 9b:7a:e0:4d:39:c7:1f:29:5a:aa:d8:72:3d:2f:42:00:f9:53: c8:45:e0:71:d5:3e:29:ce:0e:32:cc:47:be:43:90:a0:12:79: 4b:bc:2f:03:78:a8:6f:27:6e:b9:35:f9:0b:83:d6:55:a5:20: a3:5f:58:8c:00:8b:b7:2f:3d:bc:02:bb:3e:13:97:a1:9a:46: 19:8f:54:cc:69:67:80:34:60:bd:2b:94:3c:1c:35:7c:68:25: e1:3b:14:ee:82:b2:9a:6a:51:7a:68:64:9f:2a:0e:a9:80:24: b0:b4:f5:4f:4b:9b:40:ba:cd:43:ac:1a:6a:35:df:fb:8e:20: c6:37:52:da:d1:26:29:f2:ba:92:29:fb:09:61:52:39:69:4c: a7:96:fd:81:e2:88:a0:b7:c6:e8:40:dd:c6:eb:64:a9:c5:66: 85:d2:22:32 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUf77yJDo8ucGs1jqrPBwnohrZf44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjIxOTU3MTlaFw0yNjEwMjEyMDAyMTlaMDMxMTAvBgNV BAMTKDVGRkY1NUZCNTUwMDI4QzVBQzZBNDBBNTI3OEI0ODc4RDg5RDJDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95bGzHH3qud9T/xLiWcJfDnsj zH8a/NI2RL9Wgh3k1Ax5czVOVs3Mrw+DtYw2hpBwFROtzBbW345RCexiAN2QZOKt X/NX2FtHhzbxAeflfNj+kb9WXH1QWX89eJg1bMN9s2GpPB9OGUsRgHmeHRWZeZjL Y9KgBaZRiKtNB9o8B7pG9jz9aX2VQymxu/EwTRpIzIG8SoAxlsgkOjk45MfQx+4x bqj7gb35D06YyKFRxhIJtBfXopFqd/slAqjGxnlwexHyllGdMVTjUyIynH9/85EZ o1IQ7OB+FxYTTfDK9Eh3tkhcI2AYxK0HYn86Mocr6RqovhwoxYTc3UbxKhstAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf/1X7VQAoxaxq QKUni0h42J0sqTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmZj U0dEdXJGdTZ2eXRLWDdHR0xBRFBhOEREUmVUZ2d6a3oxU3JuR2VIWnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZm Y1NHRHVyRnU2dnl0S1g3R0dMQURQYThERFJlVGdnemt6MVNybkdlSFp0LzAvNUZG RjU1RkI1NTAwMjhDNUFDNkE0MEE1Mjc4QjQ4NzhEODlEMkNBOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaaEMA0EAgACMAcDBQAoBFYAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQWwjANBgkqhkiG9w0BAQsFAAOCAQEA0LYIeUersWxZV1RJ zl178KTfM17KzhxBOG0YBXK7mOe1oR1U8HI8ti4VUYqnNYaQErzADIjQ5NUoTuTo qByJo4nvb9JVlSnTQ3YvnVDNXW8VwZwkPZVlxe6fm3rgTTnHHylaqthyPS9CAPlT yEXgcdU+Kc4OMsxHvkOQoBJ5S7wvA3iobyduuTX5C4PWVaUgo19YjACLty89vAK7 PhOXoZpGGY9UzGlngDRgvSuUPBw1fGgl4TsU7oKymmpRemhknyoOqYAksLT1T0ub QLrNQ6waajXf+44gxjdS2tEmKfK6kin7CWFSOWlMp5b9geKIoLfG6EDdxutkqcVm hdIiMg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:59 2025 by rpki-client