$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer (raw, json) Hash identifier: Te1tz1M7lkkEulu/mcwlJuyP5qP5+YQNlwzeVGs8HrY= Subject key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6237F2E33C257650F821293BF86BA140479608F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft caRepository: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 14 Oct 2025 21:13:59 +0000 Certificate not after: Tue 13 Oct 2026 21:18:59 +0000 Subordinate resources: AS: 265958 IP: 164.163.32.0/22 IP: 2804:406c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:37:f2:e3:3c:25:76:50:f8:21:29:3b:f8:6b:a1:40:47:96:08:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 14 21:13:59 2025 GMT Not After : Oct 13 21:18:59 2026 GMT Subject: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:69:cf:7c:7d:cf:24:74:9c:b5:83:9c:0d: 89:7a:dc:e2:89:47:83:02:5f:dd:48:10:e8:8f:01: da:d7:d7:54:fe:ad:0b:57:3a:b0:fa:4d:b5:a2:64: b1:3d:fe:0c:e3:27:e5:d1:9e:f9:44:78:36:2c:2e: e4:dc:83:62:6d:52:6a:df:8b:2d:fc:7a:67:ba:21: 94:c4:1f:9d:e6:65:94:80:81:c6:23:0d:50:3f:08: 9d:54:c4:c3:1a:af:c9:c1:4e:06:07:30:b1:48:43: 9f:ce:65:13:5a:eb:58:f6:2b:3b:42:f3:70:9d:92: 50:4c:c5:26:0b:0a:fa:ae:5e:92:b5:db:58:7f:9a: 27:bf:7f:b4:61:d3:61:91:cf:57:66:8b:35:d0:f7: a3:93:c2:d5:f7:13:e9:06:fa:62:07:a6:5a:5b:15: 61:04:05:c9:76:57:37:32:19:e3:10:e1:89:89:55: 71:a5:f4:ea:1c:aa:7c:21:a5:21:ca:00:d9:83:83: 94:84:44:d2:da:34:5e:74:d4:5e:c3:01:0b:3b:27: bf:8e:eb:99:e2:bf:ae:06:82:64:fe:6c:8a:4e:6c: fe:9f:e2:e8:f9:54:57:a5:87:8a:4c:1b:8b:87:e6: 97:65:1f:86:a0:50:fb:06:4f:9c:ac:8f:57:89:c1: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.32.0/22 IPv6: 2804:406c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265958 Signature Algorithm: sha256WithRSAEncryption 86:40:00:16:0d:20:94:29:64:62:45:0c:e3:c5:93:4f:ac:fb: a4:41:08:9f:59:13:93:8a:f2:e6:4d:5d:3b:6a:5e:fa:c5:03: 61:dc:cd:db:0e:62:9a:eb:f1:29:fe:b7:4c:99:16:65:02:32: 87:b2:83:a3:27:07:c9:8f:71:1b:04:f4:a1:e4:ae:ca:5f:e4: 8f:2d:cf:9f:4c:ca:cf:ac:c8:cc:ef:8c:79:59:dc:96:9a:95: e9:49:1c:ab:84:59:42:46:c8:cb:ca:31:44:d1:2a:f0:cb:79: 47:f9:a4:24:be:1f:f5:ee:b1:70:b5:19:b0:4d:3d:96:23:ed: 50:65:4f:de:eb:a8:b7:5c:ae:5c:cc:4a:57:e8:a8:6f:5a:9d: d3:22:c7:bd:e2:a5:4e:38:bf:43:32:d1:76:c6:92:f5:b9:e4: 6e:39:c3:7f:95:14:bb:68:6c:e9:b1:0a:72:2f:15:b9:39:3e: 58:d6:23:bf:03:67:0f:4f:54:7d:fa:7e:2a:a6:ec:61:b5:65: ef:ac:ae:86:62:b6:59:87:36:1b:ee:2e:cb:04:56:f0:fb:63: 90:52:66:ae:e7:57:29:d0:ec:b5:fe:cd:f0:7f:e8:7a:b3:72: 9d:3b:ac:6e:a3:be:b7:0c:c9:ac:91:59:0c:3e:73:b5:c4:53: 8c:d3:05:85 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYjfy4zwldlD4ISk7+GuhQEeWCPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTQyMTEzNTlaFw0yNjEwMTMyMTE4NTlaMDMxMTAvBgNV BAMTKDY0M0ZCNEU4RUZCMjlGNzNCMDE3N0EwRDFBRDVDNjM2NEY0NEIyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLGnPfH3PJHSctYOcDYl63OKJ R4MCX91IEOiPAdrX11T+rQtXOrD6TbWiZLE9/gzjJ+XRnvlEeDYsLuTcg2JtUmrf iy38eme6IZTEH53mZZSAgcYjDVA/CJ1UxMMar8nBTgYHMLFIQ5/OZRNa61j2KztC 83CdklBMxSYLCvquXpK121h/mie/f7Rh02GRz1dmizXQ96OTwtX3E+kG+mIHplpb FWEEBcl2VzcyGeMQ4YmJVXGl9OocqnwhpSHKANmDg5SERNLaNF501F7DAQs7J7+O 65niv64GgmT+bIpObP6f4uj5VFelh4pMG4uH5pdlH4agUPsGT5ysj1eJwXU7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkP7To77Kfc7AX eg0a1cY2T0SyrDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR21v VG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dt b1RuVVFVekhyQU14eDNLbUNRQWhGWnFvVkpLZThZRktURVJ5MVNDY3Q3LzAvNjQz RkI0RThFRkIyOUY3M0IwMTc3QTBEMUFENUM2MzY0RjQ0QjJBQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCpKMgMA0EAgACMAcDBQAoBEBsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO5jANBgkqhkiG9w0BAQsFAAOCAQEAhkAAFg0glClkYkUM 48WTT6z7pEEIn1kTk4ry5k1dO2pe+sUDYdzN2w5imuvxKf63TJkWZQIyh7KDoycH yY9xGwT0oeSuyl/kjy3Pn0zKz6zIzO+MeVnclpqV6Ukcq4RZQkbIy8oxRNEq8Mt5 R/mkJL4f9e6xcLUZsE09liPtUGVP3uuot1yuXMxKV+iob1qd0yLHveKlTji/QzLR dsaS9bnkbjnDf5UUu2hs6bEKci8VuTk+WNYjvwNnD09Uffp+KqbsYbVl76yuhmK2 WYc2G+4uywRW8PtjkFJmrudXKdDstf7N8H/oerNynTusbqO+twzJrJFZDD5ztcRT jNMFhQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:31:27 2025 by rpki-client