$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.cer File: 6725D2C2B4DD752B4223424FD1BAD8B1620866BD.cer (raw, json) Hash identifier: WcsQkvhaCj/MUFD9nldaCJ+5L+Lg8XybfVhvmWNb8mI= Subject key identifier: 67:25:D2:C2:B4:DD:75:2B:42:23:42:4F:D1:BA:D8:B1:62:08:66:BD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DA9FC1450088FB7204BBFC7CA8CD8F9215080C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.mft caRepository: rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:19 +0000 Certificate not after: Fri 06 Mar 2026 14:42:19 +0000 Subordinate resources: AS: 272458 IP: 2804:8180::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a9:fc:14:50:08:8f:b7:20:4b:bf:c7:ca:8c:d8:f9:21:50:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:19 2025 GMT Not After : Mar 6 14:42:19 2026 GMT Subject: CN=6725D2C2B4DD752B4223424FD1BAD8B1620866BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:81:92:28:d3:7d:d5:00:88:5e:28:be:f0: f0:a1:29:e7:af:e5:d5:be:b3:ec:6b:93:a9:37:81: 64:cd:d8:26:de:c1:f1:30:9e:93:82:7e:e0:9a:e6: a2:9a:15:00:19:0a:33:f6:b6:75:74:0b:bb:2a:6f: 7b:c7:96:23:71:77:22:87:3e:9f:c6:da:4b:cf:bd: f6:be:81:3f:a8:93:5a:17:c2:6a:69:ce:8e:14:55: 25:08:7c:dd:46:72:6a:3d:40:a7:79:8b:a7:c6:05: e1:21:94:3a:98:ce:27:7e:55:8c:05:14:5b:ad:1c: 97:ad:0f:6b:c3:e5:7d:18:90:ed:8d:eb:22:ad:1f: 35:60:35:cb:4c:fc:34:f1:7f:20:de:ce:a2:e7:f2: e0:0b:2c:99:9a:80:1d:54:55:c3:4a:41:54:2e:1f: 4e:8c:9d:24:6a:dc:60:30:90:b5:de:3c:08:16:06: 0c:cb:49:a0:d8:69:e9:7e:a8:12:66:01:0a:87:c0: 41:df:fe:e1:73:74:04:70:75:a9:e9:fe:61:b6:20: 79:6b:b8:8f:db:33:1f:50:d4:7f:d6:ee:49:04:33: 75:cd:0f:c4:dc:40:9d:ea:29:03:23:00:2f:68:38: f5:1a:94:9d:17:5e:a3:48:42:56:f0:1f:cc:8c:98: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:25:D2:C2:B4:DD:75:2B:42:23:42:4F:D1:BA:D8:B1:62:08:66:BD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272458 Signature Algorithm: sha256WithRSAEncryption b6:a7:5b:88:05:4f:e1:60:5a:c0:e6:a2:ce:42:30:64:45:80: ad:e6:01:f8:68:a2:ac:77:48:cf:43:ee:5f:3a:46:ab:a5:1e: d1:a0:b4:47:08:88:f0:77:6d:90:11:a4:ca:41:d7:58:35:9a: c0:a5:64:56:81:6e:6a:c2:26:d7:1f:d9:00:54:29:5e:26:39: 3a:04:d9:d3:f2:8d:6a:d0:eb:70:cf:e4:57:1c:c0:d7:fe:75: 21:e6:48:47:dc:cd:2d:97:9b:08:96:6f:c6:5e:b2:66:9e:1d: 52:1d:d1:c4:12:85:59:9a:36:d3:68:d9:e3:3b:04:c7:11:0f: 20:5a:91:09:25:12:6b:99:b4:d8:a6:43:26:ae:21:9e:fe:16: b7:e0:07:46:61:ad:69:f0:a9:cf:ae:a4:5e:63:8f:35:8e:f1: 0f:8e:38:52:76:84:30:f7:2f:85:01:6d:96:3c:62:60:bc:ba: 76:7c:f6:3e:45:d3:88:7a:4d:72:da:9e:46:b0:af:68:4e:54: c8:66:d2:fb:16:b3:6d:7c:bc:c0:28:6b:3c:79:09:51:b0:aa: 45:0e:2c:fe:1a:74:03:bc:45:5d:c9:bf:64:91:e7:f4:5e:71: 27:2a:60:8c:c7:8e:54:9e:f3:48:4f:9f:4f:07:ed:21:e8:6d: 8a:9b:60:4c -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUHan8FFAIj7cgS7/HyozY+SFQgMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MTlaFw0yNjAzMDYxNDQyMTlaMDMxMTAvBgNV BAMTKDY3MjVEMkMyQjRERDc1MkI0MjIzNDI0RkQxQkFEOEIxNjIwODY2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMYGSKNN91QCIXii+8PChKeev 5dW+s+xrk6k3gWTN2CbewfEwnpOCfuCa5qKaFQAZCjP2tnV0C7sqb3vHliNxdyKH Pp/G2kvPvfa+gT+ok1oXwmppzo4UVSUIfN1Gcmo9QKd5i6fGBeEhlDqYzid+VYwF FFutHJetD2vD5X0YkO2N6yKtHzVgNctM/DTxfyDezqLn8uALLJmagB1UVcNKQVQu H06MnSRq3GAwkLXePAgWBgzLSaDYael+qBJmAQqHwEHf/uFzdARwdanp/mG2IHlr uI/bMx9Q1H/W7kkEM3XND8TcQJ3qKQMjAC9oOPUalJ0XXqNIQlbwH8yMmEf7AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnJdLCtN11K0Ij Qk/RutixYghmvTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlBC bVlwZFVVRjF4a2ExZjdLYUhQZkJ3eWpCanJCTWhMaDZyRDltTjNRdjIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZQ Qm1ZcGRVVUYxeGthMWY3S2FIUGZCd3lqQmpyQk1oTGg2ckQ5bU4zUXYyLzEvNjcy NUQyQzJCNERENzUyQjQyMjM0MjRGRDFCQUQ4QjE2MjA4NjZCRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASBgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KEowDQYJKoZIhvcNAQELBQADggEBALanW4gFT+FgWsDmos5CMGRFgK3mAfhooqx3 SM9D7l86RqulHtGgtEcIiPB3bZARpMpB11g1msClZFaBbmrCJtcf2QBUKV4mOToE 2dPyjWrQ63DP5FccwNf+dSHmSEfczS2XmwiWb8ZesmaeHVId0cQShVmaNtNo2eM7 BMcRDyBakQklEmuZtNimQyauIZ7+FrfgB0ZhrWnwqc+upF5jjzWO8Q+OOFJ2hDD3 L4UBbZY8YmC8unZ89j5F04h6TXLankawr2hOVMhm0vsWs218vMAoazx5CVGwqkUO LP4adAO8RV3Jv2SR5/RecScqYIzHjlSe80hPn08H7SHobYqbYEw= -----END CERTIFICATE-----Generated at Mon Nov 3 05:33:56 2025 by rpki-client