$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer File: 702838DD0B14B4FF3D09CE89247C34EBD427D264.cer (raw, json) Hash identifier: pa9qZ1Iz4ItIlhBlP2+lztsycvDm+NdBEccIoC+zAV8= Subject key identifier: 70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A37FAC7550D5364F648906D1D881AA6F2810EE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft caRepository: rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Oct 2025 14:09:54 +0000 Certificate not after: Fri 16 Oct 2026 14:14:54 +0000 Subordinate resources: AS: 273332 IP: 2804:8d10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:37:fa:c7:55:0d:53:64:f6:48:90:6d:1d:88:1a:a6:f2:81:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 17 14:09:54 2025 GMT Not After : Oct 16 14:14:54 2026 GMT Subject: CN=702838DD0B14B4FF3D09CE89247C34EBD427D264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:58:99:78:f7:69:b5:df:93:69:10:65:5b: 0d:fe:99:a9:6f:21:a4:58:51:3f:19:88:06:62:46: 8c:98:44:02:d7:be:2e:76:aa:a6:b9:86:98:bd:2e: 64:42:21:45:76:dc:65:b8:b4:18:41:14:34:1f:c2: 50:c0:aa:7f:57:f9:c8:39:98:e8:4c:a3:2a:a1:10: f4:d0:ec:ca:15:79:d8:92:f7:e6:b4:fe:98:4f:a2: 17:98:bf:5c:6b:9d:6c:35:dd:57:ec:32:26:72:05: b5:c4:18:d2:e3:1a:e6:b3:9b:47:69:f0:81:74:4b: 99:ad:61:87:0f:d0:41:a2:58:c5:1f:be:e7:42:e5: a1:fd:55:4f:49:4e:1c:ac:6d:0d:7b:0f:f5:28:fd: d1:3a:68:6c:53:24:53:b0:f0:ae:4f:99:ec:6b:0f: 52:51:7e:20:1c:a5:eb:fe:d9:f1:61:e9:93:40:77: 10:db:3e:e7:d4:b7:0a:fa:02:33:8c:dd:ca:6e:ee: 3e:94:16:08:5f:d5:e9:be:3a:a8:f3:92:87:8c:94: 5d:94:1d:80:dc:44:12:97:d1:2e:a8:69:87:fb:ba: 8d:28:ee:7a:0c:0b:65:9a:59:99:1a:77:67:31:5b: 5d:4d:11:34:a5:4a:1f:91:5c:18:b3:c0:2f:9a:d8: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273332 Signature Algorithm: sha256WithRSAEncryption 48:9f:07:22:42:35:60:5a:d6:da:af:94:bc:8b:f8:1d:d8:35: 33:b5:4b:7f:9d:5d:87:7d:35:44:da:7a:8e:2e:4f:9b:4b:b2: 1d:8d:40:b4:eb:01:aa:5e:ac:2e:d1:22:d3:20:2c:9e:52:39: 2e:e9:92:17:dc:02:c3:ac:6b:14:1b:6f:84:79:9f:18:fe:b8: 78:13:91:28:6d:0e:21:00:dd:5d:33:92:8b:e2:20:0b:3a:3b: 83:7f:00:fb:32:4c:48:13:61:56:31:3e:c3:5e:0a:f4:85:3e: cc:a9:68:a3:a5:85:fd:6b:cf:ae:aa:34:ea:3c:0d:d2:4e:80: b5:a1:6e:3a:49:25:14:f7:99:62:88:00:48:80:0c:5b:d7:43: 1a:c8:2d:c1:77:89:15:9d:6b:dc:d5:89:ed:d4:ea:ac:f8:d9: f9:e4:ca:b8:02:ae:a8:5b:ad:f6:bc:f7:fe:e5:92:de:ef:e5: e3:98:e5:6b:7b:ac:4c:62:e2:46:27:ab:99:f2:8b:7e:e3:9d: da:9b:6f:a0:ff:8d:1a:2e:97:99:82:56:b8:52:bc:0c:40:28: fd:5f:52:6b:2e:17:be:4e:29:69:ae:36:54:a0:0f:8f:22:35: 13:07:f4:7e:4d:81:89:29:a1:f7:7c:99:3e:6e:92:db:48:c5: 78:f8:82:89 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUSjf6x1UNU2T2SJBtHYgapvKBDugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTcxNDA5NTRaFw0yNjEwMTYxNDE0NTRaMDMxMTAvBgNV BAMTKDcwMjgzOEREMEIxNEI0RkYzRDA5Q0U4OTI0N0MzNEVCRDQyN0QyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuliZePdptd+TaRBlWw3+malv IaRYUT8ZiAZiRoyYRALXvi52qqa5hpi9LmRCIUV23GW4tBhBFDQfwlDAqn9X+cg5 mOhMoyqhEPTQ7MoVediS9+a0/phPoheYv1xrnWw13VfsMiZyBbXEGNLjGuazm0dp 8IF0S5mtYYcP0EGiWMUfvudC5aH9VU9JThysbQ17D/Uo/dE6aGxTJFOw8K5Pmexr D1JRfiAcpev+2fFh6ZNAdxDbPufUtwr6AjOM3cpu7j6UFghf1em+OqjzkoeMlF2U HYDcRBKX0S6oaYf7uo0o7noMC2WaWZkad2cxW11NETSlSh+RXBizwC+a2HP3AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwKDjdCxS0/z0J zokkfDTr1CfSZDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGVO Mll0SFdVMk5hZDNBYkpkWTZQTW5qVnI3VWlkeHJGcWlEVEhwb1l5bzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhl TjJZdEhXVTJOYWQzQWJKZFk2UE1ualZyN1VpZHhyRnFpRFRIcG9ZeW8zLzAvNzAy ODM4REQwQjE0QjRGRjNEMDlDRTg5MjQ3QzM0RUJENDI3RDI2NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASNEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME K7QwDQYJKoZIhvcNAQELBQADggEBAEifByJCNWBa1tqvlLyL+B3YNTO1S3+dXYd9 NUTaeo4uT5tLsh2NQLTrAaperC7RItMgLJ5SOS7pkhfcAsOsaxQbb4R5nxj+uHgT kShtDiEA3V0zkoviIAs6O4N/APsyTEgTYVYxPsNeCvSFPsypaKOlhf1rz66qNOo8 DdJOgLWhbjpJJRT3mWKIAEiADFvXQxrILcF3iRWda9zVie3U6qz42fnkyrgCrqhb rfa89/7lkt7v5eOY5Wt7rExi4kYnq5nyi37jndqbb6D/jRoul5mCVrhSvAxAKP1f UmsuF75OKWmuNlSgD48iNRMH9H5NgYkpofd8mT5ukttIxXj4gok= -----END CERTIFICATE-----Generated at Sun Nov 2 23:00:26 2025 by rpki-client