$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/705A2AC6C40507D3D6E98EA5EDA4E5ECE949BF76.cer File: 705A2AC6C40507D3D6E98EA5EDA4E5ECE949BF76.cer (raw, json) Hash identifier: OlbvzqQr+jAZEX0d1x7uHpT4NnZl1lJZbw6I9GIL30E= Subject key identifier: 70:5A:2A:C6:C4:05:07:D3:D6:E9:8E:A5:ED:A4:E5:EC:E9:49:BF:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F58B3C67980D813F864C3C744CD25047AFA179F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/705A2AC6C40507D3D6E98EA5EDA4E5ECE949BF76.mft caRepository: rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 28 Oct 2025 17:22:40 +0000 Certificate not after: Tue 27 Oct 2026 17:27:40 +0000 Subordinate resources: AS: 264000 IP: 143.0.124.0/22 IP: 2804:2924::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:58:b3:c6:79:80:d8:13:f8:64:c3:c7:44:cd:25:04:7a:fa:17:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 28 17:22:40 2025 GMT Not After : Oct 27 17:27:40 2026 GMT Subject: CN=705A2AC6C40507D3D6E98EA5EDA4E5ECE949BF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:b2:f0:e3:d5:5f:00:4e:21:8d:74:7c:96: e4:e8:07:fc:15:ff:a7:e3:59:bd:e6:96:20:06:6f: 78:4b:00:75:04:bf:a5:f8:2f:e2:5e:45:ff:5c:e0: c8:f6:32:3e:cc:34:28:87:e3:85:08:3d:04:4c:c0: 1c:99:7b:c9:dd:08:ac:14:5f:4b:a6:35:89:4b:d6: 5c:66:ab:31:ac:fa:1f:ed:e6:57:6b:95:34:51:a8: 3a:e9:91:a8:ee:a5:b9:e1:59:5f:e2:f5:b3:a6:ba: 65:45:20:62:56:f6:b7:7a:d2:ae:05:81:e6:c2:3e: 85:a9:f8:c7:c0:8f:88:f3:5f:f6:dc:16:fe:99:67: 4a:07:44:6a:92:41:1f:0f:9a:56:19:0e:e0:6a:f8: 63:29:cb:b1:16:a4:c1:3b:0f:a1:35:5e:52:44:0a: c7:c9:d1:fb:c4:f3:db:51:c4:7e:8f:6b:f7:ef:01: fd:58:8a:c6:b3:23:bf:b9:11:7a:13:55:cd:da:09: 03:62:48:2b:91:a2:4c:bd:cc:3d:0b:93:db:c3:ff: ae:f5:18:42:f2:15:5a:38:ec:31:9b:5c:7d:ac:e2: f7:a2:75:b8:81:25:10:6b:92:b6:4a:eb:3d:52:11: d7:6c:76:d8:35:59:0a:6b:c2:fe:49:eb:62:02:0d: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:5A:2A:C6:C4:05:07:D3:D6:E9:8E:A5:ED:A4:E5:EC:E9:49:BF:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/705A2AC6C40507D3D6E98EA5EDA4E5ECE949BF76.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.124.0/22 IPv6: 2804:2924::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264000 Signature Algorithm: sha256WithRSAEncryption 97:1f:7b:32:03:63:60:23:44:87:14:63:e5:59:1f:ba:2d:eb: f7:d7:37:fb:c0:d4:55:53:d9:bc:49:c9:e1:46:dd:bb:85:3c: 79:9a:7f:1d:f1:8a:e1:04:46:98:7a:8b:28:0b:58:ab:ac:a7: a0:b0:e8:9a:d3:3c:cc:72:59:cb:b2:b4:40:d3:33:98:2d:ba: 31:fa:cb:27:8d:35:e2:90:4b:1f:61:7f:10:5a:8c:90:c5:d1: 2f:9a:00:0f:8c:9f:78:c6:9b:14:c3:f0:f6:04:e2:78:64:c3: f7:f9:00:af:06:01:e3:5d:ac:d6:37:67:77:ee:f3:ba:45:5a: 38:e2:b6:d6:9c:ff:85:07:36:84:f5:77:39:35:e7:7a:c0:74: 73:42:91:45:9e:13:e5:13:92:a4:f6:31:44:38:58:ba:ea:81: 8f:ee:4c:92:09:f4:29:26:78:1b:c2:01:6f:6a:3a:9f:f5:41: e2:c6:c3:67:e8:45:2e:6a:9d:39:c8:52:62:f7:75:55:ef:fa: 02:c4:fc:98:79:18:95:fb:9a:b7:13:9b:01:c7:db:9e:34:b1: 23:58:c6:a2:91:85:0b:6a:06:a0:74:5d:13:38:60:cd:32:7e: 40:cb:34:bd:47:7e:90:ad:c0:5b:0d:21:3d:c8:49:8b:9f:4d: fc:27:2c:d5 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUH1izxnmA2BP4ZMPHRM0lBHr6F58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjgxNzIyNDBaFw0yNjEwMjcxNzI3NDBaMDMxMTAvBgNV BAMTKDcwNUEyQUM2QzQwNTA3RDNENkU5OEVBNUVEQTRFNUVDRTk0OUJGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWCLLw49VfAE4hjXR8luToB/wV /6fjWb3mliAGb3hLAHUEv6X4L+JeRf9c4Mj2Mj7MNCiH44UIPQRMwByZe8ndCKwU X0umNYlL1lxmqzGs+h/t5ldrlTRRqDrpkajupbnhWV/i9bOmumVFIGJW9rd60q4F gebCPoWp+MfAj4jzX/bcFv6ZZ0oHRGqSQR8PmlYZDuBq+GMpy7EWpME7D6E1XlJE CsfJ0fvE89tRxH6Pa/fvAf1YisazI7+5EXoTVc3aCQNiSCuRoky9zD0Lk9vD/671 GELyFVo47DGbXH2s4veidbiBJRBrkrZK6z1SEddsdtg1WQprwv5J62ICDdKHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwWirGxAUH09bp jqXtpOXs6Um/djAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtq Q2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxLcHIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL akNkU2hrdjRZOWJodkNKeXlHejk0Rk5ZWTd5UGJpNTJkVFBaelZMS3ByLzAvNzA1 QTJBQzZDNDA1MDdEM0Q2RTk4RUE1RURBNEU1RUNFOTQ5QkY3Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCjwB8MA0EAgACMAcDBQAoBCkkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHQDANBgkqhkiG9w0BAQsFAAOCAQEAlx97MgNjYCNEhxRj 5Vkfui3r99c3+8DUVVPZvEnJ4Ubdu4U8eZp/HfGK4QRGmHqLKAtYq6ynoLDomtM8 zHJZy7K0QNMzmC26MfrLJ4014pBLH2F/EFqMkMXRL5oAD4yfeMabFMPw9gTieGTD 9/kArwYB412s1jdnd+7zukVaOOK21pz/hQc2hPV3OTXnesB0c0KRRZ4T5ROSpPYx RDhYuuqBj+5Mkgn0KSZ4G8IBb2o6n/VB4sbDZ+hFLmqdOchSYvd1Ve/6AsT8mHkY lfuatxObAcfbnjSxI1jGopGFC2oGoHRdEzhgzTJ+QMs0vUd+kK3AWw0hPchJi59N /Ccs1Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:50 2025 by rpki-client