$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer File: 7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer (raw, json) Hash identifier: aYhr/CahmQ4A8WbVQCvN4Ry2XWGDz0hTuNGeau0Lg6o= Subject key identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: D6B3F6DD2D1BE4B490D8FB7BC6CAEA68BF5201 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft caRepository: rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 17:48:04 +0000 Certificate not after: Fri 06 Mar 2026 17:53:04 +0000 Subordinate resources: AS: 268089 IP: 45.168.188.0/22 IP: 2804:57d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d6:b3:f6:dd:2d:1b:e4:b4:90:d8:fb:7b:c6:ca:ea:68:bf:52:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 17:48:04 2025 GMT Not After : Mar 6 17:53:04 2026 GMT Subject: CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:09:4a:06:3f:4c:26:c0:b4:cc:43:3c:e7: 34:d7:9b:58:88:51:6c:78:8f:91:ba:5f:90:db:4d: 67:5d:4d:e2:c4:b9:fc:fd:84:4c:f0:86:25:9e:b2: 5a:5b:4e:ef:8c:ba:ff:1c:32:37:09:30:62:13:e3: 2c:63:eb:46:b7:02:c6:61:45:96:6f:56:51:ea:80: 20:01:92:0b:f4:ec:a9:80:d3:fb:26:eb:4e:0e:d3: b8:57:26:b3:93:ba:e2:22:a9:d9:67:a5:f2:90:64: da:04:c3:dd:1a:06:e2:ab:1f:cd:d9:65:fe:45:8d: 3f:07:b7:9a:e4:56:78:0f:03:b2:17:87:9d:68:7c: 17:3b:84:eb:cb:44:18:d6:bf:50:00:31:c1:3d:c2: 82:ac:ec:a2:51:16:b3:de:6a:d6:f9:ca:95:20:fb: 14:b9:ba:dd:46:70:ba:30:15:f1:59:d1:ec:f3:44: e5:06:4d:93:1c:0b:2e:52:03:5d:7c:96:29:87:44: d9:60:7c:c2:d5:17:7d:03:a1:1b:62:b1:f6:52:72: 1f:ef:b0:20:bb:a5:35:53:cf:f0:a8:9b:07:ca:22: 17:6a:be:38:0f:3a:ce:83:7b:cd:19:84:24:cc:69: 78:6e:94:d6:fe:bc:85:9c:d9:2c:0c:fb:8c:c4:23: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.188.0/22 IPv6: 2804:57d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268089 Signature Algorithm: sha256WithRSAEncryption 53:19:40:90:c4:67:3d:77:7a:09:57:27:e8:08:c2:c2:32:7c: b8:17:81:11:b3:a4:37:32:98:a5:5c:d7:6a:c1:21:a3:ed:87: be:be:da:37:7d:60:0e:14:c9:a1:4c:91:9f:d9:c5:29:65:2c: ef:a3:97:3f:69:24:d2:bf:16:29:8b:1a:d4:29:1c:e5:4c:ba: 13:ec:ce:b5:32:48:23:e4:d0:01:24:43:cd:0d:81:0e:05:57: 41:e1:70:bb:23:42:e8:fd:3b:ab:65:46:02:a8:44:01:3c:0e: b8:9b:b7:2c:08:12:f9:a3:a1:51:59:de:1a:a5:3f:cb:f5:fe: 8c:7e:72:81:94:55:fe:9a:4c:06:a5:d8:af:9d:63:f7:4c:53: 86:ad:d3:0b:e0:7a:63:b5:ff:9e:d8:58:02:0c:6d:e3:48:2b: cb:7b:3b:b1:ac:e5:56:cf:42:d9:94:8a:e3:81:17:a7:c6:c8: 1b:9d:43:cb:aa:75:01:bd:aa:e1:79:75:85:f8:57:fa:5b:34: 85:fb:2b:35:10:01:4c:ec:37:58:fa:4a:bc:94:8d:3f:f2:cd: 76:bc:0c:1f:af:e1:99:dc:1b:98:c3:49:57:c0:e5:16:7a:77: f1:a7:6a:38:1e:5e:6f:bf:37:b5:1f:e4:b0:27:cb:8b:c2:18: 31:0a:19:6c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUANaz9t0tG+S0kNj7e8bK6mi/UgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNzQ4MDRaFw0yNjAzMDYxNzUzMDRaMDMxMTAvBgNV BAMTKDdEMkZFRUM0RDRBQzc4QjhFNkE2QjBDMEM2QTNBMDJDNDhBOUYyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIwlKBj9MJsC0zEM85zTXm1iI UWx4j5G6X5DbTWddTeLEufz9hEzwhiWeslpbTu+Muv8cMjcJMGIT4yxj60a3AsZh RZZvVlHqgCABkgv07KmA0/sm604O07hXJrOTuuIiqdlnpfKQZNoEw90aBuKrH83Z Zf5FjT8Ht5rkVngPA7IXh51ofBc7hOvLRBjWv1AAMcE9woKs7KJRFrPeatb5ypUg +xS5ut1GcLowFfFZ0ezzROUGTZMcCy5SA118limHRNlgfMLVF30DoRtisfZSch/v sCC7pTVTz/ComwfKIhdqvjgPOs6De80ZhCTMaXhulNb+vIWc2SwM+4zEIxO/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9L+7E1Kx4uOam sMDGo6AsSKnyDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JX YVcxVmFnalJuUVpZSjMxYktRWGZoSFJmTGdWU0hSVDZ2NXhoa05qNjIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdy V2FXMVZhZ2pSblFaWUozMWJLUVhmaEhSZkxnVlNIUlQ2djV4aGtOajYyLzEvN0Qy RkVFQzRENEFDNzhCOEU2QTZCMEMwQzZBM0EwMkM0OEE5RjIwRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLai8MA0EAgACMAcDBQAoBFfUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXOTANBgkqhkiG9w0BAQsFAAOCAQEAUxlAkMRnPXd6CVcn 6AjCwjJ8uBeBEbOkNzKYpVzXasEho+2Hvr7aN31gDhTJoUyRn9nFKWUs76OXP2kk 0r8WKYsa1Ckc5Uy6E+zOtTJII+TQASRDzQ2BDgVXQeFwuyNC6P07q2VGAqhEATwO uJu3LAgS+aOhUVneGqU/y/X+jH5ygZRV/ppMBqXYr51j90xThq3TC+B6Y7X/nthY Agxt40gry3s7sazlVs9C2ZSK44EXp8bIG51Dy6p1Ab2q4Xl1hfhX+ls0hfsrNRAB TOw3WPpKvJSNP/LNdrwMH6/hmdwbmMNJV8DlFnp38adqOB5eb783tR/ksCfLi8IY MQoZbA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:28 2025 by rpki-client