$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer File: 85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.cer (raw, json) Hash identifier: x89oCzuwJJC5d3tWx9CJeyC6taNRmLlfNkZDc5RaNBQ= Subject key identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1AD0C2E38C7A6DF63081A933B60CDAC4BC03725F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft caRepository: rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 24 Jul 2025 16:56:38 +0000 Certificate not after: Thu 23 Jul 2026 17:01:38 +0000 Subordinate resources: AS: 273639 IP: 190.9.112.0/22 IP: 2804:89fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d0:c2:e3:8c:7a:6d:f6:30:81:a9:33:b6:0c:da:c4:bc:03:72:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 24 16:56:38 2025 GMT Not After : Jul 23 17:01:38 2026 GMT Subject: CN=85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:b4:4c:a4:af:a0:73:a3:fe:e8:68:65:10: 07:86:33:15:04:01:de:ae:0b:e6:3c:9f:3f:5a:0c: aa:be:c8:38:a5:d7:57:a8:bf:bb:03:80:cd:e8:e7: c7:d1:f2:41:a2:82:10:06:d1:1e:a8:c3:97:c7:8d: 9e:3a:cc:f2:e8:ec:63:23:c3:72:ad:2a:c8:1d:2e: ed:c3:c7:3d:53:e8:10:ec:67:7b:f4:d2:e8:f1:8c: 98:5f:9d:ef:14:c7:fe:02:a6:84:85:91:2f:a4:7f: 22:b4:92:a1:4b:c0:66:49:2e:2b:6f:1c:fc:42:d9: 1a:c6:a9:3d:27:2e:01:56:85:0c:27:24:35:76:51: 89:21:98:9e:9c:b8:b2:39:74:d5:65:d2:92:92:50: 38:e1:ea:62:ec:a0:e0:1d:ff:c1:24:f3:dd:93:82: 4e:cc:bd:ac:63:75:9e:f3:4a:b2:12:40:5d:f6:68: df:fe:3e:bf:dc:20:d9:85:b0:02:a8:34:f5:ea:91: cc:99:72:a3:a9:4e:58:c5:d1:b3:e6:eb:6c:51:b9: c8:0a:3f:1d:70:7f:07:d8:f6:98:e8:30:cd:08:78: 01:9f:78:0d:e4:29:83:b6:b1:33:44:52:25:41:7c: 98:ff:f0:e9:03:4a:45:4d:d0:29:2b:0e:70:10:dc: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:B0:D4:E0:DD:B2:4C:93:20:63:5A:9E:BE:E7:FB:DF:BE:41:F4:13 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MCAqBhEqiwukZBc3mdE2GaFppSDh9zeHLXELqgCAmRM/0/85B0D4E0DDB24C9320635A9EBEE7FBDFBE41F413.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.112.0/22 IPv6: 2804:89fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273639 Signature Algorithm: sha256WithRSAEncryption bb:0e:04:00:55:41:0c:9a:38:96:be:5c:12:57:de:01:03:65: 56:a1:f4:eb:bb:e8:aa:58:cd:e9:3b:cf:50:9c:74:dc:98:43: ed:c5:ef:21:ee:05:31:5b:2c:79:dc:c3:f2:c5:f5:98:37:ae: 1e:02:c7:86:d6:bb:47:71:95:9d:71:69:75:fd:b5:c0:68:25: aa:8a:18:cd:7f:c5:61:23:fb:e6:48:fe:39:25:20:d0:47:90: 75:64:8d:41:75:6c:91:09:38:3f:58:24:b0:6b:dd:cd:4f:15: 2c:75:38:e4:1b:fe:5d:c4:93:b6:3e:10:b7:75:fd:04:bc:6e: 4e:a8:3d:1e:4d:ce:7b:50:fa:ed:81:6e:4f:3b:4c:3b:f7:a5: b3:3e:ad:81:c2:94:c7:fb:6d:80:91:92:dd:c7:01:9e:be:2e: 74:54:9f:21:eb:45:32:af:15:c6:2b:60:da:ce:16:e4:c1:20: f6:78:60:ca:cb:02:b0:39:3c:40:08:6d:b5:fd:ea:83:8c:6b: eb:63:28:88:fb:7c:e3:e7:fa:de:1d:b2:bb:41:7d:b3:d6:2d: 91:b9:2c:00:8d:3a:ad:36:68:a9:4b:61:f1:47:7a:d1:96:b8: 5f:85:79:7a:ef:c5:a1:b4:6d:49:48:b4:ff:f5:e1:18:5a:de: 16:c0:01:46 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUGtDC44x6bfYwgakztgzaxLwDcl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MjQxNjU2MzhaFw0yNjA3MjMxNzAxMzhaMDMxMTAvBgNV BAMTKDg1QjBENEUwRERCMjRDOTMyMDYzNUE5RUJFRTdGQkRGQkU0MUY0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnbRMpK+gc6P+6GhlEAeGMxUE Ad6uC+Y8nz9aDKq+yDil11eov7sDgM3o58fR8kGighAG0R6ow5fHjZ46zPLo7GMj w3KtKsgdLu3Dxz1T6BDsZ3v00ujxjJhfne8Ux/4CpoSFkS+kfyK0kqFLwGZJLitv HPxC2RrGqT0nLgFWhQwnJDV2UYkhmJ6cuLI5dNVl0pKSUDjh6mLsoOAd/8Ek892T gk7MvaxjdZ7zSrISQF32aN/+Pr/cINmFsAKoNPXqkcyZcqOpTljF0bPm62xRucgK Px1wfwfY9pjoMM0IeAGfeA3kKYO2sTNEUiVBfJj/8OkDSkVN0CkrDnAQ3DZ9AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFsNTg3bJMkyBj Wp6+5/vfvkH0EzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTUNB cUJoRXFpd3VrWkJjM21kRTJHYUZwcFNEaDl6ZUhMWEVMcWdDQW1STS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTUNB cUJoRXFpd3VrWkJjM21kRTJHYUZwcFNEaDl6ZUhMWEVMcWdDQW1STS8wLzg1QjBE NEUwRERCMjRDOTMyMDYzNUE5RUJFRTdGQkRGQkU0MUY0MTMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAr4JcDANBAIAAjAHAwUAKASJ/DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMELOcwDQYJKoZIhvcNAQELBQADggEBALsOBABVQQyaOJa+XBJX 3gEDZVah9Ou76KpYzek7z1CcdNyYQ+3F7yHuBTFbLHncw/LF9Zg3rh4Cx4bWu0dx lZ1xaXX9tcBoJaqKGM1/xWEj++ZI/jklINBHkHVkjUF1bJEJOD9YJLBr3c1PFSx1 OOQb/l3Ek7Y+ELd1/QS8bk6oPR5NzntQ+u2Bbk87TDv3pbM+rYHClMf7bYCRkt3H AZ6+LnRUnyHrRTKvFcYrYNrOFuTBIPZ4YMrLArA5PEAIbbX96oOMa+tjKIj7fOPn +t4dsrtBfbPWLZG5LACNOq02aKlLYfFHetGWuF+FeXrvxaG0bUlItP/14Rha3hbA AUY= -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:46 2025 by rpki-client