$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer File: 86B2810A6C4EB421987C3396698910082BEA85F9.cer (raw, json) Hash identifier: /cJy/4ktsVJ95WcXCv+rUrKrj2Wd/fuQrFyrEQ8pus8= Subject key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6CC57AD75DDB6950053FAD2C8916201389080B76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft caRepository: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 25 Aug 2025 11:43:23 +0000 Certificate not after: Mon 24 Aug 2026 11:48:23 +0000 Subordinate resources: AS: 268444 IP: 45.161.64.0/22 IP: 2804:514c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c5:7a:d7:5d:db:69:50:05:3f:ad:2c:89:16:20:13:89:08:0b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 25 11:43:23 2025 GMT Not After : Aug 24 11:48:23 2026 GMT Subject: CN=86B2810A6C4EB421987C3396698910082BEA85F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:22:52:d3:05:6c:40:a1:66:2d:c5:22:dd: 97:68:8f:f6:f7:04:f7:58:0a:15:7b:64:6c:37:4c: 07:7a:55:02:49:ae:9f:f7:3e:96:77:85:8c:a7:3d: 9a:97:a4:d6:bb:ca:8e:16:85:34:e7:9d:a0:db:88: 4f:d3:03:2e:03:c1:a4:93:cc:29:24:6a:75:c1:a0: 5c:94:02:fb:a2:42:d0:10:a1:12:ee:06:ba:7d:f2: b6:c8:aa:35:df:dd:3d:0b:b2:6a:6f:ac:d1:a6:cd: e9:d3:72:dc:c5:2a:6f:7d:d9:94:6e:42:b0:11:87: 60:9e:7b:28:86:ac:e1:25:0b:04:6d:57:bb:85:79: de:80:02:e3:bc:24:07:49:84:34:dd:9e:50:4b:ba: a0:f7:d4:45:d5:52:08:fa:e3:3a:20:a4:5f:aa:b6: 06:4f:7d:a5:73:12:de:75:20:06:e5:98:6e:ae:25: 1f:78:5b:a5:e7:22:8d:39:be:b6:66:49:dc:5c:ae: 39:1e:8f:5d:34:f0:d3:33:02:10:e7:a2:ae:ff:73: e7:e9:f9:7c:08:1e:94:8a:32:c2:29:61:6f:aa:3b: 27:c6:25:c0:8e:89:7b:db:9e:52:13:f3:00:41:9c: f1:85:16:05:d7:c9:3b:7e:c9:37:a2:87:92:e2:33: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.64.0/22 IPv6: 2804:514c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268444 Signature Algorithm: sha256WithRSAEncryption 65:1f:68:f6:7a:56:5b:fc:cf:ea:3e:43:d8:41:13:14:8b:9d: a5:b0:b9:cf:c9:6c:f8:04:d0:01:46:90:e6:5c:f7:3f:fe:5b: 2c:01:14:db:e3:1e:8b:77:6c:91:82:1e:b2:0a:98:b6:6b:25: db:86:9e:db:70:a1:92:b3:46:db:9e:a9:8b:93:7c:65:55:f9: a8:15:f4:6e:fb:ae:99:7f:61:38:7d:86:2f:c6:da:95:fc:e1: 35:4d:96:91:cf:c0:36:04:ce:a8:26:e0:be:fd:58:52:bc:57: bb:14:b1:ab:7d:73:bd:cd:f0:fd:9f:57:21:47:0d:78:49:2f: 86:0d:79:f2:cc:0c:8f:d4:ac:b9:53:e4:74:a0:f2:81:44:14: 49:4d:d8:63:4a:0c:a3:9b:ef:76:b8:34:2f:14:61:de:b9:b6: 70:30:ed:04:61:85:98:52:39:71:8d:b8:ad:30:a9:43:59:92: c0:78:82:98:2d:32:6e:5b:a5:71:d3:c6:f2:fa:74:b2:da:e2: 87:03:37:b1:ab:94:10:7f:3d:52:90:41:c9:cc:c1:56:24:9a: c7:d5:38:5f:eb:32:a5:c6:b0:93:f8:13:28:58:2c:b9:64:a8: d9:9f:6f:73:e1:6f:a7:e3:5e:0f:35:84:37:03:62:83:37:63: e4:de:c1:6c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbMV6113baVAFP60siRYgE4kIC3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjUxMTQzMjNaFw0yNjA4MjQxMTQ4MjNaMDMxMTAvBgNV BAMTKDg2QjI4MTBBNkM0RUI0MjE5ODdDMzM5NjY5ODkxMDA4MkJFQTg1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAiJS0wVsQKFmLcUi3Zdoj/b3 BPdYChV7ZGw3TAd6VQJJrp/3PpZ3hYynPZqXpNa7yo4WhTTnnaDbiE/TAy4DwaST zCkkanXBoFyUAvuiQtAQoRLuBrp98rbIqjXf3T0LsmpvrNGmzenTctzFKm992ZRu QrARh2CeeyiGrOElCwRtV7uFed6AAuO8JAdJhDTdnlBLuqD31EXVUgj64zogpF+q tgZPfaVzEt51IAblmG6uJR94W6XnIo05vrZmSdxcrjkej1008NMzAhDnoq7/c+fp +XwIHpSKMsIpYW+qOyfGJcCOiXvbnlIT8wBBnPGFFgXXyTt+yTeih5LiM/gpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGsoEKbE60IZh8 M5ZpiRAIK+qF+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkxO cnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBwNW4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJM TnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzAvODZC MjgxMEE2QzRFQjQyMTk4N0MzMzk2Njk4OTEwMDgyQkVBODVGOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaFAMA0EAgACMAcDBQAoBFFMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYnDANBgkqhkiG9w0BAQsFAAOCAQEAZR9o9npWW/zP6j5D 2EETFIudpbC5z8ls+ATQAUaQ5lz3P/5bLAEU2+Mei3dskYIesgqYtmsl24ae23Ch krNG256pi5N8ZVX5qBX0bvuumX9hOH2GL8balfzhNU2Wkc/ANgTOqCbgvv1YUrxX uxSxq31zvc3w/Z9XIUcNeEkvhg158swMj9SsuVPkdKDygUQUSU3YY0oMo5vvdrg0 LxRh3rm2cDDtBGGFmFI5cY24rTCpQ1mSwHiCmC0yblulcdPG8vp0strihwM3sauU EH89UpBByczBViSax9U4X+sypcawk/gTKFgsuWSo2Z9vc+Fvp+NeDzWENwNigzdj 5N7BbA== -----END CERTIFICATE-----Generated at Sun Nov 2 23:04:04 2025 by rpki-client