$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer (raw, json) Hash identifier: 33SzBJbLumNMYa3XXLYO7eQFjh4rlkEF/qd6aYREuOY= Subject key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 62049AD4B6E7EEB0029B99EA0C356AB5BA8246E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft caRepository: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 19:15:50 +0000 Certificate not after: Wed 07 Oct 2026 19:20:50 +0000 Subordinate resources: AS: 268923 IP: 45.175.244.0/22 IP: 2804:5cac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:04:9a:d4:b6:e7:ee:b0:02:9b:99:ea:0c:35:6a:b5:ba:82:46:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 8 19:15:50 2025 GMT Not After : Oct 7 19:20:50 2026 GMT Subject: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c8:14:04:17:00:48:8d:43:84:11:71:a6:65: 47:df:02:a4:d6:79:da:12:67:ea:73:f9:38:7a:87: 37:5e:4f:8e:23:36:0d:67:5e:a3:d7:f2:77:50:85: 7a:39:73:57:19:99:70:96:2b:98:45:42:d8:42:85: 87:88:6a:03:01:ac:5c:fb:f6:55:1e:21:b0:7f:bc: 11:c1:a6:bc:e5:a9:5e:e1:e1:92:64:1c:f8:38:ad: ee:26:db:97:00:4f:13:19:45:5d:04:6e:c9:a9:ad: e7:ac:e6:e7:16:1d:84:8d:8a:07:9d:35:99:f4:9b: 48:79:46:4b:38:85:49:a5:4d:25:2f:4f:4f:ec:c7: 9b:35:d9:af:82:40:0d:08:14:61:ad:a6:6c:72:89: 4a:f5:b8:49:bc:fa:ab:31:22:02:2c:de:4f:13:b8: a2:82:6a:ea:26:65:d5:2c:ff:e3:c7:04:fd:3c:cc: cb:35:e7:dc:20:41:9a:17:08:ff:28:7d:88:e8:fb: 40:c7:31:5b:b6:93:2c:bf:7e:48:85:af:f4:c3:45: 79:b9:92:67:5b:06:e8:a9:ed:4e:bd:f9:d0:4b:2c: bb:06:f2:cb:58:4c:75:69:82:8e:1b:a3:ef:c0:66: 0c:47:3e:f7:d0:74:47:a0:33:81:26:59:d2:b7:78: 0d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.244.0/22 IPv6: 2804:5cac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268923 Signature Algorithm: sha256WithRSAEncryption 27:32:96:48:8b:a3:34:ff:bf:12:cb:9d:f7:46:7c:a6:99:ca: 14:e1:9f:9f:d9:ab:9f:c6:c7:2b:ee:34:4c:b5:5a:66:7c:3d: 4b:d9:0a:ac:98:c4:2a:14:7d:34:ce:e8:86:63:6e:9d:f2:3e: 01:f0:8f:04:b7:19:53:2c:09:ef:bf:d5:31:0f:a0:4f:45:2c: a6:dc:f5:4d:f6:8c:4e:cd:5e:0c:69:1d:58:ab:14:19:a6:c1: 04:bb:81:0e:3b:4b:01:21:25:1f:35:84:f6:cd:7c:16:06:cb: fc:dd:36:d9:3d:21:25:33:1a:58:3f:9d:22:e5:a8:cb:c4:b3: 8c:e0:cb:b6:7a:0d:e7:fb:d4:52:8e:61:b8:b9:a1:ae:57:22: ca:84:72:07:3d:61:b2:9e:d5:7d:6c:d2:07:3c:1a:b6:49:90: a1:93:b3:13:93:a3:ea:4f:90:f5:ac:d3:ee:ab:ec:57:2d:39: a4:39:14:fe:bf:aa:6a:e8:67:3f:26:f8:fa:14:82:cd:4a:69: f2:8d:4c:a2:72:cb:24:74:ce:da:db:80:81:9e:9f:ff:c6:1c: e5:16:22:c1:08:e6:61:b7:49:b7:72:15:db:78:4d:c0:b8:3f: 9a:53:71:7d:3b:b4:f5:b0:3d:74:fa:3e:61:3f:cd:47:44:a3: 74:e5:2b:39 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYgSa1Lbn7rACm5nqDDVqtbqCRuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDgxOTE1NTBaFw0yNjEwMDcxOTIwNTBaMDMxMTAvBgNV BAMTKDg4RDFCMjA3RDVBQTk3MjgxNzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsyBQEFwBIjUOEEXGmZUffAqTW edoSZ+pz+Th6hzdeT44jNg1nXqPX8ndQhXo5c1cZmXCWK5hFQthChYeIagMBrFz7 9lUeIbB/vBHBprzlqV7h4ZJkHPg4re4m25cATxMZRV0Ebsmprees5ucWHYSNiged NZn0m0h5Rks4hUmlTSUvT0/sx5s12a+CQA0IFGGtpmxyiUr1uEm8+qsxIgIs3k8T uKKCauomZdUs/+PHBP08zMs159wgQZoXCP8ofYjo+0DHMVu2kyy/fkiFr/TDRXm5 kmdbBuip7U69+dBLLLsG8stYTHVpgo4bo+/AZgxHPvfQdEegM4EmWdK3eA2PAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSI0bIH1aqXKBcy BKjc64qm5Fu8CjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5n d1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu Z3dWR3JvZmtVenpxNWk2NmtTN214cGltOGZjOEhjcUVmUTZMbm5LZXhRLzAvODhE MUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZFNDVCQkMwQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa/0MA0EAgACMAcDBQAoBFysMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaezANBgkqhkiG9w0BAQsFAAOCAQEAJzKWSIujNP+/Esud 90Z8ppnKFOGfn9mrn8bHK+40TLVaZnw9S9kKrJjEKhR9NM7ohmNunfI+AfCPBLcZ UywJ77/VMQ+gT0Usptz1TfaMTs1eDGkdWKsUGabBBLuBDjtLASElHzWE9s18FgbL /N022T0hJTMaWD+dIuWoy8SzjODLtnoN5/vUUo5huLmhrlciyoRyBz1hsp7VfWzS BzwatkmQoZOzE5Oj6k+Q9azT7qvsVy05pDkU/r+qauhnPyb4+hSCzUpp8o1MonLL JHTO2tuAgZ6f/8Yc5RYiwQjmYbdJt3IV23hNwLg/mlNxfTu09bA9dPo+YT/NR0Sj dOUrOQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:07 2025 by rpki-client