$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer File: 8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer (raw, json) Hash identifier: XkTKDPvRARPlcdF3uZyj4sTOVLYHSrwZG9K18ARslzs= Subject key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1C0E5165520692840ABBB2017ADD1A1592F8EE02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft caRepository: rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 16:46:29 +0000 Certificate not after: Thu 06 Aug 2026 16:51:29 +0000 Subordinate resources: AS: 267422 IP: 45.235.132.0/22 IP: 2804:4d4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0e:51:65:52:06:92:84:0a:bb:b2:01:7a:dd:1a:15:92:f8:ee:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 7 16:46:29 2025 GMT Not After : Aug 6 16:51:29 2026 GMT Subject: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:3a:93:bd:84:56:41:9a:2e:70:21:92:eb: 87:b4:33:61:dd:d6:16:28:ed:3a:52:d3:5c:30:85: 67:8d:36:9d:36:03:94:5b:86:b7:bb:00:43:6a:df: f4:41:bf:10:1c:2c:d1:e9:10:e5:bc:a0:6e:36:32: 97:1d:e2:27:7d:4a:e0:f1:29:b2:bf:f4:d0:50:83: fd:d7:bb:bd:52:2a:7d:84:06:70:8e:f7:44:9b:36: 3f:35:5b:14:45:be:17:d3:51:d9:40:fe:f8:ad:b2: 91:e2:6b:eb:c8:1b:cf:5a:79:b4:c3:47:d2:67:ba: f1:19:f2:44:10:9e:75:a0:6d:bc:6b:7c:5b:bf:33: 47:96:2a:15:9f:40:03:58:98:c3:d3:48:3c:64:02: b5:64:5f:00:e8:72:13:b6:e0:d7:58:38:a3:bf:b4: 5e:42:d1:b6:9e:b2:d2:a5:37:59:54:b4:d4:e7:d2: 80:ea:2b:39:73:ce:bb:48:a3:af:3f:03:5e:32:27: 3b:22:f0:08:3a:a3:47:fd:79:e3:34:77:bb:3f:19: f1:e7:ce:0a:36:54:10:06:74:a5:68:52:b1:93:2b: 85:36:85:49:52:fb:ed:3c:0c:e8:f1:4f:b7:c6:df: 02:08:f7:fa:2e:77:35:2d:51:97:12:0e:78:12:3c: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.132.0/22 IPv6: 2804:4d4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267422 Signature Algorithm: sha256WithRSAEncryption 21:85:d5:0e:d7:0a:b2:12:ff:8f:b1:83:dc:13:e5:2f:47:09: 84:a9:78:76:6c:9e:59:e9:80:47:63:d0:5f:5d:d9:f1:71:3c: b6:4e:5e:bf:5f:54:b9:26:e0:8f:e7:e4:61:78:1b:a6:b8:30: 28:53:bf:96:54:0f:9a:fa:e8:06:eb:2b:ae:7c:95:dc:81:44: 00:be:47:63:a2:9d:6e:c6:dc:e5:e8:e2:30:4f:37:db:ee:11: a5:8b:03:fc:08:d2:f5:a2:e4:75:fb:09:29:4c:66:4d:93:45: 74:da:83:86:b8:23:6d:58:5c:2a:76:06:58:31:f7:45:37:fd: 7e:19:fc:bf:24:f7:f0:f5:d6:7c:60:7e:ca:be:3d:db:51:7d: 65:95:3c:98:00:cf:5d:e7:30:24:2d:0a:c9:3c:68:63:23:54: 97:7f:c1:b0:ec:d4:ac:ec:71:29:10:ee:58:9d:ba:0d:50:5d: 65:bf:f9:42:09:db:91:aa:71:65:cd:e1:b1:05:ba:24:a3:6b: e2:b4:0f:fc:51:c0:12:ed:97:2d:d5:84:18:3e:24:6f:9d:3c: aa:32:e4:65:43:00:ca:1f:23:7e:34:19:dd:bf:ff:bc:91:e3: 22:c2:e5:ef:53:92:b1:b6:78:3a:25:07:4b:a2:94:4d:86:1d: 14:44:22:53 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHA5RZVIGkoQKu7IBet0aFZL47gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDcxNjQ2MjlaFw0yNjA4MDYxNjUxMjlaMDMxMTAvBgNV BAMTKDhCODlGRDExN0ZGNTJBMDE5OURCQzUwMDJDMUJDN0Q0NEUyMDRBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7TqTvYRWQZoucCGS64e0M2Hd 1hYo7TpS01wwhWeNNp02A5Rbhre7AENq3/RBvxAcLNHpEOW8oG42Mpcd4id9SuDx KbK/9NBQg/3Xu71SKn2EBnCO90SbNj81WxRFvhfTUdlA/vitspHia+vIG89aebTD R9JnuvEZ8kQQnnWgbbxrfFu/M0eWKhWfQANYmMPTSDxkArVkXwDochO24NdYOKO/ tF5C0baestKlN1lUtNTn0oDqKzlzzrtIo68/A14yJzsi8Ag6o0f9eeM0d7s/GfHn zgo2VBAGdKVoUrGTK4U2hUlS++08DOjxT7fG3wII9/oudzUtUZcSDngSPJhHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLif0Rf/UqAZnb xQAsG8fUTiBK0jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVFw czk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdmTDEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVR cHM5OGdVNHZucFdFdVg2UFRhWm9iVVRGeFRLUE1yZUJ1WUhSaDJnZkwxLzAvOEI4 OUZEMTE3RkY1MkEwMTk5REJDNTAwMkMxQkM3RDQ0RTIwNEFEMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeuEMA0EAgACMAcDBQAoBE1MMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUnjANBgkqhkiG9w0BAQsFAAOCAQEAIYXVDtcKshL/j7GD 3BPlL0cJhKl4dmyeWemAR2PQX13Z8XE8tk5ev19UuSbgj+fkYXgbprgwKFO/llQP mvroBusrrnyV3IFEAL5HY6Kdbsbc5ejiME832+4RpYsD/AjS9aLkdfsJKUxmTZNF dNqDhrgjbVhcKnYGWDH3RTf9fhn8vyT38PXWfGB+yr4921F9ZZU8mADPXecwJC0K yTxoYyNUl3/BsOzUrOxxKRDuWJ26DVBdZb/5QgnbkapxZc3hsQW6JKNr4rQP/FHA Eu2XLdWEGD4kb508qjLkZUMAyh8jfjQZ3b//vJHjIsLl71OSsbZ4OiUHS6KUTYYd FEQiUw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:38:21 2025 by rpki-client