$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer File: 8F91E515016C4617D482162163052E1ABB4B35B2.cer (raw, json) Hash identifier: BJxuMPIlkV+zleNB9UValRWNkCBo9wFDun0/xgURsY4= Subject key identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 077DD995B3862390D43E566D4FA752BA493B616C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft caRepository: rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 19:26:26 +0000 Certificate not after: Mon 26 Oct 2026 19:31:26 +0000 Subordinate resources: AS: 267459 IP: 192.141.88.0/22 IP: 2804:41d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7d:d9:95:b3:86:23:90:d4:3e:56:6d:4f:a7:52:ba:49:3b:61:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 27 19:26:26 2025 GMT Not After : Oct 26 19:31:26 2026 GMT Subject: CN=8F91E515016C4617D482162163052E1ABB4B35B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:63:e9:28:78:b3:78:0c:8b:64:34:96:9f: 7b:3a:31:5a:e8:9c:c1:9e:89:e5:d5:92:1e:fd:59: db:45:13:40:7b:f2:da:64:3d:16:2d:ed:c5:45:71: 09:af:6e:53:f3:dd:7a:e3:49:af:d2:ce:23:b0:de: 0d:84:52:5d:06:1f:25:32:39:b5:c8:79:8f:c0:47: ff:7c:1a:eb:23:56:83:b9:86:14:0c:9a:ad:3b:b7: d0:59:47:1d:8a:91:b2:c0:c5:f6:0b:6c:ba:3e:98: 90:13:ff:9a:62:2f:9e:38:8e:0c:2d:eb:94:95:ac: b5:f4:4d:34:db:2f:ab:13:5d:af:1f:be:b5:4e:ac: cb:3b:08:6c:c8:11:12:06:ca:e1:98:03:d3:9e:ed: 9b:2b:80:71:f0:7f:d2:16:04:9b:b6:44:94:ef:eb: fb:0d:bf:76:f8:f5:3f:1e:07:3f:a7:fd:36:d1:c9: 42:49:18:93:6e:6c:71:6b:45:9b:a5:74:40:51:b8: fd:a3:2e:26:11:8f:32:d4:24:72:4f:78:23:20:72: 59:0f:75:26:90:75:7e:e5:ea:2e:0d:4b:16:72:be: ed:fa:e3:ba:c7:4f:f3:16:3d:d3:5e:2d:43:0f:ab: bb:77:8b:89:c2:3f:ae:59:26:33:72:97:fe:8e:da: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.88.0/22 IPv6: 2804:41d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267459 Signature Algorithm: sha256WithRSAEncryption b0:d5:33:af:78:8f:d8:5f:d2:b5:33:ed:ae:85:82:b7:bb:7e: de:eb:52:d2:c8:04:bb:35:b0:b1:cb:46:00:f0:e5:78:61:54: 01:6e:0a:96:5e:63:1e:49:4c:f3:ce:72:15:28:51:76:bd:c6: ba:fe:ea:08:1e:f8:6f:c0:13:3a:63:cd:a4:f3:3f:28:aa:e8: c3:a9:4c:dd:99:e8:1c:2c:02:90:ea:8a:2a:7e:85:e5:35:54: 16:ca:73:1e:a4:5e:7c:a0:78:86:23:57:4d:6d:1f:8b:23:1a: 5b:ed:c1:07:5b:56:12:66:7c:c4:d1:6b:84:7c:3a:2a:0a:9b: 58:1e:0e:5d:0c:2b:9d:4f:31:8f:83:04:08:b2:65:15:0f:05: de:0a:ec:94:18:3c:36:e1:02:16:15:6c:30:86:49:b9:cd:7c: 17:42:d1:c1:9c:e2:0a:54:5d:f7:b7:96:79:10:c5:8c:0c:f5: 6b:47:1d:71:79:87:2d:2f:3b:ad:03:25:ab:6c:b5:5a:f6:33: 8d:8c:25:94:3e:ef:8f:0d:41:01:1b:36:dc:e0:c2:93:53:b0: 71:b8:4a:eb:e1:c5:10:20:d3:5f:cb:f9:ee:22:08:59:12:be: 48:6f:28:09:0b:39:79:dc:e8:81:ce:9e:51:04:36:20:f1:eb: 0b:55:77:e7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUB33ZlbOGI5DUPlZtT6dSukk7YWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjcxOTI2MjZaFw0yNjEwMjYxOTMxMjZaMDMxMTAvBgNV BAMTKDhGOTFFNTE1MDE2QzQ2MTdENDgyMTYyMTYzMDUyRTFBQkI0QjM1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUmPpKHizeAyLZDSWn3s6MVro nMGeieXVkh79WdtFE0B78tpkPRYt7cVFcQmvblPz3XrjSa/SziOw3g2EUl0GHyUy ObXIeY/AR/98GusjVoO5hhQMmq07t9BZRx2KkbLAxfYLbLo+mJAT/5piL544jgwt 65SVrLX0TTTbL6sTXa8fvrVOrMs7CGzIERIGyuGYA9Oe7ZsrgHHwf9IWBJu2RJTv 6/sNv3b49T8eBz+n/TbRyUJJGJNubHFrRZuldEBRuP2jLiYRjzLUJHJPeCMgclkP dSaQdX7l6i4NSxZyvu3647rHT/MWPdNeLUMPq7t3i4nCP65ZJjNyl/6O2sSBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPkeUVAWxGF9SC FiFjBS4au0s1sjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSERR NnhobkNLTFlMY1l3NUxSTm91R0YxRW1hRUJFa2ppc3c4alppTHB1dVMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hE UTZ4aG5DS0xZTGNZdzVMUk5vdUdGMUVtYUVCRWtqaXN3OGpaaUxwdXVTLzAvOEY5 MUU1MTUwMTZDNDYxN0Q0ODIxNjIxNjMwNTJFMUFCQjRCMzVCMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwI1YMA0EAgACMAcDBQAoBEHUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUwzANBgkqhkiG9w0BAQsFAAOCAQEAsNUzr3iP2F/StTPt roWCt7t+3utS0sgEuzWwsctGAPDleGFUAW4Kll5jHklM885yFShRdr3Guv7qCB74 b8ATOmPNpPM/KKrow6lM3ZnoHCwCkOqKKn6F5TVUFspzHqRefKB4hiNXTW0fiyMa W+3BB1tWEmZ8xNFrhHw6KgqbWB4OXQwrnU8xj4MECLJlFQ8F3grslBg8NuECFhVs MIZJuc18F0LRwZziClRd97eWeRDFjAz1a0cdcXmHLS87rQMlq2y1WvYzjYwllD7v jw1BARs23ODCk1OwcbhK6+HFECDTX8v57iIIWRK+SG8oCQs5edzogc6eUQQ2IPHr C1V35w== -----END CERTIFICATE-----Generated at Mon Nov 3 05:21:01 2025 by rpki-client