$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer File: 8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer (raw, json) Hash identifier: XSYSQMuXhwqDVCmxW/5maPSEuOzu1K3dlpr7WKKEj+M= Subject key identifier: 8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D44F795DB826DADBAFEA32BC0BB3350A5A8A677 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft caRepository: rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 19:22:28 +0000 Certificate not after: Mon 26 Oct 2026 19:27:28 +0000 Subordinate resources: AS: 263411 IP: 179.97.24.0/21 IP: 2804:15cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:44:f7:95:db:82:6d:ad:ba:fe:a3:2b:c0:bb:33:50:a5:a8:a6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 27 19:22:28 2025 GMT Not After : Oct 26 19:27:28 2026 GMT Subject: CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:da:87:a3:a7:8a:7c:2c:b0:87:1e:b5:95: 0a:f9:fd:00:1b:0e:ce:4e:4e:2c:55:b1:f9:05:2c: 7e:ed:d2:08:37:cd:87:cc:f4:7d:4d:fc:9e:29:c2: 81:73:10:9d:00:06:59:9b:29:80:f1:74:db:d0:38: 17:68:df:d7:55:f5:a2:37:cd:e0:e4:ae:60:98:2d: 3d:ac:05:c0:4b:c6:5a:54:ab:10:0a:a5:2a:5b:a4: 12:a2:2d:f0:e5:ec:36:ce:8a:25:7c:82:a3:7e:15: 19:59:d9:7d:a7:38:33:08:1c:bb:01:df:b0:a5:c8: e0:2d:18:3d:5a:1b:38:71:21:ae:b6:c5:1a:a4:83: e6:4a:65:02:37:cf:16:2b:a3:0a:6a:f2:8b:4a:62: 99:95:7f:55:bb:8f:ba:57:9a:ec:74:5a:1c:65:01: 31:3c:f4:18:50:61:33:0b:ba:a8:5e:63:92:6e:bb: 07:84:0b:aa:7a:c2:f5:08:3b:ef:15:c9:eb:c4:fe: 66:e6:be:c4:4e:f8:88:8e:50:7d:5f:90:3a:d7:75: cd:77:a9:2a:bc:52:d8:4f:78:54:73:75:e5:44:17: 93:7e:81:04:5b:ce:12:6e:64:0e:19:82:ce:46:23: 72:d1:bf:a7:db:14:4c:60:42:07:22:0c:a6:f4:18: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.97.24.0/21 IPv6: 2804:15cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263411 Signature Algorithm: sha256WithRSAEncryption 11:a2:25:e4:5d:63:1f:de:8a:5c:ad:2a:55:6f:d1:f2:a0:fa: 47:fa:4e:3a:e2:1f:92:c2:b8:e5:71:be:22:06:c1:6c:dd:1a: 18:5c:7b:1d:92:ed:e4:13:fe:79:fd:bc:e7:4a:77:32:44:94: d8:25:e4:78:4b:cc:74:85:f0:a7:ac:3f:35:ab:f0:33:e7:e1: c2:6d:be:d1:c8:a5:8b:26:c5:ff:2b:bc:b7:cd:d6:3c:b1:44: fd:7c:30:7d:23:a9:3e:a4:9b:76:95:89:75:38:57:85:bf:60: e9:4a:60:55:ee:eb:04:55:1b:e3:26:3d:30:72:0b:d3:c6:d3: 5a:26:a6:a6:a2:c7:3b:de:00:5a:1a:12:e2:99:bb:12:f7:34: 52:9b:5d:dd:50:04:4a:3e:47:29:32:6a:90:af:51:77:e5:56: dd:17:9f:f9:a6:ae:14:af:3c:64:03:4b:59:0f:63:4c:f8:f6: 3f:ab:50:d8:b7:ca:5a:57:c3:06:9e:53:fa:30:70:2d:9f:6e: 39:2c:39:a0:9e:92:88:cb:6b:93:b4:10:2a:df:f2:ed:ef:b7: 14:af:50:b5:08:85:53:d9:1a:f5:94:43:65:3f:c8:1a:50:45: fb:a0:4e:8d:2c:6f:91:c3:36:42:75:e7:e4:b2:bf:b6:27:a0: a2:5e:0a:fd -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIULUT3lduCba26/qMrwLszUKWopncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjcxOTIyMjhaFw0yNjEwMjYxOTI3MjhaMDMxMTAvBgNV BAMTKDhGOTQ1RkRCN0UzM0YwOUUyMUMwRTc3RDMwQkI0RDYwQUE0MDVBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCttqHo6eKfCywhx61lQr5/QAb Ds5OTixVsfkFLH7t0gg3zYfM9H1N/J4pwoFzEJ0ABlmbKYDxdNvQOBdo39dV9aI3 zeDkrmCYLT2sBcBLxlpUqxAKpSpbpBKiLfDl7DbOiiV8gqN+FRlZ2X2nODMIHLsB 37ClyOAtGD1aGzhxIa62xRqkg+ZKZQI3zxYrowpq8otKYpmVf1W7j7pXmux0Whxl ATE89BhQYTMLuqheY5JuuweEC6p6wvUIO+8VyevE/mbmvsRO+IiOUH1fkDrXdc13 qSq8UthPeFRzdeVEF5N+gQRbzhJuZA4Zgs5GI3LRv6fbFExgQgciDKb0GJtHAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPlF/bfjPwniHA 530wu01gqkBabzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vV3Fn MnRDck5NU0JQeTdkb0Z0MUJuSjZVMmtDdHdES01leXpNNUtCTEh3ay8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vV3Fn MnRDck5NU0JQeTdkb0Z0MUJuSjZVMmtDdHdES01leXpNNUtCTEh3ay8wLzhGOTQ1 RkRCN0UzM0YwOUUyMUMwRTc3RDMwQkI0RDYwQUE0MDVBNkYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEA7NhGDANBAIAAjAHAwUAKAQVzDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBPMwDQYJKoZIhvcNAQELBQADggEBABGiJeRdYx/eilytKlVv 0fKg+kf6TjriH5LCuOVxviIGwWzdGhhcex2S7eQT/nn9vOdKdzJElNgl5HhLzHSF 8KesPzWr8DPn4cJtvtHIpYsmxf8rvLfN1jyxRP18MH0jqT6km3aViXU4V4W/YOlK YFXu6wRVG+MmPTByC9PG01ompqaixzveAFoaEuKZuxL3NFKbXd1QBEo+RykyapCv UXflVt0Xn/mmrhSvPGQDS1kPY0z49j+rUNi3ylpXwwaeU/owcC2fbjksOaCekojL a5O0ECrf8u3vtxSvULUIhVPZGvWUQ2U/yBpQRfugTo0sb5HDNkJ15+Syv7YnoKJe Cv0= -----END CERTIFICATE-----Generated at Mon Nov 3 05:19:13 2025 by rpki-client