$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer File: 922B9B809E9734E02F711EB097B94EB6316A606D.cer (raw, json) Hash identifier: w1poNJMOa+EObWh6vkKBHp/ArVoXvzm+Dqmhib5xdK8= Subject key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 15C08A66026304D2464A85DD4992B763356164C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft caRepository: rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 09 Aug 2025 12:53:27 +0000 Certificate not after: Sat 08 Aug 2026 12:58:27 +0000 Subordinate resources: AS: 271323 IP: 164.163.164.0/22 IP: 190.123.68.0/22 IP: 2804:79b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c0:8a:66:02:63:04:d2:46:4a:85:dd:49:92:b7:63:35:61:64:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 9 12:53:27 2025 GMT Not After : Aug 8 12:58:27 2026 GMT Subject: CN=922B9B809E9734E02F711EB097B94EB6316A606D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:db:21:80:6e:b2:30:ef:37:ba:5e:26:b6: 5e:8d:72:33:e0:51:75:2c:28:22:33:3f:3a:85:91: 86:17:7c:7a:c6:e0:d6:5f:b2:4e:89:2f:8a:14:3e: 6c:f9:0a:d4:9e:b4:20:8b:36:ef:e2:51:b7:77:e2: e3:ea:43:36:e0:12:c4:5d:4c:27:bd:d6:3d:a8:d8: 7a:5e:3e:61:f5:33:0f:a2:9a:75:d2:26:18:b5:5b: e9:d2:f0:59:1c:21:7b:46:22:10:b3:70:6b:7b:49: 54:c0:7e:d1:b2:37:72:85:e1:50:df:90:19:c4:c7: d3:00:fb:db:ec:9b:21:c9:ba:17:76:8e:f6:90:cd: 05:3d:08:99:32:3a:7d:9b:74:f3:da:1d:95:9e:23: 31:fa:45:1c:88:d6:9d:fd:48:40:cd:45:14:83:d5: 83:b9:5b:a3:1d:f1:1f:b3:5f:07:e5:27:fc:51:f9: d0:2f:57:60:e4:89:1c:33:f5:1a:3f:aa:18:45:a5: dc:4c:0e:85:8d:81:c4:be:dc:1a:1d:4b:e7:ed:e6: cf:4d:6e:5b:23:01:ea:e4:9f:0c:0a:e4:6f:6f:5f: 29:03:85:20:bc:ae:8d:13:ea:02:3c:44:5d:ec:3d: a0:5b:df:15:d6:39:73:d8:6f:6a:d6:ab:9b:54:68: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.164.0/22 190.123.68.0/22 IPv6: 2804:79b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271323 Signature Algorithm: sha256WithRSAEncryption 86:c9:46:91:c4:b6:19:7d:16:b8:87:f2:29:39:2f:bf:ec:a3: 18:ba:3e:4a:d8:91:94:e5:ff:0f:b6:bb:3d:fa:32:e3:9b:4c: 24:37:c2:47:84:9c:df:53:a0:ad:2d:5f:c3:fc:fb:97:30:17: 4d:bb:bd:29:b7:6b:ae:b3:1c:9c:f9:ca:46:ab:8b:17:58:f8: 89:20:06:c1:db:6c:c4:ad:2f:37:b4:8f:5d:12:70:89:3b:26: 16:20:31:76:c8:82:76:99:eb:d6:47:1b:23:7a:05:9b:08:fd: 59:b5:db:a7:f8:48:98:30:1e:9c:f1:49:ff:e7:91:17:5b:3e: 91:0f:ac:45:28:26:44:fe:49:4c:66:46:73:ab:51:32:2c:12: 0d:53:e9:30:1b:f2:d4:61:08:22:fc:a1:b1:06:d9:f0:e5:e5: e8:7d:0e:e1:bb:c1:27:18:f5:9d:f9:94:be:ba:e1:03:82:35: 2e:64:5c:b7:36:3b:53:84:a7:a7:cf:42:cf:3b:39:8e:a4:0c: 25:ad:57:ba:99:22:59:9b:a1:2f:2a:32:65:e3:60:aa:c9:4d: 38:85:88:9f:9f:46:4d:5a:a6:e0:62:ad:6d:e6:0e:fe:4a:5e: 33:7e:96:c3:68:62:9a:5c:3f:e2:fa:08:71:2d:9a:4e:19:1b: 36:56:6a:eb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFcCKZgJjBNJGSoXdSZK3YzVhZMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MDkxMjUzMjdaFw0yNjA4MDgxMjU4MjdaMDMxMTAvBgNV BAMTKDkyMkI5QjgwOUU5NzM0RTAyRjcxMUVCMDk3Qjk0RUI2MzE2QTYwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHtshgG6yMO83ul4mtl6NcjPg UXUsKCIzPzqFkYYXfHrG4NZfsk6JL4oUPmz5CtSetCCLNu/iUbd34uPqQzbgEsRd TCe91j2o2HpePmH1Mw+imnXSJhi1W+nS8FkcIXtGIhCzcGt7SVTAftGyN3KF4VDf kBnEx9MA+9vsmyHJuhd2jvaQzQU9CJkyOn2bdPPaHZWeIzH6RRyI1p39SEDNRRSD 1YO5W6Md8R+zXwflJ/xR+dAvV2DkiRwz9Ro/qhhFpdxMDoWNgcS+3BodS+ft5s9N blsjAerknwwK5G9vXykDhSC8ro0T6gI8RF3sPaBb3xXWOXPYb2rWq5tUaL87AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSK5uAnpc04C9x HrCXuU62MWpgbTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTNW NXBETEIzbWF6Wmp3eXJtNVRQUzFHUlJFNUdINktrTXBIRmhUb1R6Q1EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzkz VjVwRExCM21helpqd3lybTVUUFMxR1JSRTVHSDZLa01wSEZoVG9UekNRLzAvOTIy QjlCODA5RTk3MzRFMDJGNzExRUIwOTdCOTRFQjYzMTZBNjA2RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCpKOkAwQCvntEMA0EAgACMAcDBQAoBHm4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQj2zANBgkqhkiG9w0BAQsFAAOCAQEAhslGkcS2 GX0WuIfyKTkvv+yjGLo+StiRlOX/D7a7Pfoy45tMJDfCR4Sc31OgrS1fw/z7lzAX Tbu9KbdrrrMcnPnKRquLF1j4iSAGwdtsxK0vN7SPXRJwiTsmFiAxdsiCdpnr1kcb I3oFmwj9WbXbp/hImDAenPFJ/+eRF1s+kQ+sRSgmRP5JTGZGc6tRMiwSDVPpMBvy 1GEIIvyhsQbZ8OXl6H0O4bvBJxj1nfmUvrrhA4I1LmRctzY7U4Snp89Czzs5jqQM Ja1XupkiWZuhLyoyZeNgqslNOIWIn59GTVqm4GKtbeYO/kpeM36Ww2himlw/4voI cS2aThkbNlZq6w== -----END CERTIFICATE-----Generated at Sun Nov 2 23:01:48 2025 by rpki-client