$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer File: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer (raw, json) Hash identifier: BnIizfaiQeQx7aehqVcd6fP/siRNUWNd7WPrC0F9L+k= Subject key identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1288D870DF72239EF44C46B1C9092DC9026FE0A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft caRepository: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Oct 2025 04:35:10 +0000 Certificate not after: Fri 09 Oct 2026 04:40:10 +0000 Subordinate resources: AS: 273392 IP: 45.168.94.0/24 IP: 2804:8df4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:88:d8:70:df:72:23:9e:f4:4c:46:b1:c9:09:2d:c9:02:6f:e0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 04:35:10 2025 GMT Not After : Oct 9 04:40:10 2026 GMT Subject: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:02:af:0a:f4:71:8d:4c:19:15:57:2f:32: 7a:62:53:2b:90:c6:9d:46:65:26:54:99:ff:6b:6e: c9:90:c8:95:27:f4:12:cf:73:f3:0d:fa:28:70:45: db:b3:ab:21:91:ec:5d:bf:1e:eb:c8:7f:e0:3e:a5: 6a:dc:2b:6a:b3:4a:58:98:3a:fe:d1:9f:5b:a1:2e: 02:64:a8:ef:88:0b:b2:15:ce:1e:d3:1e:18:1e:81: a9:a5:de:b7:71:33:77:b3:0b:fa:8d:f8:15:58:ca: fd:3d:67:3e:18:10:30:7d:52:46:b3:bc:52:05:38: e7:73:3a:f5:a5:1f:06:63:38:d4:2f:e8:04:a4:ce: 01:26:19:c9:a1:ca:6e:92:ec:2b:19:93:91:f3:dc: 44:4f:bb:19:c7:82:f3:6b:03:0d:f7:c2:e4:0b:5a: 0c:5f:5a:1b:b1:9e:f3:78:09:cc:5e:93:34:a9:4b: f4:9a:c0:99:de:93:d1:7d:51:8a:ea:f9:05:4c:26: 6d:17:ae:6e:70:c5:f6:e3:a4:23:36:46:35:e6:5c: f9:98:c0:9f:58:20:90:8a:62:17:42:b6:c3:4b:1a: 11:65:f0:63:73:c3:b0:ee:94:d8:8c:34:ee:3c:b1: a8:49:0f:72:7a:de:03:18:bd:94:cb:61:c3:33:a7: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.94.0/24 IPv6: 2804:8df4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273392 Signature Algorithm: sha256WithRSAEncryption 06:9d:b2:d9:7f:b8:b8:fe:95:a0:27:d2:c8:b4:23:ba:d9:fe: 01:d8:22:a4:be:76:fc:be:56:f4:f1:cf:81:b9:b3:6b:0a:10: 4c:3e:26:d5:d4:80:f4:2e:37:ef:35:7a:97:ae:e8:2f:39:d0: 27:37:ff:a0:fb:1a:27:21:6f:7d:0d:06:2c:af:09:51:39:52: 8d:0e:45:bc:d1:a4:73:10:bb:18:fe:24:cc:63:bc:6d:c6:9e: 1e:c1:35:b7:57:10:d6:eb:51:dd:80:87:c8:a4:5c:62:ac:b4: ca:1d:23:2e:7a:b6:35:fa:03:27:52:eb:4d:44:e5:e0:87:80: e2:a0:83:93:b0:0a:6c:9b:55:90:6a:0d:2c:f2:58:be:69:24: cb:af:bf:64:79:23:1c:1b:c6:de:ed:0d:b7:f9:1b:11:df:40: 97:63:10:f0:6f:a6:1c:8d:93:11:98:79:26:04:70:63:0e:d3: c1:6e:b3:5b:3f:bd:11:70:fd:82:98:fc:48:f5:f0:94:9c:7a: 97:b0:7d:90:94:3d:9b:23:da:17:b7:2a:26:18:59:c0:a1:55: b4:52:d8:a6:2c:d7:1f:56:77:9c:12:3c:6c:9a:29:76:4b:ba: 04:6f:13:eb:30:ff:05:7e:c5:3b:5a:33:08:51:53:97:a6:12: 8f:a2:65:66 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEojYcN9yI570TEaxyQktyQJv4KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTAwNDM1MTBaFw0yNjEwMDkwNDQwMTBaMDMxMTAvBgNV BAMTKDkyOEYzRTVGQ0Y3NEIyNDc5ODI5REVGMEIyNThBOEY5MDdFNTAwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0gKvCvRxjUwZFVcvMnpiUyuQ xp1GZSZUmf9rbsmQyJUn9BLPc/MN+ihwRduzqyGR7F2/HuvIf+A+pWrcK2qzSliY Ov7Rn1uhLgJkqO+IC7IVzh7THhgegaml3rdxM3ezC/qN+BVYyv09Zz4YEDB9Ukaz vFIFOOdzOvWlHwZjONQv6ASkzgEmGcmhym6S7CsZk5Hz3ERPuxnHgvNrAw33wuQL WgxfWhuxnvN4CcxekzSpS/SawJnek9F9UYrq+QVMJm0Xrm5wxfbjpCM2RjXmXPmY wJ9YIJCKYhdCtsNLGhFl8GNzw7DulNiMNO48sahJD3J63gMYvZTLYcMzpxu1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSjz5fz3SyR5gp 3vCyWKj5B+UAjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDVZ V3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRSSFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1 WVd1TlQxRDJxRFNENEE4TUp6QWJUN1l0UGlCaDZZMXJiUVBnQXh0UkhXLzAvOTI4 RjNFNUZDRjc0QjI0Nzk4MjlERUYwQjI1OEE4RjkwN0U1MDA4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQALaheMA0EAgACMAcDBQAoBI30MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQr8DANBgkqhkiG9w0BAQsFAAOCAQEABp2y2X+4uP6VoCfS yLQjutn+AdgipL52/L5W9PHPgbmzawoQTD4m1dSA9C437zV6l67oLznQJzf/oPsa JyFvfQ0GLK8JUTlSjQ5FvNGkcxC7GP4kzGO8bcaeHsE1t1cQ1utR3YCHyKRcYqy0 yh0jLnq2NfoDJ1LrTUTl4IeA4qCDk7AKbJtVkGoNLPJYvmkky6+/ZHkjHBvG3u0N t/kbEd9Al2MQ8G+mHI2TEZh5JgRwYw7TwW6zWz+9EXD9gpj8SPXwlJx6l7B9kJQ9 myPaF7cqJhhZwKFVtFLYpizXH1Z3nBI8bJopdku6BG8T6zD/BX7FO1ozCFFTl6YS j6JlZg== -----END CERTIFICATE-----Generated at Mon Nov 3 11:58:21 2025 by rpki-client