$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer File: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer (raw, json) Hash identifier: S0a8ZerToNR+2y02u6nU7BkvoeoSGvb2VHBsG68P4lw= Subject key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F9C154FCA37F0E90AF1793EA97E0E158EAAFD39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft caRepository: rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 15:52:03 +0000 Certificate not after: Fri 06 Mar 2026 15:57:03 +0000 Subordinate resources: AS: 267549 IP: 201.182.236.0/22 IP: 2804:431c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9c:15:4f:ca:37:f0:e9:0a:f1:79:3e:a9:7e:0e:15:8e:aa:fd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 15:52:03 2025 GMT Not After : Mar 6 15:57:03 2026 GMT Subject: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:32:be:1d:ee:2e:dd:d8:ea:25:e0:25:e2: 12:03:66:78:22:92:32:f5:08:7b:14:b4:09:66:85: f1:dc:39:7f:66:34:42:06:6a:5e:cf:df:8b:58:09: d6:5f:72:1d:72:0d:75:2b:d2:f6:43:e5:b8:f8:74: 35:c0:8e:82:ba:c3:fd:b3:0b:88:53:27:61:e5:a9: 30:04:1b:bc:20:20:3a:41:a2:67:c0:1a:67:79:e9: b4:00:11:99:9f:01:d6:60:fd:7d:92:4e:00:eb:d4: da:5e:8f:ad:82:a7:32:5b:35:a8:f1:07:e7:e1:01: a4:77:29:6a:b1:ad:95:d1:9a:7c:5a:b5:c0:c9:a2: eb:52:0f:4b:cb:82:f9:c9:96:f1:6d:d2:45:ca:3e: fa:d0:c8:1c:7b:ec:84:42:96:b1:e2:24:c6:3a:d2: c4:ee:93:f6:a6:0d:26:ef:43:92:72:3a:fc:f4:e3: 27:14:ff:36:84:93:03:5d:fa:cd:b7:4c:5b:11:0b: 67:71:cc:1b:94:b6:2b:48:03:e6:94:22:c0:28:17: 98:84:ea:5c:21:be:87:c3:53:20:3e:d8:40:16:10: 96:70:a0:fc:80:0f:af:3f:c6:4c:a1:1e:7e:ef:48: 49:d9:94:a3:71:ed:fb:d1:7f:64:d2:e9:ac:c9:f1: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.236.0/22 IPv6: 2804:431c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267549 Signature Algorithm: sha256WithRSAEncryption b5:09:6e:70:54:ae:6d:cc:06:5c:6d:ef:19:2a:c1:33:3a:23: 40:9c:30:cc:44:d8:f0:09:28:3c:38:38:f2:b7:dc:a8:be:6d: 08:bf:a1:48:6f:ec:5e:2a:7a:4b:13:dc:ae:d8:27:a8:b5:98: 94:12:73:4f:0a:5c:06:40:b8:06:13:2d:d5:2d:e3:b7:ac:a7: e2:64:7b:96:d4:72:4b:02:a6:4f:f4:5e:74:88:4e:0e:bc:80: 8e:fa:c0:14:69:05:36:95:c9:7a:3d:da:6f:20:ea:f3:2e:28: a4:36:ec:7c:5b:87:48:16:ff:aa:d6:b3:20:21:34:00:fb:15: 9d:89:a5:cf:d3:a0:8b:f0:45:c8:e8:b3:f9:77:6e:86:66:fa: 73:18:78:b0:ab:9d:62:e4:19:94:bb:7b:53:12:42:da:1c:8f: 9e:d1:5d:ca:ba:1a:b7:8a:55:8a:c9:ba:09:26:44:b3:06:8f: 12:30:ff:fe:2b:c5:4f:c6:b3:82:4e:fe:a6:29:1b:6b:fe:1b: ea:d9:93:d7:41:c1:95:50:cf:6d:91:c6:89:a5:58:b7:39:2e: 27:7d:46:6b:8d:bf:3a:9a:a7:8a:ce:03:ec:0a:67:04:45:10: 23:ce:3a:c4:de:97:00:40:b2:a3:0a:0f:78:e1:7a:c9:14:30: 1c:f0:b4:b1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUD5wVT8o38OkK8Xk+qX4OFY6q/TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNTUyMDNaFw0yNjAzMDYxNTU3MDNaMDMxMTAvBgNV BAMTKDk0MkYyRDVBRTU1QjcyMTVERkNDQTc5QzU1MkQyMjNEMjlCNzFERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+DK+He4u3djqJeAl4hIDZngi kjL1CHsUtAlmhfHcOX9mNEIGal7P34tYCdZfch1yDXUr0vZD5bj4dDXAjoK6w/2z C4hTJ2HlqTAEG7wgIDpBomfAGmd56bQAEZmfAdZg/X2STgDr1Npej62CpzJbNajx B+fhAaR3KWqxrZXRmnxatcDJoutSD0vLgvnJlvFt0kXKPvrQyBx77IRClrHiJMY6 0sTuk/amDSbvQ5JyOvz04ycU/zaEkwNd+s23TFsRC2dxzBuUtitIA+aUIsAoF5iE 6lwhvofDUyA+2EAWEJZwoPyAD68/xkyhHn7vSEnZlKNx7fvRf2TS6azJ8ZHdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSULy1a5VtyFd/M p5xVLSI9Kbcd/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Fp NEJkY0JOYjJrQlNKWWdOTkZZQ1FlcXp4NHVmamVVdDJ6U0hIVEJIa3QvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NB aTRCZGNCTmIya0JTSllnTk5GWUNRZXF6eDR1ZmplVXQyelNISFRCSGt0LzEvOTQy RjJENUFFNTVCNzIxNURGQ0NBNzlDNTUyRDIyM0QyOUI3MURGRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCybbsMA0EAgACMAcDBQAoBEMcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVHTANBgkqhkiG9w0BAQsFAAOCAQEAtQlucFSubcwGXG3v GSrBMzojQJwwzETY8AkoPDg48rfcqL5tCL+hSG/sXip6SxPcrtgnqLWYlBJzTwpc BkC4BhMt1S3jt6yn4mR7ltRySwKmT/RedIhODryAjvrAFGkFNpXJej3abyDq8y4o pDbsfFuHSBb/qtazICE0APsVnYmlz9Ogi/BFyOiz+Xduhmb6cxh4sKudYuQZlLt7 UxJC2hyPntFdyroat4pVism6CSZEswaPEjD//ivFT8azgk7+pikba/4b6tmT10HB lVDPbZHGiaVYtzkuJ31Ga42/Opqnis4D7ApnBEUQI846xN6XAECyowoPeOF6yRQw HPC0sQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:54 2025 by rpki-client