$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer File: 95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer (raw, json) Hash identifier: DvmxZK4FE4qO1TJJzEoTlokkQEkeiNhWe38H80k0uFg= Subject key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 45CED257A5586CBC951AF3F89FCF25EEC5163749 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft caRepository: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Oct 2025 22:38:51 +0000 Certificate not after: Wed 14 Oct 2026 22:43:51 +0000 Subordinate resources: AS: 268257 IP: 45.173.21.0/24 IP: 45.236.240.0/22 IP: 138.185.154.0/23 IP: 177.92.162.0/23 IP: 2804:4e60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ce:d2:57:a5:58:6c:bc:95:1a:f3:f8:9f:cf:25:ee:c5:16:37:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 15 22:38:51 2025 GMT Not After : Oct 14 22:43:51 2026 GMT Subject: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:1a:57:95:53:2f:21:be:bf:75:2a:9a:13: d2:e3:3d:dd:94:2b:3b:c9:6b:c0:39:d0:88:58:44: 1f:34:dc:3f:23:2f:72:35:84:6c:b2:63:69:cb:34: fa:86:ad:e2:27:81:48:6f:08:ef:c5:58:cb:1a:97: 2d:2d:5e:d6:4a:06:c0:07:78:8d:01:c7:81:0b:3d: bb:f1:34:8b:b0:66:f1:84:fc:bb:cf:23:15:a0:71: 6f:e7:a0:cb:d5:55:86:f9:f5:f5:5c:60:ff:3e:e6: 5a:4a:9d:fa:0f:5c:94:a6:02:bf:bc:d4:42:00:b2: f7:1d:99:08:f7:fa:b2:52:16:ae:c0:4d:82:f3:ef: 10:37:d4:86:e3:c6:5c:74:78:fb:29:4d:0e:78:e4: fd:13:6d:cd:4b:64:f5:76:12:a0:d6:d4:e2:02:b4: 57:44:d3:1d:0f:eb:98:98:36:bf:10:71:c7:81:ee: 40:5c:5c:fc:e1:e2:72:a6:f2:52:a6:c6:df:88:60: 88:c6:b1:b9:e1:00:0c:75:ff:ff:3a:1b:47:06:b9: a4:84:52:19:6d:c8:7f:aa:5c:4c:3b:15:18:c3:b4: 56:bb:d3:34:dc:77:d0:bf:eb:6b:82:49:62:f3:45: 69:2f:6c:16:d5:c9:1f:35:e2:a2:e7:0f:fa:ed:08: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.21.0/24 45.236.240.0/22 138.185.154.0/23 177.92.162.0/23 IPv6: 2804:4e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268257 Signature Algorithm: sha256WithRSAEncryption 9e:a7:45:12:4b:70:3e:6e:11:7e:47:07:8f:99:e7:c6:8c:dc: 46:42:f9:ac:bc:4b:0d:0c:17:16:bf:c9:82:01:74:17:b7:99: f1:f7:b8:a7:9b:f5:55:e0:3f:1d:e8:90:94:18:32:8e:05:b9: 12:98:8c:56:47:18:5a:9b:62:2c:9e:c7:77:d9:ac:83:61:59: 33:15:9a:b2:b7:79:ca:a6:81:00:34:dd:ee:df:63:e8:c4:7c: 96:37:f7:d7:33:e9:fc:0c:cf:e8:aa:73:9b:6a:14:4f:d4:da: 60:91:71:92:e4:fa:16:1c:fc:d5:0d:67:3d:89:0d:f9:60:fe: c8:5b:70:ee:98:42:0a:68:bd:d0:e3:e6:3b:14:04:ba:54:ef: 85:36:58:21:3d:ef:bc:0f:fe:cc:19:d3:78:2f:01:90:db:5b: 4c:73:74:62:de:bd:e0:08:0c:41:f6:9b:05:c8:db:62:06:ca: 1a:b7:92:4a:bf:f5:5c:b7:2f:98:12:56:f4:9e:7d:30:01:f7: c7:c3:b3:75:a3:0f:e6:df:c5:68:3b:f7:6a:60:36:eb:64:f9: b4:c2:f6:95:a2:4e:0e:ec:af:50:c8:78:92:d1:d7:c1:8b:52: 38:d0:93:c5:3c:4d:f0:e8:7e:79:68:1f:a1:0d:02:e6:21:de: 45:57:22:a9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIURc7SV6VYbLyVGvP4n88l7sUWN0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTUyMjM4NTFaFw0yNjEwMTQyMjQzNTFaMDMxMTAvBgNV BAMTKDk1Mzk1QzAxODVGQjI4RTBGREEzNTYxRkRFRTIwMjIyN0MxQ0M4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XhpXlVMvIb6/dSqaE9LjPd2U KzvJa8A50IhYRB803D8jL3I1hGyyY2nLNPqGreIngUhvCO/FWMsaly0tXtZKBsAH eI0Bx4ELPbvxNIuwZvGE/LvPIxWgcW/noMvVVYb59fVcYP8+5lpKnfoPXJSmAr+8 1EIAsvcdmQj3+rJSFq7ATYLz7xA31Ibjxlx0ePspTQ545P0Tbc1LZPV2EqDW1OIC tFdE0x0P65iYNr8QcceB7kBcXPzh4nKm8lKmxt+IYIjGsbnhAAx1//86G0cGuaSE UhltyH+qXEw7FRjDtFa70zTcd9C/62uCSWLzRWkvbBbVyR814qLnD/rtCG+TAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVOVwBhfso4P2j Vh/e4gIifBzI0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFl NEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxRblgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx ZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAvOTUz OTVDMDE4NUZCMjhFMEZEQTM1NjFGREVFMjAyMjI3QzFDQzhEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQALa0VAwQCLezwAwQBirmaAwQBsVyiMA0EAgACMAcD BQAoBE5gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQX4TANBgkqhkiG9w0BAQsF AAOCAQEAnqdFEktwPm4RfkcHj5nnxozcRkL5rLxLDQwXFr/JggF0F7eZ8fe4p5v1 VeA/HeiQlBgyjgW5EpiMVkcYWptiLJ7Hd9msg2FZMxWasrd5yqaBADTd7t9j6MR8 ljf31zPp/AzP6Kpzm2oUT9TaYJFxkuT6Fhz81Q1nPYkN+WD+yFtw7phCCmi90OPm OxQEulTvhTZYIT3vvA/+zBnTeC8BkNtbTHN0Yt694AgMQfabBcjbYgbKGreSSr/1 XLcvmBJW9J59MAH3x8OzdaMP5t/FaDv3amA262T5tML2laJODuyvUMh4ktHXwYtS ONCTxTxN8Oh+eWgfoQ0C5iHeRVciqQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:46 2025 by rpki-client