$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer File: ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer (raw, json) Hash identifier: I5/mIJCJM0fBD4lsUwFYIM596EA0WjN1gVrq1e5RN2w= Subject key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2CF34C064755DF1DB1D8E16435B8BD9D64CB4599 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft caRepository: rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 19:37:26 +0000 Certificate not after: Thu 05 Mar 2026 19:42:26 +0000 Subordinate resources: AS: 267183 IP: 45.231.20.0/22 IP: 2804:496c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f3:4c:06:47:55:df:1d:b1:d8:e1:64:35:b8:bd:9d:64:cb:45:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 19:37:26 2025 GMT Not After : Mar 5 19:42:26 2026 GMT Subject: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:1d:da:c0:20:ef:c0:73:e6:18:66:10:bd: 6b:92:4b:70:59:fe:94:25:8f:64:04:78:7e:09:ad: c6:80:6e:98:f4:99:ae:bf:f5:46:54:41:d8:85:f2: 0c:60:af:93:8b:af:e9:87:6a:44:dc:24:60:1b:6a: 88:cd:b6:c5:ac:ab:f0:0c:8e:2c:60:da:52:84:e8: 96:ed:31:6a:b5:4d:20:d6:40:66:95:ff:53:9b:e3: 14:0c:ca:f4:8e:78:e0:c1:ce:9a:b3:b4:44:28:be: 01:4d:37:bf:4a:f9:f3:31:ef:57:2a:c4:31:72:40: 04:b4:46:ab:6c:57:07:f6:c8:f6:8e:d4:d0:5e:86: 2c:0c:5b:5e:42:be:96:fc:d0:c5:0b:10:65:99:6b: 93:e0:30:e8:ab:74:32:fb:71:94:bc:3e:5e:1a:80: e1:7c:71:7d:c2:b0:0d:4c:22:9a:af:6d:9a:6b:93: 5c:82:36:83:3e:5e:3c:f2:81:a6:02:5c:91:1a:11: b9:61:96:36:8d:29:f3:23:87:5a:13:a8:99:89:1e: dc:da:b3:94:33:fc:7b:ee:79:5e:26:07:e4:eb:6c: 86:be:f0:a3:4d:f1:83:df:e2:b4:74:d7:f1:04:e5: de:3e:bb:25:0e:62:cd:87:43:60:14:11:ac:fe:67: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.20.0/22 IPv6: 2804:496c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267183 Signature Algorithm: sha256WithRSAEncryption 7b:18:41:f2:46:07:ca:2e:b6:87:87:48:56:59:28:8c:71:07: 55:22:d1:cb:11:63:91:50:ca:ce:a7:5d:2d:45:c9:be:6d:91: 1f:07:6a:17:0f:b1:3a:c2:de:0b:fb:1e:25:e1:ce:f4:24:0e: b3:25:8c:08:c9:79:5d:e6:3e:0e:3e:5b:4d:56:87:0b:4f:0d: 9c:c5:e6:1c:40:78:50:fc:55:1d:86:84:78:32:61:8b:e6:7f: 1d:c2:ab:b9:ea:a0:b1:03:1a:5c:5a:b9:23:c6:19:5e:64:c4: 41:f5:a6:05:16:ce:12:fc:fe:4c:da:6b:4a:07:7d:07:79:c6: ea:72:e8:40:25:3f:5a:d0:ae:5c:cd:69:0e:d5:3c:e2:d0:32: 0f:0f:4d:6c:53:fb:35:e0:e6:af:62:22:5b:14:c9:de:f9:58: 4e:ff:43:ce:30:2c:75:df:0d:8a:b8:e0:62:32:b9:44:bc:51: ba:a5:c9:63:a0:c3:6a:fd:19:51:a6:7c:bd:50:47:35:6f:ab: e3:36:47:9b:5a:a5:a3:9b:5c:78:42:39:f4:57:7e:ff:ee:64: 3b:32:3a:a4:57:ca:bf:c4:19:b7:02:9b:03:82:89:65:9a:52: 8d:a1:9c:43:a8:05:e6:8e:58:ba:57:31:56:ff:0d:dc:ac:f6: 6a:df:08:de -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULPNMBkdV3x2x2OFkNbi9nWTLRZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxOTM3MjZaFw0yNjAzMDUxOTQyMjZaMDMxMTAvBgNV BAMTKEFERDE4RDRCOUQ0RUI1QjhFNTUyMEMwRTAwMzJDMjJFREIwNUY0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2x3awCDvwHPmGGYQvWuSS3BZ /pQlj2QEeH4JrcaAbpj0ma6/9UZUQdiF8gxgr5OLr+mHakTcJGAbaojNtsWsq/AM jixg2lKE6JbtMWq1TSDWQGaV/1Ob4xQMyvSOeODBzpqztEQovgFNN79K+fMx71cq xDFyQAS0RqtsVwf2yPaO1NBehiwMW15Cvpb80MULEGWZa5PgMOirdDL7cZS8Pl4a gOF8cX3CsA1MIpqvbZprk1yCNoM+XjzygaYCXJEaEblhljaNKfMjh1oTqJmJHtza s5Qz/HvueV4mB+TrbIa+8KNN8YPf4rR01/EE5d4+uyUOYs2HQ2AUEaz+Zz/tAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSt0Y1LnU61uOVS DA4AMsIu2wX0ETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXdN TXBFVW5kZDFrVzNtRUdIUTg3cVEzeWZEQWNXUGpuMXpQa0dvczF1eHUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXdN TXBFVW5kZDFrVzNtRUdIUTg3cVEzeWZEQWNXUGpuMXpQa0dvczF1eHUvMS9BREQx OEQ0QjlENEVCNUI4RTU1MjBDMEUwMDMyQzIyRURCMDVGNDExLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt5xQwDQQCAAIwBwMFACgESWwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBOvMA0GCSqGSIb3DQEBCwUAA4IBAQB7GEHyRgfKLraHh0hW WSiMcQdVItHLEWORUMrOp10tRcm+bZEfB2oXD7E6wt4L+x4l4c70JA6zJYwIyXld 5j4OPltNVocLTw2cxeYcQHhQ/FUdhoR4MmGL5n8dwqu56qCxAxpcWrkjxhleZMRB 9aYFFs4S/P5M2mtKB30HecbqcuhAJT9a0K5czWkO1Tzi0DIPD01sU/s14OavYiJb FMne+VhO/0POMCx13w2KuOBiMrlEvFG6pcljoMNq/RlRpny9UEc1b6vjNkebWqWj m1x4Qjn0V37/7mQ7MjqkV8q/xBm3ApsDgollmlKNoZxDqAXmjli6VzFW/w3crPZq 3wje -----END CERTIFICATE-----Generated at Mon Nov 3 05:30:55 2025 by rpki-client