$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer File: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer (raw, json) Hash identifier: EUcygkGaW2Z2z8DUH4YFVFpAW/fCj24wyqQOLSZn5Is= Subject key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 417BF93930B6292B664EC9022591B054DD108F7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft caRepository: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 02 Nov 2025 14:49:54 +0000 Certificate not after: Sun 01 Nov 2026 14:54:54 +0000 Subordinate resources: AS: 264267 IP: 138.118.224.0/22 IP: 2804:253c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7b:f9:39:30:b6:29:2b:66:4e:c9:02:25:91:b0:54:dd:10:8f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 2 14:49:54 2025 GMT Not After : Nov 1 14:54:54 2026 GMT Subject: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:0b:e2:40:59:9a:4b:27:55:fb:28:00:46: d5:16:c8:8f:c7:2e:fa:32:e4:b3:77:7e:bb:f8:24: 57:e6:db:9c:3a:88:54:2e:35:0f:49:f5:3d:e1:09: d7:79:be:df:99:38:08:d8:b2:77:53:c3:6a:51:37: 16:81:03:1b:92:63:0b:b5:60:fb:91:c7:4e:1e:e6: c7:b5:49:3d:33:df:09:af:40:78:f8:ee:db:1d:e7: 7c:7d:30:d2:2d:2c:92:db:72:c2:e0:42:aa:99:c4: cc:21:8f:7a:ca:c0:7e:44:01:ce:06:56:b0:a0:c8: bc:d7:39:49:fe:8b:3b:25:83:39:4d:69:58:9e:56: 67:9b:51:18:98:0c:c5:7c:ca:fd:46:ab:3b:15:c7: 9d:c4:dc:1d:80:b8:85:79:41:b4:29:6b:d5:db:09: 80:b6:b2:66:0b:a7:1e:65:44:03:92:68:a0:ec:83: ec:df:0c:02:2f:e2:78:77:06:fa:c8:96:d0:c6:12: 36:c6:1c:7e:f8:7b:77:0a:7a:0d:a1:e5:7b:db:bb: cb:86:fe:d4:08:b7:89:42:14:40:bb:ba:f7:1d:19: 01:49:2b:93:7c:6a:67:36:2b:08:8e:8d:00:78:c8: 17:59:3b:e4:00:04:cd:eb:58:55:ce:7a:19:88:e7: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.224.0/22 IPv6: 2804:253c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264267 Signature Algorithm: sha256WithRSAEncryption cb:c1:83:f8:0d:57:41:02:40:98:12:36:9a:12:27:c7:61:21: 7c:3c:38:7e:84:b5:f2:ca:55:d8:ae:bc:35:d9:eb:c5:b0:22: ee:5d:de:e0:a8:b0:bd:2b:9e:db:a2:3c:09:c6:60:fb:37:e1: 4f:3f:12:51:47:4e:a1:c2:7f:6e:4f:87:9c:26:c9:1b:51:16: bb:e1:f5:fe:eb:aa:39:79:03:69:8b:a3:ff:1c:4a:7a:89:a4: 6b:77:e0:5e:1b:7e:b4:8e:7b:3b:c5:23:b8:f7:9d:45:6b:2f: 12:23:64:ce:86:10:3d:10:94:d4:e3:0f:fe:00:a5:9c:98:c8: 35:17:77:cd:a8:f8:b3:a9:16:d5:d4:4a:3f:1b:d7:9e:3a:be: 4f:af:8a:f1:5e:05:38:9a:9c:b1:91:f4:90:68:33:8e:2d:a5: 66:7e:bb:af:99:ff:f4:0a:77:57:a3:1d:ff:0f:07:aa:6d:a0: 47:0b:54:ea:12:a3:ff:a7:57:ff:3f:01:51:ee:b9:e2:64:e0: 29:32:ec:f1:a9:0d:10:f1:24:b9:96:f3:4c:b9:f8:ed:94:e0: b5:d8:9d:e1:fe:8d:13:e7:32:88:30:83:80:df:a2:e7:c5:b6: 98:fe:f6:64:24:08:9d:41:61:e0:01:4d:d3:1e:95:0b:bd:07: 5a:13:75:53 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQXv5OTC2KStmTskCJZGwVN0Qj38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDIxNDQ5NTRaFw0yNjExMDExNDU0NTRaMDMxMTAvBgNV BAMTKEFFMEMxNjg2M0Y0RUMzMzZBQjc5NjZEOTlEMEFERDFDQzhCNzRFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPgviQFmaSydV+ygARtUWyI/H Lvoy5LN3frv4JFfm25w6iFQuNQ9J9T3hCdd5vt+ZOAjYsndTw2pRNxaBAxuSYwu1 YPuRx04e5se1ST0z3wmvQHj47tsd53x9MNItLJLbcsLgQqqZxMwhj3rKwH5EAc4G VrCgyLzXOUn+izslgzlNaVieVmebURiYDMV8yv1GqzsVx53E3B2AuIV5QbQpa9Xb CYC2smYLpx5lRAOSaKDsg+zfDAIv4nh3BvrIltDGEjbGHH74e3cKeg2h5Xvbu8uG /tQIt4lCFEC7uvcdGQFJK5N8amc2KwiOjQB4yBdZO+QABM3rWFXOehmI55AlAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuDBaGP07DNqt5 ZtmdCt0cyLdO+DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFJB V2pzOEpSODg5Rmh2SmVYc1dyTFV1VHNvdE1OOXE5cWRZUVpCVjJ6YVAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhS QVdqczhKUjg4OUZodkplWHNXckxVdVRzb3RNTjlxOXFkWVFaQlYyemFQLzAvQUUw QzE2ODYzRjRFQzMzNkFCNzk2NkQ5OUQwQUREMUNDOEI3NEVGOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCinbgMA0EAgACMAcDBQAoBCU8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQISzANBgkqhkiG9w0BAQsFAAOCAQEAy8GD+A1XQQJAmBI2 mhInx2EhfDw4foS18spV2K68NdnrxbAi7l3e4KiwvSue26I8CcZg+zfhTz8SUUdO ocJ/bk+HnCbJG1EWu+H1/uuqOXkDaYuj/xxKeomka3fgXht+tI57O8UjuPedRWsv EiNkzoYQPRCU1OMP/gClnJjINRd3zaj4s6kW1dRKPxvXnjq+T6+K8V4FOJqcsZH0 kGgzji2lZn67r5n/9Ap3V6Md/w8Hqm2gRwtU6hKj/6dX/z8BUe654mTgKTLs8akN EPEkuZbzTLn47ZTgtdid4f6NE+cyiDCDgN+i58W2mP72ZCQInUFh4AFN0x6VC70H WhN1Uw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:40:14 2025 by rpki-client