$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer File: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer (raw, json) Hash identifier: ulB2ZON9PkomeEL1p6cpZ0RMFyBiPA2QoMjODnBlEqw= Subject key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DE870C4436555B94AD933B506B3285A3C48D3F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft caRepository: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 12:04:13 +0000 Certificate not after: Tue 16 Jun 2026 12:09:13 +0000 Subordinate resources: AS: 268557 IP: 45.163.192.0/22 IP: 2804:5304::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:70:c4:43:65:55:b9:4a:d9:33:b5:06:b3:28:5a:3c:48:d3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 17 12:04:13 2025 GMT Not After : Jun 16 12:09:13 2026 GMT Subject: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:ef:66:d9:2a:60:8e:ce:8a:52:d2:c8:79: a4:fe:0b:aa:52:2c:f5:20:40:20:a9:f4:df:a2:7f: 9b:c8:71:f0:0a:78:ef:d4:ae:72:90:db:ab:72:6c: 44:d0:5d:20:60:51:2f:1e:7b:6e:d9:aa:a1:ad:ed: 1e:9c:33:f1:9e:48:a9:28:b6:8b:b2:36:da:40:c0: ba:36:63:53:59:81:4d:e5:50:ba:21:ae:d9:f8:95: 1b:0c:89:f7:8d:e7:d9:0e:85:44:de:d8:2d:6d:68: d3:be:19:fd:82:4a:3f:94:f4:fe:05:84:55:f4:82: 52:9c:34:63:d5:2d:d8:0d:3f:0e:86:16:0c:32:c1: 04:60:f2:9d:0e:d2:2c:62:43:b7:86:cc:fc:a9:6d: 7c:85:08:54:c2:98:02:34:6e:38:82:56:bb:4b:b1: 07:4b:ae:aa:d8:e5:2f:e4:f5:77:53:6e:15:b0:8f: 7b:35:14:c3:aa:fe:e4:b7:25:a9:58:1a:72:e2:d1: 3c:69:4b:1e:72:af:d1:a5:ac:6f:45:05:47:47:31: ae:37:6f:b0:ab:90:ff:13:f6:c6:11:e6:51:0a:98: f5:68:96:81:fe:56:cd:6f:f9:30:cd:09:8a:a0:b9: 54:c1:f5:f8:51:b5:23:4f:7f:95:8b:37:37:b4:1a: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.192.0/22 IPv6: 2804:5304::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268557 Signature Algorithm: sha256WithRSAEncryption db:34:a7:15:06:f3:75:45:bf:63:d6:0a:73:46:6c:31:03:0a: 61:79:f8:6a:e9:d1:55:14:03:d7:ba:9d:89:17:e4:22:32:9d: ce:80:eb:3c:a9:60:e2:ae:85:2d:2a:11:04:50:6f:46:ab:28: df:8f:29:b6:77:dc:c7:40:05:0b:b4:b4:5e:06:de:1c:06:e5: a5:03:9c:fa:e0:c6:1a:d2:2b:9c:0f:7a:fa:13:18:df:83:da: e7:7a:86:b8:bd:eb:18:68:c8:11:1f:a9:8a:b8:12:5f:ef:8b: b2:98:2c:c2:d5:c3:66:11:21:ff:ba:64:fa:a9:0b:24:bf:fa: 6d:c9:6f:46:e0:02:7d:53:6a:cc:5e:ec:71:c5:82:4f:f0:cc: bf:3f:fa:ff:2c:24:24:ab:a3:ab:f6:d4:d9:dd:8c:b5:df:e8: 3f:c3:a3:a5:03:b8:02:14:e5:d0:c2:63:a8:6d:19:67:19:d0: 85:f4:7b:d9:76:db:8b:82:3f:a7:11:16:d6:50:d1:12:c6:3b: 23:15:f3:54:55:61:dd:b3:90:31:e8:58:fc:52:68:42:c0:44: 33:aa:57:ed:4c:c1:77:5a:db:a2:3a:5e:d2:a7:6d:4f:5c:d4: c8:f0:af:71:9b:6a:bf:12:1d:31:39:ff:e3:4e:d5:54:08:bc: 2f:39:dd:ac -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULehwxENlVblK2TO1BrMoWjxI0/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MTcxMjA0MTNaFw0yNjA2MTYxMjA5MTNaMDMxMTAvBgNV BAMTKEIwQ0E2NUQ5QzFDQzk2REE4RDA0RDUyN0YyQUExMEJBNDBERkRGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bu9m2Spgjs6KUtLIeaT+C6pS LPUgQCCp9N+if5vIcfAKeO/UrnKQ26tybETQXSBgUS8ee27ZqqGt7R6cM/GeSKko touyNtpAwLo2Y1NZgU3lULohrtn4lRsMifeN59kOhUTe2C1taNO+Gf2CSj+U9P4F hFX0glKcNGPVLdgNPw6GFgwywQRg8p0O0ixiQ7eGzPypbXyFCFTCmAI0bjiCVrtL sQdLrqrY5S/k9XdTbhWwj3s1FMOq/uS3JalYGnLi0TxpSx5yr9GlrG9FBUdHMa43 b7CrkP8T9sYR5lEKmPVoloH+Vs1v+TDNCYqguVTB9fhRtSNPf5WLNze0GgplAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwymXZwcyW2o0E 1SfyqhC6QN/f+DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0E5 Zk5teHpSek5OWVBRdVB0cTJkTXFiUExjNVdpc3lacHN6ckxBSENMNGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NB OWZObXh6UnpOTllQUXVQdHEyZE1xYlBMYzVXaXN5WnBzenJMQUhDTDRmLzAvQjBD QTY1RDlDMUNDOTZEQThEMDRENTI3RjJBQTEwQkE0MERGREZGOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaPAMA0EAgACMAcDBQAoBFMEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZDTANBgkqhkiG9w0BAQsFAAOCAQEA2zSnFQbzdUW/Y9YK c0ZsMQMKYXn4aunRVRQD17qdiRfkIjKdzoDrPKlg4q6FLSoRBFBvRqso348ptnfc x0AFC7S0XgbeHAblpQOc+uDGGtIrnA96+hMY34Pa53qGuL3rGGjIER+pirgSX++L spgswtXDZhEh/7pk+qkLJL/6bclvRuACfVNqzF7sccWCT/DMvz/6/ywkJKujq/bU 2d2Mtd/oP8OjpQO4AhTl0MJjqG0ZZxnQhfR72Xbbi4I/pxEW1lDREsY7IxXzVFVh 3bOQMehY/FJoQsBEM6pX7UzBd1rbojpe0qdtT1zUyPCvcZtqvxIdMTn/407VVAi8 LzndrA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:51 2025 by rpki-client