$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.cer File: B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.cer (raw, json) Hash identifier: SGj4GHpGFfgBI3s83QJmzjIkCAEnbLrak89iUkKMfN8= Subject key identifier: B2:7D:44:18:D1:58:4C:02:A2:BA:4B:02:5F:7E:60:2E:AD:BE:0B:CF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B2DD766B0DE9A312131DAED52BE6CAEAF137F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.mft caRepository: rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 11 Sep 2025 19:07:57 +0000 Certificate not after: Thu 10 Sep 2026 19:12:57 +0000 Subordinate resources: AS: 267178 IP: 45.230.100.0/22 IP: 179.109.120.0/22 IP: 2804:4954::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2d:d7:66:b0:de:9a:31:21:31:da:ed:52:be:6c:ae:af:13:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 11 19:07:57 2025 GMT Not After : Sep 10 19:12:57 2026 GMT Subject: CN=B27D4418D1584C02A2BA4B025F7E602EADBE0BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:90:9b:3f:b1:69:91:90:e3:8f:e9:d6:09: c6:34:b4:3c:53:bf:9d:c7:29:26:29:2f:9b:63:fd: d3:f9:c2:df:69:ae:3f:15:0b:2c:92:89:3d:6e:b1: 77:c9:15:2f:16:6d:63:d7:66:f1:98:e0:dd:50:bc: 95:ce:41:e2:28:af:3d:61:c5:c6:7b:42:ea:31:be: bd:a1:85:98:70:f0:b4:89:c7:de:13:7f:c0:c1:bf: de:10:a1:65:c7:af:fe:54:9f:ae:88:08:6d:24:bc: f0:17:ae:19:6c:bf:7d:eb:1d:8d:6f:98:58:52:aa: 1e:95:50:dd:36:a4:23:d1:e6:bf:32:74:4d:91:a0: 0e:ea:46:30:46:60:10:23:85:34:b3:22:89:10:1d: 4c:e3:46:ed:23:b7:a9:4a:d6:ce:65:4e:d4:cb:4d: 37:2f:72:3a:1f:a1:ab:72:26:02:37:07:73:00:02: 1b:4a:bf:d0:b1:49:4c:72:84:2e:ca:c8:a2:a7:1c: 22:8a:f8:ee:b9:45:cc:c5:f4:b6:bb:43:be:bc:84: dd:55:41:ea:ad:2d:6f:91:03:4d:5d:e3:e8:ac:e9: f3:38:4e:4e:22:ac:ba:17:d2:8a:9f:cd:18:e1:b0: e0:9a:45:fa:96:d8:c4:4a:50:88:b1:84:99:22:12: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:7D:44:18:D1:58:4C:02:A2:BA:4B:02:5F:7E:60:2E:AD:BE:0B:CF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dUsgfjaL1681KxZnDfMwordPKXchHwd9qyfMyxq8x8z/0/B27D4418D1584C02A2BA4B025F7E602EADBE0BCF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.100.0/22 179.109.120.0/22 IPv6: 2804:4954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267178 Signature Algorithm: sha256WithRSAEncryption d1:2e:7b:38:aa:27:85:0f:6c:a4:bd:51:54:4b:79:89:d2:13: 2b:b0:d8:b3:16:35:b8:0d:e2:72:8a:73:b8:fa:d5:83:6e:10: 10:ee:6d:e8:91:46:cf:b7:15:7d:c4:7c:ab:9a:8d:ff:62:90: 65:bf:58:2d:81:7f:27:a4:60:e8:5a:54:df:5e:a5:77:80:c9: bf:87:7e:c1:28:cc:72:d5:64:0d:45:45:71:9e:19:30:62:12: 95:7c:ae:09:82:bb:32:48:5a:c5:5a:0f:40:53:b0:85:1f:81: 8a:f1:ab:72:6e:ef:d6:33:d6:e4:da:b1:47:aa:23:c0:4c:18: 79:a2:fd:2d:2d:0b:d4:67:9b:02:0b:03:96:e7:32:29:ec:82: 11:9f:0b:9d:d4:90:23:0b:1d:f3:29:49:81:6f:fe:c9:cc:05: 55:25:52:29:89:1d:35:03:bc:e3:33:22:fb:c0:38:f7:8a:f5: f8:ce:cb:23:b8:38:3e:6d:1f:ce:5e:90:8e:e7:ab:cf:b7:30: f5:48:44:97:e7:90:6f:d7:3d:20:c0:95:7f:75:55:1d:0d:04: f3:d6:26:03:f2:53:30:ce:8c:8c:95:56:6a:8d:3e:9b:b7:e2: 7c:4c:2b:86:23:e1:67:09:39:3f:a9:da:9c:ab:18:cc:3f:54: da:bb:c9:8d -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgITay3XZrDemjEhMdrtUr5srq8TfzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI1MDkxMTE5MDc1N1oXDTI2MDkxMDE5MTI1N1owMzExMC8GA1UE AxMoQjI3RDQ0MThEMTU4NEMwMkEyQkE0QjAyNUY3RTYwMkVBREJFMEJDRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALlHkJs/sWmRkOOP6dYJxjS0PFO/ nccpJikvm2P90/nC32muPxULLJKJPW6xd8kVLxZtY9dm8Zjg3VC8lc5B4iivPWHF xntC6jG+vaGFmHDwtInH3hN/wMG/3hChZcev/lSfrogIbSS88BeuGWy/fesdjW+Y WFKqHpVQ3TakI9HmvzJ0TZGgDupGMEZgECOFNLMiiRAdTONG7SO3qUrWzmVO1MtN Ny9yOh+hq3ImAjcHcwACG0q/0LFJTHKELsrIoqccIor47rlFzMX0trtDvryE3VVB 6q0tb5EDTV3j6Kzp8zhOTiKsuhfSip/NGOGw4JpF+pbYxEpQiLGEmSISvPMCAwEA AaOCAz4wggM6MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLJ9RBjRWEwCorpL Al9+YC6tvgvPMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBPgYIKwYBBQUHAQsEggEwMIIBLDBdBggr BgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9kVXNn ZmphTDE2ODFLeFpuRGZNd29yZFBLWGNoSHdkOXF5Zk15eHE4eDh6LzAvMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9kVXNn ZmphTDE2ODFLeFpuRGZNd29yZFBLWGNoSHdkOXF5Zk15eHE4eDh6LzAvQjI3RDQ0 MThEMTU4NEMwMkEyQkE0QjAyNUY3RTYwMkVBREJFMEJDRi5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQCLeZkAwQCs214MA0EAgACMAcDBQAoBElUMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwQTqjANBgkqhkiG9w0BAQsFAAOCAQEA0S57OKonhQ9s pL1RVEt5idITK7DYsxY1uA3icopzuPrVg24QEO5t6JFGz7cVfcR8q5qN/2KQZb9Y LYF/J6Rg6FpU316ld4DJv4d+wSjMctVkDUVFcZ4ZMGISlXyuCYK7MkhaxVoPQFOw hR+BivGrcm7v1jPW5NqxR6ojwEwYeaL9LS0L1GebAgsDlucyKeyCEZ8LndSQIwsd 8ylJgW/+ycwFVSVSKYkdNQO84zMi+8A494r1+M7LI7g4Pm0fzl6Qjuerz7cw9UhE l+eQb9c9IMCVf3VVHQ0E89YmA/JTMM6MjJVWao0+m7fifEwrhiPhZwk5P6nanKsY zD9U2rvJjQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:23 2025 by rpki-client