$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer File: B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer (raw, json) Hash identifier: +NiysCAEzv4QaIrRAYbHIMXFy2R0l2OWt/urESss8vY= Subject key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08F0FEC0AD6BEC1F36DE40EC3DC880D37BA41B02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft caRepository: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Sep 2025 14:10:32 +0000 Certificate not after: Mon 07 Sep 2026 14:15:32 +0000 Subordinate resources: AS: 263569 IP: 45.5.220.0/22 IP: 45.163.152.0/22 IP: 45.172.252.0/22 IP: 45.186.72.0/22 IP: 45.225.160.0/22 IP: 45.225.236.0/22 IP: 131.161.60.0/22 IP: 131.221.128.0/22 IP: 138.118.168.0/22 IP: 143.202.244.0/22 IP: 168.232.216.0/22 IP: 170.80.208.0/22 IP: 186.249.216.0/22 IP: 200.4.116.0/22 IP: 2804:f30::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 04:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f0:fe:c0:ad:6b:ec:1f:36:de:40:ec:3d:c8:80:d3:7b:a4:1b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 8 14:10:32 2025 GMT Not After : Sep 7 14:15:32 2026 GMT Subject: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:9c:2d:ac:4f:e9:2b:91:c9:c4:21:b3:31: 02:c4:86:8b:41:75:9f:45:61:31:16:01:20:bb:e4: 37:c1:8a:e8:95:f7:de:26:96:79:6e:9e:49:4d:7c: bd:fb:a5:a7:8e:5e:4b:9d:17:12:88:9f:00:01:11: 2d:75:ef:a9:71:66:39:01:83:c8:31:dd:11:1a:91: 4d:06:e4:66:b6:2b:b2:44:2e:30:43:f8:ae:c4:08: 38:c4:7e:e6:25:79:49:8f:fc:7b:01:9e:35:ce:51: d5:21:97:c1:cf:e2:97:60:df:40:34:98:0f:f4:78: 6e:25:85:aa:cf:47:2f:25:a7:69:b9:c5:1c:83:aa: a4:f2:a1:4b:a3:c3:df:ee:e0:f8:00:1c:07:dc:3e: 22:23:68:6d:5d:55:6a:ee:77:30:07:c0:ce:84:ab: 34:12:bf:b2:a6:6b:67:61:c0:97:d5:73:09:c0:28: d9:b7:37:11:a8:12:f1:97:87:51:01:33:77:f3:83: 34:c2:e6:32:49:05:d5:21:dc:dc:bf:df:ab:d6:0c: c9:2d:d1:c7:00:ed:d6:9b:4e:f6:ec:db:54:78:8b: 0f:b7:96:96:01:8d:39:fd:d2:71:04:d6:6a:61:11: f6:33:ae:ce:dd:2d:c3:61:94:1f:33:1f:f6:49:ea: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.220.0/22 45.163.152.0/22 45.172.252.0/22 45.186.72.0/22 45.225.160.0/22 45.225.236.0/22 131.161.60.0/22 131.221.128.0/22 138.118.168.0/22 143.202.244.0/22 168.232.216.0/22 170.80.208.0/22 186.249.216.0/22 200.4.116.0/22 IPv6: 2804:f30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263569 Signature Algorithm: sha256WithRSAEncryption c8:9c:d1:c9:60:23:bb:b0:01:dd:10:04:4d:18:7c:84:8d:26: d5:23:7c:48:b6:af:05:2e:34:5f:15:30:e6:53:c6:a9:6e:f7: 40:f2:17:b2:49:2c:e9:26:77:a4:a6:ab:de:c7:b7:ba:74:00: d4:2f:3c:31:68:fd:8e:e6:01:7b:ff:2c:40:0f:0d:e2:59:e4: a9:fe:e9:b7:99:26:c4:63:94:40:b9:f8:d5:3e:97:55:92:6c: 46:7c:68:f0:2e:fc:1b:17:08:89:63:cc:68:58:14:40:de:55: 3b:dc:f0:9d:c6:f1:3e:b5:8d:81:34:0f:2b:0f:e7:ad:06:2e: 30:92:60:f1:65:19:30:40:8a:c6:c5:60:a3:57:0b:80:17:77: 9c:1f:f5:1c:38:d5:17:58:5d:c3:78:c6:90:31:b1:da:e4:fa: e9:be:8d:66:c1:36:b0:2c:c5:fd:cd:26:e0:ec:b0:be:6c:87: e1:38:1b:92:68:55:ab:b6:f8:7e:c3:d0:63:e6:8c:32:c3:0f: c9:d2:dd:d9:0c:67:b2:25:90:f2:26:e4:61:bd:53:6f:3a:88: f7:2a:7b:46:5e:9b:ea:69:32:36:57:bf:b8:62:e6:7e:8e:8c: a3:d7:94:d9:de:c9:1d:21:db:29:d1:e9:20:fb:04:a7:71:45: 75:5f:63:c8 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUCPD+wK1r7B823kDsPciA03ukGwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDgxNDEwMzJaFw0yNjA5MDcxNDE1MzJaMDMxMTAvBgNV BAMTKEI0ODY5OEMxQzEzRUEzQzY2NDQyQzdGNzdCQzM3NTA5QzQ4QTFCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PZwtrE/pK5HJxCGzMQLEhotB dZ9FYTEWASC75DfBiuiV994mlnlunklNfL37paeOXkudFxKInwABES1176lxZjkB g8gx3REakU0G5Ga2K7JELjBD+K7ECDjEfuYleUmP/HsBnjXOUdUhl8HP4pdg30A0 mA/0eG4lharPRy8lp2m5xRyDqqTyoUujw9/u4PgAHAfcPiIjaG1dVWrudzAHwM6E qzQSv7Kma2dhwJfVcwnAKNm3NxGoEvGXh1EBM3fzgzTC5jJJBdUh3Ny/36vWDMkt 0ccA7dabTvbs21R4iw+3lpYBjTn90nEE1mphEfYzrs7dLcNhlB8zH/ZJ6pEBAgMB AAGjggOIMIIDhDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0hpjBwT6jxmRC x/d7w3UJxIobrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGNm TGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVMWHgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hj Zkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAvQjQ4 Njk4QzFDMTNFQTNDNjY0NDJDN0Y3N0JDMzc1MDlDNDhBMUJBRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEH AQH/BG0wazBaBAIAATBUAwQCLQXcAwQCLaOYAwQCLaz8AwQCLbpIAwQCLeGgAwQC LeHsAwQCg6E8AwQCg92AAwQCinaoAwQCj8r0AwQCqOjYAwQCqlDQAwQCuvnYAwQC yAR0MA0EAgACMAcDBQAoBA8wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFkTAN BgkqhkiG9w0BAQsFAAOCAQEAyJzRyWAju7AB3RAETRh8hI0m1SN8SLavBS40XxUw 5lPGqW73QPIXskks6SZ3pKar3se3unQA1C88MWj9juYBe/8sQA8N4lnkqf7pt5km xGOUQLn41T6XVZJsRnxo8C78GxcIiWPMaFgUQN5VO9zwncbxPrWNgTQPKw/nrQYu MJJg8WUZMECKxsVgo1cLgBd3nB/1HDjVF1hdw3jGkDGx2uT66b6NZsE2sCzF/c0m 4OywvmyH4TgbkmhVq7b4fsPQY+aMMsMPydLd2QxnsiWQ8ibkYb1TbzqI9yp7Rl6b 6mkyNle/uGLmfo6Mo9eU2d7JHSHbKdHpIPsEp3FFdV9jyA== -----END CERTIFICATE-----Generated at Thu Sep 18 05:09:41 2025 by rpki-client