$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5E21BF9371917CEB7412D67CD3CC163FC87A875.cer File: B5E21BF9371917CEB7412D67CD3CC163FC87A875.cer (raw, json) Hash identifier: kVZtDmfoiBwtwTyt1RsomnWa4PH6ZugOM+UnLLogqv8= Subject key identifier: B5:E2:1B:F9:37:19:17:CE:B7:41:2D:67:CD:3C:C1:63:FC:87:A8:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E419D059032DDBB6CD56636128B423B272107E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/B5E21BF9371917CEB7412D67CD3CC163FC87A875.mft caRepository: rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 18:04:10 +0000 Certificate not after: Wed 21 Oct 2026 18:09:10 +0000 Subordinate resources: AS: 266941 IP: 45.225.48.0/22 IP: 2804:45a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:41:9d:05:90:32:dd:bb:6c:d5:66:36:12:8b:42:3b:27:21:07:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 18:04:10 2025 GMT Not After : Oct 21 18:09:10 2026 GMT Subject: CN=B5E21BF9371917CEB7412D67CD3CC163FC87A875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:eb:f1:1f:3c:72:28:f0:b8:58:93:e1:24: 5e:bb:1b:03:ae:ad:3a:54:6e:b0:36:f0:4c:38:f5: 46:13:ac:10:f5:0f:ba:80:46:74:28:79:98:49:14: d0:b0:0e:0c:d2:f6:15:fb:75:d1:46:e7:1c:82:40: 4d:7d:39:39:ae:0e:b3:54:17:d5:2b:93:db:d3:02: d2:f5:01:0e:47:a5:cd:32:af:b6:6e:eb:22:0a:c9: 88:e0:4b:cf:b9:d2:3d:63:84:84:e9:f4:95:a8:e0: a8:13:85:fc:b2:2c:f5:05:b3:c0:2d:ed:bd:0b:92: bd:a3:40:25:62:32:20:1b:50:34:5c:12:67:92:05: 34:7a:96:15:cc:b5:4b:e4:c3:dc:9e:89:e6:31:74: b9:60:de:76:e2:b1:9a:e7:57:ee:ab:58:a9:18:b8: a1:8f:f3:41:e1:8e:96:8a:b5:cc:c7:b8:1c:bc:ba: 3d:f8:27:0e:a9:5c:6f:4a:ac:8b:1e:5e:90:d2:b7: d3:96:3f:eb:30:2a:74:95:10:36:0b:07:9d:37:c0: 55:be:f5:7b:43:36:14:8d:36:55:09:28:34:45:31: b6:71:76:13:f6:c6:73:ab:f9:e3:06:f5:e8:02:b9: 8d:b7:27:0f:42:07:e6:8e:ab:45:09:16:6b:49:12: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:E2:1B:F9:37:19:17:CE:B7:41:2D:67:CD:3C:C1:63:FC:87:A8:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/B5E21BF9371917CEB7412D67CD3CC163FC87A875.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.48.0/22 IPv6: 2804:45a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266941 Signature Algorithm: sha256WithRSAEncryption 97:ef:16:5d:d3:ea:77:3d:5d:12:43:e9:59:f2:7b:67:c2:5f: 53:9a:b3:74:ad:04:a1:f3:e0:ee:93:ca:41:ea:3a:4e:a8:57: b9:22:e9:50:a3:03:7d:5b:5b:eb:bc:07:21:32:af:b0:ae:0b: c7:35:42:21:94:f2:38:bb:fb:9c:86:c1:8c:32:e4:ea:33:0f: 3a:13:ed:74:2e:68:30:4c:d5:f6:6a:d1:47:4b:b6:47:91:33: eb:96:9b:3d:1a:05:6c:3c:6c:aa:e0:6a:3e:6f:17:d9:82:31: 5d:ad:9d:da:5b:7d:5c:79:41:1a:b2:b8:91:d5:0c:5c:0e:d7: a3:f5:61:de:a8:ca:13:0d:81:b0:ec:c0:1a:a7:33:bb:e9:77: 79:29:28:c6:2b:15:f7:33:3c:b7:92:97:c0:2e:8d:fe:3a:c0: ca:f4:cf:87:54:44:dd:3d:1f:7f:54:11:d8:2d:14:fe:99:bb: 16:d5:13:2f:9f:b5:4b:8a:9f:29:95:6e:20:63:5e:2e:f1:46: 23:43:91:80:08:c8:35:45:42:0a:18:64:0a:70:e3:da:6d:75: 4d:a0:4e:54:68:fe:5c:d2:f6:25:b5:e2:2e:79:38:6c:9e:78: 3f:a1:9f:bd:e2:53:a8:c8:d8:5d:f6:5d:c9:6d:a9:a6:af:96: 91:c5:a1:10 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXkGdBZAy3bts1WY2EotCOychB+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjIxODA0MTBaFw0yNjEwMjExODA5MTBaMDMxMTAvBgNV BAMTKEI1RTIxQkY5MzcxOTE3Q0VCNzQxMkQ2N0NEM0NDMTYzRkM4N0E4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeROvxHzxyKPC4WJPhJF67GwOu rTpUbrA28Ew49UYTrBD1D7qARnQoeZhJFNCwDgzS9hX7ddFG5xyCQE19OTmuDrNU F9Urk9vTAtL1AQ5Hpc0yr7Zu6yIKyYjgS8+50j1jhITp9JWo4KgThfyyLPUFs8At 7b0Lkr2jQCViMiAbUDRcEmeSBTR6lhXMtUvkw9yeieYxdLlg3nbisZrnV+6rWKkY uKGP80HhjpaKtczHuBy8uj34Jw6pXG9KrIseXpDSt9OWP+swKnSVEDYLB503wFW+ 9XtDNhSNNlUJKDRFMbZxdhP2xnOr+eMG9egCuY23Jw9CB+aOq0UJFmtJEiNlAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS14hv5NxkXzrdB LWfNPMFj/IeodTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1lV emNzcUhqRlV4a3NreGh0SEp3NE0zWmVQdmE0Tm5rVVQ1eFRDRnlZUG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdZ VXpjc3FIakZVeGtza3hodEhKdzRNM1plUHZhNE5ua1VUNXhUQ0Z5WVBuLzAvQjVF MjFCRjkzNzE5MTdDRUI3NDEyRDY3Q0QzQ0MxNjNGQzg3QTg3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeEwMA0EAgACMAcDBQAoBEWoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQSvTANBgkqhkiG9w0BAQsFAAOCAQEAl+8WXdPqdz1dEkPp WfJ7Z8JfU5qzdK0EofPg7pPKQeo6TqhXuSLpUKMDfVtb67wHITKvsK4LxzVCIZTy OLv7nIbBjDLk6jMPOhPtdC5oMEzV9mrRR0u2R5Ez65abPRoFbDxsquBqPm8X2YIx Xa2d2lt9XHlBGrK4kdUMXA7Xo/Vh3qjKEw2BsOzAGqczu+l3eSkoxisV9zM8t5KX wC6N/jrAyvTPh1RE3T0ff1QR2C0U/pm7FtUTL5+1S4qfKZVuIGNeLvFGI0ORgAjI NUVCChhkCnDj2m11TaBOVGj+XNL2JbXiLnk4bJ54P6GfveJTqMjYXfZdyW2ppq+W kcWhEA== -----END CERTIFICATE-----Generated at Mon Nov 3 11:56:17 2025 by rpki-client