$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer File: BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer (raw, json) Hash identifier: /khFCw9NRilnHr0SBRfx3oeK6+/8dOBIg8l9gMrat8E= Subject key identifier: BE:48:F7:A6:CD:BF:E9:B1:69:1A:FE:A4:B6:AF:7E:6C:5F:59:78:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6BAAAD08374F817BE2066A496C497C6D283E5C26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft caRepository: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 29 Oct 2025 13:48:55 +0000 Certificate not after: Wed 28 Oct 2026 13:53:55 +0000 Subordinate resources: AS: 265011 IP: 170.84.148.0/22 IP: 2804:3164::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:aa:ad:08:37:4f:81:7b:e2:06:6a:49:6c:49:7c:6d:28:3e:5c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 29 13:48:55 2025 GMT Not After : Oct 28 13:53:55 2026 GMT Subject: CN=BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:97:c5:9b:a3:56:41:8b:38:08:e7:9d:f0: 6c:ae:0a:db:a4:76:68:d0:4a:ed:d9:89:a8:d4:01: 1d:3b:a4:a5:20:5d:57:70:96:26:60:a7:63:20:0e: 0a:85:a4:53:7c:9a:3c:9e:23:78:19:71:8d:70:73: 28:f4:0d:d1:9f:5a:fd:0c:c3:e1:f5:f4:e8:b6:dc: 92:a0:a2:88:40:19:96:2f:72:84:77:9f:86:d5:de: 52:66:a0:18:76:44:be:5d:ec:33:3e:60:4b:98:b0: 83:4e:79:5a:c8:15:0a:2b:88:7c:7e:27:5a:5f:7b: 61:09:5e:ce:94:a2:10:04:ec:ae:46:31:b1:e1:3f: c1:83:01:50:f0:84:d4:54:7d:9b:b8:57:7f:39:f7: 63:18:80:5c:d2:2a:0d:68:04:f0:1b:f5:7b:85:88: 0a:8f:e2:ed:3e:82:70:ba:9d:76:92:93:14:13:ba: 6e:47:aa:6b:31:18:77:dc:a2:df:9c:42:52:0e:68: ce:99:05:6f:51:6c:18:d1:66:c7:e6:c3:08:62:b0: 70:01:9b:0f:af:0c:7a:5c:5f:c8:2f:e5:10:f0:b1: af:47:04:c0:3e:0c:58:fb:7a:74:fd:ec:3e:ac:7f: ee:72:78:f5:dd:e8:53:12:81:86:a8:a7:e7:8f:57: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:48:F7:A6:CD:BF:E9:B1:69:1A:FE:A4:B6:AF:7E:6C:5F:59:78:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.148.0/22 IPv6: 2804:3164::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265011 Signature Algorithm: sha256WithRSAEncryption 8b:a3:b4:f5:ed:d4:20:f8:6e:56:91:d5:83:97:b3:6a:bc:f4: 7b:cc:2e:55:73:11:33:42:85:42:8c:4a:a9:fe:2e:7a:a0:f8: c0:e2:64:7e:e9:22:f1:e7:da:03:ab:b5:ab:bb:b9:31:11:c4: 8d:51:0d:c3:21:d0:26:8c:13:5d:17:12:b5:2a:ae:e3:be:29: e0:f4:0c:ae:06:fc:9d:9a:5c:42:58:1a:cb:77:f4:ce:28:5c: 24:c8:f6:37:c0:d7:66:7e:7d:9c:13:d8:b6:bd:86:3e:c7:c7: 83:8d:b5:d7:0b:5a:e0:83:41:78:f9:42:9f:8d:4b:99:d1:02: 02:66:5c:bc:50:3c:48:0f:73:5c:29:52:93:d8:c7:50:7a:1a: de:11:82:b2:d5:12:67:70:d9:c1:9e:d8:79:7d:a0:19:bb:41: 92:c2:b1:3f:29:ed:64:37:e2:80:96:5c:ba:52:f7:47:85:62: 36:0c:6e:11:b3:a6:56:dc:a1:45:2e:01:37:04:b8:0e:c0:66: 1f:84:5c:fe:1b:82:34:7f:d9:70:94:68:28:63:55:a0:e9:d1: 38:29:08:47:91:de:f2:12:85:5a:f9:20:9c:a2:ec:bf:b1:7c: 81:52:9f:a8:c6:35:85:8c:18:74:6f:1a:90:af:7b:17:cb:0f: 23:7c:b2:44 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUa6qtCDdPgXviBmpJbEl8bSg+XCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjkxMzQ4NTVaFw0yNjEwMjgxMzUzNTVaMDMxMTAvBgNV BAMTKEJFNDhGN0E2Q0RCRkU5QjE2OTFBRkVBNEI2QUY3RTZDNUY1OTc4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbZfFm6NWQYs4COed8GyuCtuk dmjQSu3ZiajUAR07pKUgXVdwliZgp2MgDgqFpFN8mjyeI3gZcY1wcyj0DdGfWv0M w+H19Oi23JKgoohAGZYvcoR3n4bV3lJmoBh2RL5d7DM+YEuYsINOeVrIFQoriHx+ J1pfe2EJXs6UohAE7K5GMbHhP8GDAVDwhNRUfZu4V38592MYgFzSKg1oBPAb9XuF iAqP4u0+gnC6nXaSkxQTum5HqmsxGHfcot+cQlIOaM6ZBW9RbBjRZsfmwwhisHAB mw+vDHpcX8gv5RDwsa9HBMA+DFj7enT97D6sf+5yePXd6FMSgYaop+ePV5y5AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+SPemzb/psWka /qS2r35sX1l4yzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVdk NE53SlU1TXhmM3llUTNpSml4eUIybnppYzF2ODRicTJoczlFcVFoZy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVdk NE53SlU1TXhmM3llUTNpSml4eUIybnppYzF2ODRicTJoczlFcVFoZy8wL0JFNDhG N0E2Q0RCRkU5QjE2OTFBRkVBNEI2QUY3RTZDNUY1OTc4Q0IubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqpUlDANBAIAAjAHAwUAKAQxZDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMECzMwDQYJKoZIhvcNAQELBQADggEBAIujtPXt1CD4blaR1YOX s2q89HvMLlVzETNChUKMSqn+Lnqg+MDiZH7pIvHn2gOrtau7uTERxI1RDcMh0CaM E10XErUqruO+KeD0DK4G/J2aXEJYGst39M4oXCTI9jfA12Z+fZwT2La9hj7Hx4ON tdcLWuCDQXj5Qp+NS5nRAgJmXLxQPEgPc1wpUpPYx1B6Gt4RgrLVEmdw2cGe2Hl9 oBm7QZLCsT8p7WQ34oCWXLpS90eFYjYMbhGzplbcoUUuATcEuA7AZh+EXP4bgjR/ 2XCUaChjVaDp0TgpCEeR3vIShVr5IJyi7L+xfIFSn6jGNYWMGHRvGpCvexfLDyN8 skQ= -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:02 2025 by rpki-client