$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer File: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer (raw, json) Hash identifier: lzRIvBTGHhvOKVOuNIM5i70ZB/EAOJ+5ON9m4et3qu8= Subject key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D032C08D5F4EA67E61050968646972B516FF76D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft caRepository: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 14:35:08 +0000 Certificate not after: Mon 26 Oct 2026 14:40:08 +0000 Subordinate resources: AS: 274667 IP: 192.141.160.0/24 IP: 2801:81:80::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:03:2c:08:d5:f4:ea:67:e6:10:50:96:86:46:97:2b:51:6f:f7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 27 14:35:08 2025 GMT Not After : Oct 26 14:40:08 2026 GMT Subject: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:10:d4:84:b0:37:0a:83:52:13:2c:39:16: 09:f4:db:e4:db:af:78:49:5b:98:b4:82:92:4a:0d: 34:4c:26:39:39:03:0d:47:3a:96:c6:2e:88:0b:b1: 77:cf:25:bf:13:44:7c:92:21:e9:76:d9:8d:24:98: 9b:c4:5a:db:45:c0:23:54:84:65:78:ce:6e:43:4f: 96:e0:ce:6c:ff:36:0d:06:c1:75:a7:14:79:4a:7e: f7:20:da:84:15:5f:a5:b0:b3:7d:6f:bf:01:da:b6: 5c:5e:c2:a9:3c:0d:4d:a0:c5:9e:80:53:88:d6:d5: b2:e9:87:a6:87:b2:fd:5d:24:e9:e9:12:01:76:9b: b1:c0:dc:1e:7b:a6:43:74:cc:59:0c:a0:35:70:8e: e2:f6:f6:85:49:64:59:cb:59:19:f0:4d:e6:e5:b2: d7:ee:32:72:e2:f9:5d:1b:b2:de:38:77:5d:ce:92: c6:06:ff:6f:37:f3:75:16:22:e9:41:58:17:e4:6d: 3e:7c:0a:eb:35:65:27:15:b2:e9:da:6a:12:7c:25: e1:f1:99:54:da:e9:2d:31:89:84:25:8e:77:e1:48: cb:99:6d:67:8a:19:6c:f2:4b:e2:83:64:96:dc:b6: b2:0d:40:bf:70:44:93:93:e1:07:fe:29:fe:e7:ac: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.160.0/24 IPv6: 2801:81:80::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274667 Signature Algorithm: sha256WithRSAEncryption b1:73:01:95:0d:0d:0e:ef:8f:e0:61:01:9b:e4:6a:04:e3:02: e5:9c:62:70:06:a3:41:22:c7:32:30:43:b7:62:40:e6:2c:77: c5:a1:0a:59:3d:b7:62:11:47:ca:81:4c:91:2f:51:bc:95:7f: a3:f6:75:9c:6d:ec:19:8c:ab:00:a1:e7:2a:42:ac:e5:2e:25: 88:a7:2c:02:ec:59:4c:fb:ca:e8:3f:80:da:d9:9d:fd:00:49: e6:47:26:fc:26:af:57:88:31:53:09:7b:3d:4c:96:2c:e5:3a: 8e:30:3b:29:2f:e9:97:f2:bd:4e:cf:de:2a:c6:bd:0e:a7:bf: bf:a7:d6:16:03:e9:f8:76:7c:d0:0d:0b:e3:a4:22:e0:d6:71: 19:47:8c:b7:f7:0d:6d:49:23:f3:e9:51:37:b3:4b:65:93:51: 8f:da:d5:69:be:c0:fb:5e:a1:5a:b6:5a:e3:02:f1:de:81:8a: 6c:cc:e3:48:ae:f9:ce:e8:c0:83:ac:79:53:bf:e3:bc:ae:47: af:7d:c7:c4:38:c4:1e:d7:ee:7d:3e:b3:02:ef:45:a6:5c:36: 2e:a8:07:cc:0d:16:9a:92:16:b8:5a:8b:91:91:f7:37:1a:19: 01:71:88:f0:66:c7:85:32:ca:27:83:0a:f2:49:71:2a:60:22: bc:f2:61:fc -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIUPQMsCNX06mfmEFCWhkaXK1Fv920wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjcxNDM1MDhaFw0yNjEwMjYxNDQwMDhaMDMxMTAvBgNV BAMTKEM2OTREMUU5MTQ5NDUxQUZBQzBFQTZFN0M3NjQ0MDgzNDU0REYyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUxDUhLA3CoNSEyw5Fgn02+Tb r3hJW5i0gpJKDTRMJjk5Aw1HOpbGLogLsXfPJb8TRHySIel22Y0kmJvEWttFwCNU hGV4zm5DT5bgzmz/Ng0GwXWnFHlKfvcg2oQVX6Wws31vvwHatlxewqk8DU2gxZ6A U4jW1bLph6aHsv1dJOnpEgF2m7HA3B57pkN0zFkMoDVwjuL29oVJZFnLWRnwTebl stfuMnLi+V0bst44d13OksYG/28383UWIulBWBfkbT58Cus1ZScVsunaahJ8JeHx mVTa6S0xiYQljnfhSMuZbWeKGWzyS+KDZJbctrINQL9wRJOT4Qf+Kf7nrLAxAgMB AAGjggM7MIIDNzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGlNHpFJRRr6wO pufHZECDRU3y3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRK WUFmUGNiWktMYjFFS1pmdngxcHRSdDVjTTdBUzZ1Y1ZWcDhDeHJWbmMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRK WUFmUGNiWktMYjFFS1pmdngxcHRSdDVjTTdBUzZ1Y1ZWcDhDeHJWbmMvMC9DNjk0 RDFFOTE0OTQ1MUFGQUMwRUE2RTdDNzY0NDA4MzQ1NERGMkRDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcB Af8EITAfMAwEAgABMAYDBADAjaAwDwQCAAIwCQMHACgBAIEAgDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMEMOswDQYJKoZIhvcNAQELBQADggEBALFzAZUNDQ7vj+Bh AZvkagTjAuWcYnAGo0EixzIwQ7diQOYsd8WhClk9t2IRR8qBTJEvUbyVf6P2dZxt 7BmMqwCh5ypCrOUuJYinLALsWUz7yug/gNrZnf0ASeZHJvwmr1eIMVMJez1Mlizl Oo4wOykv6ZfyvU7P3irGvQ6nv7+n1hYD6fh2fNANC+OkIuDWcRlHjLf3DW1JI/Pp UTezS2WTUY/a1Wm+wPteoVq2WuMC8d6BimzM40iu+c7owIOseVO/47yuR699x8Q4 xB7X7n0+swLvRaZcNi6oB8wNFpqSFrhai5GR9zcaGQFxiPBmx4UyyieDCvJJcSpg IrzyYfw= -----END CERTIFICATE-----Generated at Sun Nov 2 23:01:27 2025 by rpki-client