$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer File: C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer (raw, json) Hash identifier: 716iZHr/MUAK03D0ncxn3hmSHWsu9qqk5s6YIf14F7I= Subject key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3630A6666AF103EC2BA7A1EA8F1B2365388B88DE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft caRepository: rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Oct 2025 02:39:55 +0000 Certificate not after: Thu 29 Oct 2026 02:44:55 +0000 Subordinate resources: AS: 28624 IP: 187.110.64.0/18 IP: 200.237.128.0/19 IP: 201.33.32.0/19 IP: 201.54.160.0/20 IP: 2804:3bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:a6:66:6a:f1:03:ec:2b:a7:a1:ea:8f:1b:23:65:38:8b:88:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 30 02:39:55 2025 GMT Not After : Oct 29 02:44:55 2026 GMT Subject: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:75:a1:47:02:c1:7a:b0:b3:fa:cf:40:33:cc: 93:b8:40:51:dd:8e:32:62:7c:87:24:e1:cb:fa:9b: 5b:58:51:36:e0:12:dd:d3:e4:8a:2f:45:4f:72:ac: 3e:a2:91:d9:b2:76:46:4f:64:78:19:93:2a:c0:84: 39:60:61:50:b4:27:a2:37:af:9d:1b:d3:4f:6d:9a: 79:39:99:02:3d:5a:a1:c9:38:67:4e:b0:3e:f0:cc: b5:17:58:ea:07:b7:fb:32:e5:47:f5:bf:06:b1:30: 21:58:10:22:29:cf:f4:54:8f:4b:ef:71:94:05:cc: d3:fd:9f:02:16:86:ed:5e:83:d3:89:14:24:3a:05: 9e:3d:47:87:16:f0:81:74:33:ef:5d:be:98:65:ac: f4:cc:07:08:86:ff:06:82:0a:82:7b:99:53:24:20: d4:fa:c9:34:a9:c7:7b:2b:86:ac:7f:e6:b3:04:8a: c8:91:21:f8:f0:16:e2:d7:da:88:02:1f:5b:f7:74: 1d:bc:46:8d:c9:09:49:fa:ab:20:3c:40:f1:14:8e: 4a:c1:e0:c7:98:61:13:eb:50:eb:5d:01:95:d2:8d: e7:9a:56:d6:c0:72:b6:ba:75:da:a7:2f:d4:67:a9: f3:f4:ef:33:5d:4e:84:c3:bc:c9:e1:c3:93:0e:75: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.110.64.0/18 200.237.128.0/19 201.33.32.0/19 201.54.160.0/20 IPv6: 2804:3bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28624 Signature Algorithm: sha256WithRSAEncryption 51:6e:e3:1a:eb:9a:23:3e:a2:b3:c6:38:42:d9:40:69:56:5c: c1:ed:e4:9a:05:fb:c3:c2:2e:1c:75:2f:24:7b:28:39:3f:76: ee:34:e8:14:8a:db:91:48:00:7b:7a:0f:f5:e1:d3:ad:02:cd: db:0b:df:86:2b:c1:01:b8:89:86:c8:e1:61:6f:e6:29:c5:9c: af:0c:0f:76:e5:00:7d:56:34:62:7e:ac:9f:f3:32:1b:87:d8: 8f:35:99:ab:63:44:ca:b6:57:7c:ba:d8:53:db:59:b3:b1:cb: 96:0a:7e:59:a8:c6:fb:65:34:e4:63:10:44:40:2b:7d:19:00: e0:4c:2b:10:2b:a6:c6:9a:0a:7c:c1:1d:de:8e:c3:0d:88:bd: c6:16:88:7e:0f:d4:17:60:6b:74:d8:a4:c6:e4:da:e2:55:7a: 04:fb:67:ba:27:89:32:7f:54:fb:78:ad:3a:57:c4:f3:89:4f: c9:34:e0:98:da:d5:d2:d2:e0:c9:90:23:b7:1e:e0:12:e7:83: bb:d4:5b:5a:7b:fb:ea:66:1e:3d:22:d8:9a:a0:d6:d1:e7:66: 05:73:b8:f2:bc:7a:6a:a3:32:2d:f3:8e:ba:fd:13:7f:b7:2c: df:a1:36:02:bd:19:a7:9f:68:95:81:e1:2b:5f:5c:65:ec:23: ae:7a:0e:e8 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUNjCmZmrxA+wrp6HqjxsjZTiLiN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzAwMjM5NTVaFw0yNjEwMjkwMjQ0NTVaMDMxMTAvBgNV BAMTKEM3OTg4QUU2QTc5RTc4REQ3MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMdaFHAsF6sLP6z0AzzJO4QFHd jjJifIck4cv6m1tYUTbgEt3T5IovRU9yrD6ikdmydkZPZHgZkyrAhDlgYVC0J6I3 r50b009tmnk5mQI9WqHJOGdOsD7wzLUXWOoHt/sy5Uf1vwaxMCFYECIpz/RUj0vv cZQFzNP9nwIWhu1eg9OJFCQ6BZ49R4cW8IF0M+9dvphlrPTMBwiG/waCCoJ7mVMk INT6yTSpx3srhqx/5rMEisiRIfjwFuLX2ogCH1v3dB28Ro3JCUn6qyA8QPEUjkrB 4MeYYRPrUOtdAZXSjeeaVtbAcra6ddqnL9RnqfP07zNdToTDvMnhw5MOdVi9AgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHmIrmp5543XEj UJbpuuLkKboGxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUxj NmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2S3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVM YzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAvQzc5 ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQyOUJBMDZDNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQGu25AAwQFyO2AAwQFySEgAwQEyTagMA0EAgACMAcD BQAoBAO8MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm/QMA0GCSqGSIb3DQEBCwUA A4IBAQBRbuMa65ojPqKzxjhC2UBpVlzB7eSaBfvDwi4cdS8keyg5P3buNOgUituR SAB7eg/14dOtAs3bC9+GK8EBuImGyOFhb+YpxZyvDA925QB9VjRifqyf8zIbh9iP NZmrY0TKtld8uthT21mzscuWCn5ZqMb7ZTTkYxBEQCt9GQDgTCsQK6bGmgp8wR3e jsMNiL3GFoh+D9QXYGt02KTG5NriVXoE+2e6J4kyf1T7eK06V8TziU/JNOCY2tXS 0uDJkCO3HuAS54O71Ftae/vqZh49ItiaoNbR52YFc7jyvHpqozIt8466/RN/tyzf oTYCvRmnn2iVgeErX1xl7COueg7o -----END CERTIFICATE-----Generated at Mon Nov 3 05:22:55 2025 by rpki-client