$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer File: D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer (raw, json) Hash identifier: 1z6N4Oh03Pyj3LvdE+I4/Bz+87Ibd53YSI5SY028gDc= Subject key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0C8322FC0394B25C2CA7D6596D030DB64FBB0FF0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft caRepository: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 14:31:33 +0000 Certificate not after: Mon 14 Sep 2026 14:36:33 +0000 Subordinate resources: AS: 263536 IP: 191.5.128.0/20 IP: 201.33.112.0/20 IP: 2804:1380::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 05:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:83:22:fc:03:94:b2:5c:2c:a7:d6:59:6d:03:0d:b6:4f:bb:0f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 14:31:33 2025 GMT Not After : Sep 14 14:36:33 2026 GMT Subject: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:a3:5d:79:52:d0:d4:75:92:39:46:c6:1a: 77:db:3e:65:45:88:83:5b:f7:6e:e8:5d:0d:6a:a9: d5:c3:a4:b6:14:5d:fb:30:ad:7c:0f:cb:45:91:de: bb:60:8d:17:13:bb:6b:fe:40:aa:d3:92:6f:b8:81: d1:1f:4a:60:5d:95:61:76:c4:4c:b6:9f:38:94:7d: 49:00:8c:75:7f:9e:7b:fc:d1:f0:25:b0:2e:81:62: 11:a5:28:43:21:61:61:74:5b:d6:14:8e:40:6a:4c: b1:d2:7f:48:17:99:c4:f2:07:5a:05:71:e2:11:54: 1e:a5:c0:51:7b:29:01:3c:df:7b:5c:ec:18:ea:1f: 0c:c8:38:5a:3d:e7:1f:ee:65:5a:f6:1d:92:ca:17: b7:7e:b9:62:54:c7:55:d7:60:2d:30:5f:c0:b3:99: c2:83:f4:39:00:b2:da:a0:74:cb:b8:12:1a:ad:5f: 9d:d5:fe:65:3f:c7:4b:03:84:f0:54:f0:0d:60:85: ae:77:a7:ca:a1:82:7e:8c:d9:73:8e:ba:bd:a7:a0: 2c:25:f7:74:ec:b6:87:40:97:0e:0a:89:5b:0b:4d: 11:d0:2c:77:ca:ed:ac:48:a6:59:50:db:c9:4f:9b: 90:62:d6:2d:76:d1:ed:46:70:63:ea:59:fb:81:c5: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.5.128.0/20 201.33.112.0/20 IPv6: 2804:1380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263536 Signature Algorithm: sha256WithRSAEncryption d7:97:e1:bd:ed:0a:61:1d:0e:11:dc:67:8e:a8:3b:8d:22:16: f5:30:f8:a7:18:64:a8:88:16:dc:9e:52:4b:e2:03:02:68:ab: 06:08:a4:dd:21:7b:7c:74:28:73:f2:ab:b2:e8:58:c3:fb:af: 85:10:a5:f6:4d:1f:db:5d:f6:22:42:71:f1:11:bd:2c:c6:97: 7f:3f:7f:07:c5:f6:a6:cf:12:7e:80:5d:56:7a:fa:55:b2:a8: 75:68:1e:f8:8e:1b:19:ff:a6:20:24:8c:d5:6f:d5:9e:dc:b3: 07:e5:64:ca:b6:63:fb:69:02:30:39:63:0e:41:9c:98:df:66: f7:af:58:88:b7:e5:d7:0a:84:2b:29:92:c9:9c:7d:9b:eb:db: d5:9d:99:bb:9a:49:dd:be:eb:60:0e:4a:d1:37:61:68:54:5d: d0:82:e5:2a:be:96:4e:a2:5f:6d:41:8a:7d:5f:64:cc:77:fe: 57:3a:ed:1f:1a:91:0f:16:76:b6:f5:fb:12:8c:e6:75:25:79: c1:6b:07:21:e5:1d:ec:4d:8e:bc:a1:84:74:59:92:71:47:bc: 6f:b6:8a:a2:3f:bf:cb:68:09:90:49:6c:bb:6f:92:db:b3:b6: 21:7c:9b:2f:ee:da:0f:6e:97:95:f5:ea:55:af:eb:a7:e4:d5: 3f:95:24:54 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDIMi/AOUslwsp9ZZbQMNtk+7D/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTUxNDMxMzNaFw0yNjA5MTQxNDM2MzNaMDMxMTAvBgNV BAMTKEQxMUFCRjVFQTA3MzM2MzhCNEEyRkNFQkVBQzk1MTdCNTY4M0FERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQKNdeVLQ1HWSOUbGGnfbPmVF iINb927oXQ1qqdXDpLYUXfswrXwPy0WR3rtgjRcTu2v+QKrTkm+4gdEfSmBdlWF2 xEy2nziUfUkAjHV/nnv80fAlsC6BYhGlKEMhYWF0W9YUjkBqTLHSf0gXmcTyB1oF ceIRVB6lwFF7KQE833tc7BjqHwzIOFo95x/uZVr2HZLKF7d+uWJUx1XXYC0wX8Cz mcKD9DkAstqgdMu4EhqtX53V/mU/x0sDhPBU8A1gha53p8qhgn6M2XOOur2noCwl 93TstodAlw4KiVsLTRHQLHfK7axIpllQ28lPm5Bi1i120e1GcGPqWfuBxVt5AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRGr9eoHM2OLSi /OvqyVF7VoOt0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzhi SEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhwOGIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc4 YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEvRDEx QUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1NjgzQUREMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEvwWAAwQEySFwMA0EAgACMAcDBQAoBBOAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFcDANBgkqhkiG9w0BAQsFAAOCAQEA15fhve0K YR0OEdxnjqg7jSIW9TD4pxhkqIgW3J5SS+IDAmirBgik3SF7fHQoc/KrsuhYw/uv hRCl9k0f2132IkJx8RG9LMaXfz9/B8X2ps8SfoBdVnr6VbKodWge+I4bGf+mICSM 1W/VntyzB+VkyrZj+2kCMDljDkGcmN9m969YiLfl1wqEKymSyZx9m+vb1Z2Zu5pJ 3b7rYA5K0TdhaFRd0ILlKr6WTqJfbUGKfV9kzHf+VzrtHxqRDxZ2tvX7EozmdSV5 wWsHIeUd7E2OvKGEdFmScUe8b7aKoj+/y2gJkElsu2+S27O2IXybL+7aD26XlfXq Va/rp+TVP5UkVA== -----END CERTIFICATE-----Generated at Thu Sep 18 06:11:46 2025 by rpki-client