$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer (raw, json) Hash identifier: j+nE4vqkWNp/I9AtVccj/MAhOQpCwfoT6mf01+P4aVE= Subject key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 67869F2CF0057721A6DA5575CA24E74C609B7CB1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft caRepository: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 19 May 2025 14:47:56 +0000 Certificate not after: Mon 18 May 2026 14:52:56 +0000 Subordinate resources: AS: 264556 AS: 265989 AS: 267252 IP: 45.232.76.0/22 IP: 138.0.204.0/22 IP: 143.0.68.0/22 IP: 164.163.236.0/22 IP: 168.227.88.0/22 IP: 2804:2178::/32 IP: 2804:40e4::/32 IP: 2804:4a9c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:86:9f:2c:f0:05:77:21:a6:da:55:75:ca:24:e7:4c:60:9b:7c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 19 14:47:56 2025 GMT Not After : May 18 14:52:56 2026 GMT Subject: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:5d:60:52:5e:7b:91:19:07:0f:82:99:34: b2:ab:f7:a6:5b:17:7f:7e:ee:06:b9:04:5f:50:a1: 3f:34:21:ab:80:d2:3c:56:26:5d:a6:f0:3a:0a:ce: 69:8d:6b:f9:11:35:ae:d7:1c:be:a9:c6:fd:c7:b3: 34:57:f9:d5:3f:8a:6b:72:66:87:60:15:22:95:ed: 73:0b:cc:d8:db:fc:08:89:26:4b:05:2a:a0:38:07: b8:b0:3a:c0:ec:d8:37:c8:e7:c3:0d:fd:e3:8f:9a: 7a:b5:7e:82:ef:79:c0:66:e1:6f:3b:b6:cb:cd:51: 1f:0f:ac:b6:92:a8:c2:9d:c3:98:58:59:4b:ec:3d: 16:70:44:97:3f:ff:f9:38:53:61:2d:e2:f8:6f:f1: c2:23:e9:ce:74:ad:16:f7:9e:a5:b2:6b:a6:f0:3a: 9d:65:08:f0:6a:2c:95:df:36:59:be:ae:5e:fe:0a: 85:78:eb:a9:04:27:b6:98:2d:8a:27:23:fe:ef:03: 81:2d:45:e8:23:e0:bd:db:76:10:63:d2:46:cc:06: cb:22:f5:78:41:f7:8b:a3:9d:29:8c:dc:1c:b8:77: 92:47:66:b5:15:d1:78:95:f7:2f:6d:33:34:d1:7e: 74:33:c7:ea:7d:76:a7:fd:ad:62:b5:b7:a4:a3:a1: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.76.0/22 138.0.204.0/22 143.0.68.0/22 164.163.236.0/22 168.227.88.0/22 IPv6: 2804:2178::/32 2804:40e4::/32 2804:4a9c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264556 265989 267252 Signature Algorithm: sha256WithRSAEncryption 7c:17:29:28:ca:81:e0:c7:47:ce:5e:15:27:8c:d7:63:17:ae: c5:0b:3b:bf:04:bd:c7:2b:13:4d:41:ce:22:7f:a7:32:33:cf: 91:be:6f:5f:b9:d5:53:5d:60:32:54:02:9d:36:a0:fb:81:ba: 89:18:71:1a:a9:66:d0:31:b3:de:ca:3d:59:76:55:55:65:08: 9f:e1:a7:84:12:8a:52:3e:34:61:c8:a4:e2:7d:89:65:68:43: 25:3b:ab:b0:26:cd:6b:e6:c5:b4:f0:9f:e2:df:66:19:e3:49: 5a:94:6f:c9:89:c4:2d:9b:83:82:1c:42:8b:6d:ca:15:c7:6f: 5c:04:ef:4b:cf:a8:54:4d:69:2e:76:fa:ba:07:c2:09:e3:31: 46:67:31:5e:81:b4:6d:42:4d:dc:03:24:eb:8f:ee:19:6c:b6: 5c:6b:7e:35:f4:bf:48:31:df:79:21:2f:89:91:97:6e:11:b7: f2:ef:4c:3b:0e:e3:6f:a6:2e:70:a3:04:e2:f4:f9:76:55:61: a2:15:a8:ce:b8:94:87:ee:4e:80:4d:35:70:ee:d4:a8:cf:0e: 5f:f3:ba:53:60:42:06:69:14:d2:d1:fd:17:dd:56:fc:9a:a6: 2e:b5:43:3f:ca:c2:18:fd:9e:09:c7:12:23:0d:82:b4:16:18: f1:48:4c:00 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUZ4afLPAFdyGm2lV1yiTnTGCbfLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTkxNDQ3NTZaFw0yNjA1MTgxNDUyNTZaMDMxMTAvBgNV BAMTKEQyM0Y5QkY3N0NDMUIzMkRFMUZFRUEyMDhGMTRDRDM0MzhBNERDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSF1gUl57kRkHD4KZNLKr96Zb F39+7ga5BF9QoT80IauA0jxWJl2m8DoKzmmNa/kRNa7XHL6pxv3HszRX+dU/imty ZodgFSKV7XMLzNjb/AiJJksFKqA4B7iwOsDs2DfI58MN/eOPmnq1foLvecBm4W87 tsvNUR8PrLaSqMKdw5hYWUvsPRZwRJc///k4U2Et4vhv8cIj6c50rRb3nqWya6bw Op1lCPBqLJXfNlm+rl7+CoV466kEJ7aYLYonI/7vA4EtRegj4L3bdhBj0kbMBssi 9XhB94ujnSmM3By4d5JHZrUV0XiV9y9tMzTRfnQzx+p9dqf9rWK1t6SjoVdjAgMB AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSP5v3fMGzLeH+ 6iCPFM00OKTcvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHhu WGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R4 blhpUkIzenNDTEJHY3NaZ2FSc0tMYjdzM3N3SHgzdm9WeDR5VGtKcXJzLzAvRDIz RjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQzOEE0RENCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEH AQH/BEUwQzAkBAIAATAeAwQCLehMAwQCigDMAwQCjwBEAwQCpKPsAwQCqONYMBsE AgACMBUDBQAoBCF4AwUAKARA5AMFACgESpwwJAYIKwYBBQUHAQgBAf8EFTAToBEw DwIDBAlsAgMEDwUCAwQT9DANBgkqhkiG9w0BAQsFAAOCAQEAfBcpKMqB4MdHzl4V J4zXYxeuxQs7vwS9xysTTUHOIn+nMjPPkb5vX7nVU11gMlQCnTag+4G6iRhxGqlm 0DGz3so9WXZVVWUIn+GnhBKKUj40Ycik4n2JZWhDJTursCbNa+bFtPCf4t9mGeNJ WpRvyYnELZuDghxCi23KFcdvXATvS8+oVE1pLnb6ugfCCeMxRmcxXoG0bUJN3AMk 64/uGWy2XGt+NfS/SDHfeSEviZGXbhG38u9MOw7jb6YucKME4vT5dlVhohWozriU h+5OgE01cO7UqM8OX/O6U2BCBmkU0tH9F91W/JqmLrVDP8rCGP2eCccSIw2CtBYY 8UhMAA== -----END CERTIFICATE-----Generated at Sun Nov 2 23:01:52 2025 by rpki-client