$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer File: D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer (raw, json) Hash identifier: 1kGhW5jGbTD2U7hhsfAhiBVxTWcC/mYWAetq16saSlA= Subject key identifier: D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A0FB2493D5B8E3EADDA2CBE4DCD7035577E86EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft caRepository: rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 17 Sep 2025 19:57:33 +0000 Certificate not after: Wed 16 Sep 2026 20:02:33 +0000 Subordinate resources: AS: 265983 IP: 164.163.232.0/22 IP: 2804:40d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0f:b2:49:3d:5b:8e:3e:ad:da:2c:be:4d:cd:70:35:57:7e:86:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 17 19:57:33 2025 GMT Not After : Sep 16 20:02:33 2026 GMT Subject: CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:0d:91:cb:54:82:3b:e5:43:a0:04:00:bb: f3:86:1d:36:8d:89:44:3e:44:88:b8:90:cc:9a:94: a3:45:5e:9b:3b:81:c2:98:05:ce:db:3f:96:41:29: 5e:97:96:9a:33:83:51:6c:ad:16:1e:0c:91:fc:14: eb:21:02:a3:07:8d:9d:90:0a:95:fa:d2:f2:82:a0: cb:26:fc:03:8e:1a:93:5b:7d:30:11:46:79:41:34: b1:23:24:fa:50:75:88:da:14:ad:ff:e6:df:cd:86: 4b:c7:4b:d2:7c:82:88:0c:d5:9b:8b:ac:b5:99:89: 29:80:84:0d:54:5b:a3:eb:40:b6:30:0b:ea:1e:3a: ed:07:b3:c8:9b:f2:75:f3:95:ef:57:84:78:9d:55: 34:2e:a0:15:01:c3:5d:8d:48:3e:22:86:82:e1:62: ac:a3:35:48:37:cd:f4:eb:65:5f:b5:8f:fa:25:df: 25:3c:75:34:95:af:26:8b:47:3e:13:fa:07:ef:5a: 94:97:e6:d5:40:ee:96:84:76:85:95:08:1b:c5:6b: 3c:cc:a3:e1:7a:ee:dc:4d:da:af:e6:86:a2:70:94: 0c:96:c8:5c:2f:43:73:6a:87:99:44:77:9a:b9:80: cc:c6:7a:5e:c3:55:29:bd:71:5b:01:8e:73:39:fd: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.232.0/22 IPv6: 2804:40d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265983 Signature Algorithm: sha256WithRSAEncryption 4b:b3:77:23:88:da:19:58:f7:29:2d:4e:ee:c1:9d:29:7d:79: 46:9d:3d:a7:46:f9:0b:c8:e3:98:ca:f2:fb:30:cf:10:a0:ff: b8:a8:92:30:db:7f:7c:3b:aa:a8:01:1e:f5:93:57:4f:f5:00: cf:eb:d9:c6:69:ed:6b:24:f5:3f:f6:c3:3c:10:e2:79:3b:3f: 00:4a:a4:d3:3c:2f:79:30:5a:aa:3d:27:f4:ce:0d:d7:12:03: dc:b2:35:af:35:cc:eb:77:8b:2f:2b:4c:3b:91:2c:82:d5:1a: c0:c0:fb:63:04:c2:bb:7f:b6:a3:8f:58:f4:72:1a:85:ec:9b: 7e:cd:07:83:31:05:a3:c4:70:09:59:98:8b:9b:9b:9f:bb:35: d7:e0:ec:47:35:1d:17:b2:1c:cb:d1:c2:3f:0c:8d:ff:c5:31: af:f0:1c:09:50:ef:b5:5c:81:7f:af:9b:40:35:68:16:17:91: ce:6b:4d:9a:8f:80:0e:3f:4f:e8:32:5e:e8:fe:d4:b2:f9:ac: 13:d8:61:f9:bb:45:44:2c:51:63:1f:62:3a:70:7a:a9:29:0d: d7:96:fa:ad:40:32:ce:99:ac:a5:65:a5:e8:0a:f0:62:36:b8: 28:3f:16:4a:37:45:07:90:f4:78:5a:8d:43:ba:83:e8:4f:96: 8d:15:5c:a3 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUag+yST1bjj6t2iy+Tc1wNVd+huswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTcxOTU3MzNaFw0yNjA5MTYyMDAyMzNaMDMxMTAvBgNV BAMTKEQ0NDFEMDE3MzBCRjVFQkVDODJBN0Y5NUZGRkVGNUQ5MEI4N0FBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2w2Ry1SCO+VDoAQAu/OGHTaN iUQ+RIi4kMyalKNFXps7gcKYBc7bP5ZBKV6Xlpozg1FsrRYeDJH8FOshAqMHjZ2Q CpX60vKCoMsm/AOOGpNbfTARRnlBNLEjJPpQdYjaFK3/5t/NhkvHS9J8gogM1ZuL rLWZiSmAhA1UW6PrQLYwC+oeOu0Hs8ib8nXzle9XhHidVTQuoBUBw12NSD4ihoLh YqyjNUg3zfTrZV+1j/ol3yU8dTSVryaLRz4T+gfvWpSX5tVA7paEdoWVCBvFazzM o+F67txN2q/mhqJwlAyWyFwvQ3Nqh5lEd5q5gMzGel7DVSm9cVsBjnM5/aLBAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUQdAXML9evsgq f5X//vXZC4eqMzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmFo bXBzUWZuUm4xaUZ5Q3lvZDhhOFBYaWNoV2d3SmFqM2VTTlZyVXE0bS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmFo bXBzUWZuUm4xaUZ5Q3lvZDhhOFBYaWNoV2d3SmFqM2VTTlZyVXE0bS8wL0Q0NDFE MDE3MzBCRjVFQkVDODJBN0Y5NUZGRkVGNUQ5MEI4N0FBMzMubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAqSj6DANBAIAAjAHAwUAKARA0DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEDv8wDQYJKoZIhvcNAQELBQADggEBAEuzdyOI2hlY9yktTu7B nSl9eUadPadG+QvI45jK8vswzxCg/7iokjDbf3w7qqgBHvWTV0/1AM/r2cZp7Wsk 9T/2wzwQ4nk7PwBKpNM8L3kwWqo9J/TODdcSA9yyNa81zOt3iy8rTDuRLILVGsDA +2MEwrt/tqOPWPRyGoXsm37NB4MxBaPEcAlZmIubm5+7Ndfg7Ec1HReyHMvRwj8M jf/FMa/wHAlQ77VcgX+vm0A1aBYXkc5rTZqPgA4/T+gyXuj+1LL5rBPYYfm7RUQs UWMfYjpweqkpDdeW+q1AMs6ZrKVlpegK8GI2uCg/Fko3RQeQ9HhajUO6g+hPlo0V XKM= -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:29 2025 by rpki-client