$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer File: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer (raw, json) Hash identifier: g+BSN+YyMF0q4ppyYinxs7LrZ2BujAfeb90sOGerqYg= Subject key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5AE476839959B6DB85080F43326CAD2A388B30C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft caRepository: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 02:01:48 +0000 Certificate not after: Thu 26 Mar 2026 02:06:48 +0000 Subordinate resources: AS: 52573 IP: 24.152.96.0/22 IP: 45.6.228.0/22 IP: 45.65.168.0/22 IP: 45.224.48.0/22 IP: 45.226.56.0/23 IP: 131.0.12.0/22 IP: 138.118.68.0/22 IP: 138.204.32.0/22 IP: 138.255.76.0/22 IP: 143.137.176.0/22 IP: 143.255.148.0/22 IP: 168.90.20.0/22 IP: 168.197.112.0/22 IP: 170.247.68.0/22 IP: 170.254.8.0/22 IP: 177.86.72.0/22 IP: 177.86.168.0/21 IP: 177.87.40.0/22 IP: 177.91.40.0/22 IP: 177.92.176.0/21 IP: 177.125.108.0/22 IP: 179.42.96.0/22 IP: 186.250.252.0/22 IP: 191.242.32.0/22 IP: 201.182.28.0/22 IP: 2804:ce4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e4:76:83:99:59:b6:db:85:08:0f:43:32:6c:ad:2a:38:8b:30:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 02:01:48 2025 GMT Not After : Mar 26 02:06:48 2026 GMT Subject: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:ad:73:63:0f:57:91:cb:eb:ae:20:cf:38: 06:55:a3:df:6e:11:62:f1:d7:0e:82:84:79:43:54: 65:d5:fc:9c:2f:eb:a6:88:e7:af:19:44:98:7a:36: 5d:12:9a:23:89:0e:28:17:54:2e:6b:df:d3:56:bc: 2c:d7:9d:26:78:4e:c8:83:9a:47:c8:d1:c3:20:fe: 44:39:39:9b:ee:c9:a2:44:fb:85:77:56:64:4b:95: 23:7a:16:10:34:44:03:a2:4d:f7:7f:79:7c:bc:8e: 6f:b5:d5:d3:ce:c6:ea:db:d5:e4:90:10:99:a8:35: 84:69:27:21:08:bd:19:c1:d8:5a:57:8d:9d:58:c7: 89:e4:e0:25:74:e3:8c:eb:60:d9:d7:f6:ee:15:e2: 34:10:48:e2:65:58:a4:5d:c2:e3:c4:f8:ec:6a:51: da:5c:f6:78:c1:0d:bc:26:0f:48:cc:b2:c7:e8:24: f2:47:da:b0:e8:af:bb:b0:2e:34:e1:f7:9e:d1:87: 21:3d:4c:a9:75:c5:27:73:ed:3e:38:f7:3b:68:c3: 5b:a4:54:24:ec:60:6e:32:a2:bf:b7:64:5d:c1:72: 7c:cd:10:a9:a7:bb:52:ce:9b:25:17:06:0f:bc:ed: 84:b4:5c:9a:f5:2f:98:89:3b:71:da:fa:ce:a7:70: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.96.0/22 45.6.228.0/22 45.65.168.0/22 45.224.48.0/22 45.226.56.0/23 131.0.12.0/22 138.118.68.0/22 138.204.32.0/22 138.255.76.0/22 143.137.176.0/22 143.255.148.0/22 168.90.20.0/22 168.197.112.0/22 170.247.68.0/22 170.254.8.0/22 177.86.72.0/22 177.86.168.0/21 177.87.40.0/22 177.91.40.0/22 177.92.176.0/21 177.125.108.0/22 179.42.96.0/22 186.250.252.0/22 191.242.32.0/22 201.182.28.0/22 IPv6: 2804:ce4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52573 Signature Algorithm: sha256WithRSAEncryption 2c:2e:e9:66:22:d4:bb:5c:91:78:ce:2a:a9:05:f6:45:c1:48: 8c:c0:59:6c:a2:49:69:fe:66:69:dc:d3:7c:02:de:3f:e4:ec: 71:67:9e:1e:ec:95:70:56:01:42:fd:26:84:70:19:13:58:43: b7:d2:80:cd:13:ce:42:47:ce:52:50:88:b1:3f:6f:09:1b:81: f4:17:2a:66:77:ab:5b:4d:36:2a:70:69:73:9a:37:93:36:20: 21:23:24:c5:70:89:5e:c3:bc:5e:a0:e0:24:3e:2e:94:7b:9d: cd:85:ff:ca:5a:9f:84:38:66:91:52:3d:05:3a:b1:16:71:da: 2e:89:25:16:23:fc:1a:e2:9a:1c:22:c6:3b:ec:c1:85:c0:ee: ec:f4:44:38:92:42:a7:fb:cc:9c:fa:b2:69:39:77:f3:33:f8: 95:e1:90:57:d0:cd:fa:90:c5:af:10:26:28:81:d8:44:24:fd: 62:42:f4:3b:60:c2:c7:58:d7:f5:37:16:e1:2d:bc:64:87:57: df:72:c9:c5:11:42:17:9e:7b:1b:ca:4d:2a:52:8a:ab:f2:79: 64:2f:f5:50:d0:49:82:e3:7e:05:7c:15:67:36:c0:68:af:f4: 6f:56:57:9a:45:6b:40:a3:ea:2b:31:8d:fb:c1:d0:0d:16:b1: 09:47:98:e1 -----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgIUWuR2g5lZttuFCA9DMmytKjiLMMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjcwMjAxNDhaFw0yNjAzMjYwMjA2NDhaMDMxMTAvBgNV BAMTKEQ2ODZGMkQxQzhENkYwRTE4MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfa1zYw9XkcvrriDPOAZVo99u EWLx1w6ChHlDVGXV/Jwv66aI568ZRJh6Nl0SmiOJDigXVC5r39NWvCzXnSZ4TsiD mkfI0cMg/kQ5OZvuyaJE+4V3VmRLlSN6FhA0RAOiTfd/eXy8jm+11dPOxurb1eSQ EJmoNYRpJyEIvRnB2FpXjZ1Yx4nk4CV044zrYNnX9u4V4jQQSOJlWKRdwuPE+Oxq Udpc9njBDbwmD0jMssfoJPJH2rDor7uwLjTh957RhyE9TKl1xSdz7T449ztow1uk VCTsYG4yor+3ZF3BcnzNEKmnu1LOmyUXBg+87YS0XJr1L5iJO3Ha+s6ncAHbAgMB AAGjggPPMIIDyzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWhvLRyNbw4YIA 17o7ThOKhn4lxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkpm eWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZFZVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJK ZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAvRDY4 NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4NjdFMjVDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHCBggrBgEFBQcB BwEB/wSBsjCBrzCBnQQCAAEwgZYDBAIYmGADBAItBuQDBAItQagDBAIt4DADBAEt 4jgDBAKDAAwDBAKKdkQDBAKKzCADBAKK/0wDBAKPibADBAKP/5QDBAKoWhQDBAKo xXADBAKq90QDBAKq/ggDBAKxVkgDBAOxVqgDBAKxVygDBAKxWygDBAOxXLADBAKx fWwDBAKzKmADBAK6+vwDBAK/8iADBALJthwwDQQCAAIwBwMFACgEDOQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM1dMA0GCSqGSIb3DQEBCwUAA4IBAQAsLulmItS7 XJF4ziqpBfZFwUiMwFlsoklp/mZp3NN8At4/5OxxZ54e7JVwVgFC/SaEcBkTWEO3 0oDNE85CR85SUIixP28JG4H0Fypmd6tbTTYqcGlzmjeTNiAhIyTFcIlew7xeoOAk Pi6Ue53Nhf/KWp+EOGaRUj0FOrEWcdouiSUWI/wa4pocIsY77MGFwO7s9EQ4kkKn +8yc+rJpOXfzM/iV4ZBX0M36kMWvECYogdhEJP1iQvQ7YMLHWNf1NxbhLbxkh1ff csnFEUIXnnsbyk0qUoqr8nlkL/VQ0EmC434FfBVnNsBor/RvVleaRWtAo+orMY37 wdANFrEJR5jh -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:41 2025 by rpki-client