$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer File: DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.cer (raw, json) Hash identifier: jxaKE5vVqZpT3zlbQDaKKzueoeRBoKn4JzwEKstYULE= Subject key identifier: DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 415A40430FC0FF42794F32112EA36FBF7A47663D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.mft caRepository: rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 31 Oct 2025 17:34:31 +0000 Certificate not after: Fri 30 Oct 2026 17:39:31 +0000 Subordinate resources: AS: 265280 IP: 168.90.188.0/22 IP: 2804:2d68::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5a:40:43:0f:c0:ff:42:79:4f:32:11:2e:a3:6f:bf:7a:47:66:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 31 17:34:31 2025 GMT Not After : Oct 30 17:39:31 2026 GMT Subject: CN=DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:84:b4:6c:08:e3:07:d5:2d:23:2a:7c:11: 19:46:01:de:88:d9:9a:a1:16:30:16:63:bd:6a:87: 8f:a4:59:56:af:9e:26:5b:78:fd:9e:75:6b:a8:46: b1:13:cd:6a:d4:4d:64:59:02:f5:71:d2:db:3f:e7: 3c:82:6b:7c:bd:61:13:ae:fb:d9:11:9c:8e:00:dc: 22:ef:5b:37:d5:a4:5d:3d:e2:55:45:83:dd:a6:6e: 2c:3b:48:32:e9:63:13:66:99:50:5c:b6:ae:58:7f: 38:f6:35:51:ba:e5:17:78:40:c3:82:aa:58:e2:31: 8a:54:8e:cf:3b:ef:75:d7:ce:59:b9:58:7c:5b:53: 30:ec:93:39:09:0c:85:4f:e5:89:1c:41:7b:a5:28: ba:55:3b:2d:f6:78:8e:ae:08:9a:b8:4e:cb:26:d0: 84:ae:d1:d5:e5:61:a2:4a:e7:ba:d3:d7:c9:e9:42: f3:25:94:e5:31:d5:85:77:bf:d6:83:6d:5d:88:64: f7:1b:39:c4:74:e6:3c:7b:ac:5d:76:6c:d9:64:e8: 90:ca:e6:ac:c3:62:bd:c9:98:fd:3b:28:94:21:7b: 92:52:4b:1c:81:f2:d0:7a:09:6a:13:49:f5:4f:7f: 2c:e2:6c:bc:eb:56:60:21:87:a7:36:d2:6f:df:d8: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:47:53:6A:AB:81:79:F8:93:4F:5D:7B:13:FF:9F:6B:2E:E4:F1:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56hBbAEW8DppWp8FRmzhHRG6MoQZrNgcZmCQZnCNdzWY/0/DF47536AAB8179F8934F5D7B13FF9F6B2EE4F1C5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.188.0/22 IPv6: 2804:2d68::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265280 Signature Algorithm: sha256WithRSAEncryption 94:14:7d:7c:c9:69:aa:db:7f:d9:33:44:60:37:64:58:79:30: 3d:df:ab:78:77:74:1d:40:a1:c5:52:1d:a9:57:fd:63:d2:e3: c9:70:ae:c5:c5:e9:29:b4:21:79:72:3b:8b:4d:b3:37:b8:32: cf:ce:41:fb:0b:40:6b:91:d7:62:89:16:fe:12:4b:a7:a5:97: d5:86:ad:fe:ff:58:3d:89:e7:56:5f:22:a4:45:0b:04:8f:c4: 61:f4:7f:a7:e0:fc:57:21:20:63:8c:9b:ef:a2:ab:db:2e:8f: 2c:29:32:ca:dd:1e:e4:53:1e:4e:02:d1:ec:40:a0:74:88:ce: c7:41:18:dc:20:5b:13:df:2c:c9:fc:23:29:e6:82:29:43:40: 61:e0:ac:a1:f7:f4:8d:d4:b1:aa:4b:51:ed:29:58:99:70:8b: 49:5c:0e:9a:c9:f1:ea:8d:c2:f2:bf:53:a5:de:c1:e8:14:83: a6:2d:80:dd:9e:a6:98:3f:ba:bc:2e:3c:b5:27:71:b0:43:56: f4:d6:1e:6b:c1:04:ff:a2:54:97:a8:b8:33:bb:3c:9f:95:63: 25:10:f4:d1:11:26:13:d5:f4:f7:b4:45:90:30:dc:ae:b1:2a: 25:f8:be:a4:32:f6:2b:e5:15:eb:36:7e:d7:08:14:3c:f9:5a: b9:87:aa:13 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQVpAQw/A/0J5TzIRLqNvv3pHZj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMzExNzM0MzFaFw0yNjEwMzAxNzM5MzFaMDMxMTAvBgNV BAMTKERGNDc1MzZBQUI4MTc5Rjg5MzRGNUQ3QjEzRkY5RjZCMkVFNEYxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0M4S0bAjjB9UtIyp8ERlGAd6I 2ZqhFjAWY71qh4+kWVavniZbeP2edWuoRrETzWrUTWRZAvVx0ts/5zyCa3y9YROu +9kRnI4A3CLvWzfVpF094lVFg92mbiw7SDLpYxNmmVBctq5Yfzj2NVG65Rd4QMOC qljiMYpUjs8773XXzlm5WHxbUzDskzkJDIVP5YkcQXulKLpVOy32eI6uCJq4Tssm 0ISu0dXlYaJK57rT18npQvMllOUx1YV3v9aDbV2IZPcbOcR05jx7rF12bNlk6JDK 5qzDYr3JmP07KJQhe5JSSxyB8tB6CWoTSfVPfyzibLzrVmAhh6c20m/f2BxtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfR1Nqq4F5+JNP XXsT/59rLuTxxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZo QmJBRVc4RHBwV3A4RlJtemhIUkc2TW9RWnJOZ2NabUNRWm5DTmR6V1kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 aEJiQUVXOERwcFdwOEZSbXpoSFJHNk1vUVpyTmdjWm1DUVpuQ05keldZLzAvREY0 NzUzNkFBQjgxNzlGODkzNEY1RDdCMTNGRjlGNkIyRUU0RjFDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqFq8MA0EAgACMAcDBQAoBC1oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMQDANBgkqhkiG9w0BAQsFAAOCAQEAlBR9fMlpqtt/2TNE YDdkWHkwPd+reHd0HUChxVIdqVf9Y9LjyXCuxcXpKbQheXI7i02zN7gyz85B+wtA a5HXYokW/hJLp6WX1Yat/v9YPYnnVl8ipEULBI/EYfR/p+D8VyEgY4yb76Kr2y6P LCkyyt0e5FMeTgLR7ECgdIjOx0EY3CBbE98syfwjKeaCKUNAYeCsoff0jdSxqktR 7SlYmXCLSVwOmsnx6o3C8r9Tpd7B6BSDpi2A3Z6mmD+6vC48tSdxsENW9NYea8EE /6JUl6i4M7s8n5VjJRD00REmE9X097RFkDDcrrEqJfi+pDL2K+UV6zZ+1wgUPPla uYeqEw== -----END CERTIFICATE-----Generated at Mon Nov 3 11:58:04 2025 by rpki-client