$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E433C0C0FFDD91E3DCEA664F190687CA216E5A99.cer File: E433C0C0FFDD91E3DCEA664F190687CA216E5A99.cer (raw, json) Hash identifier: BtFmHoepqD1JnOL3R6cuUfbLGU/MRhNkhYcZVzrBUjw= Subject key identifier: E4:33:C0:C0:FF:DD:91:E3:DC:EA:66:4F:19:06:87:CA:21:6E:5A:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 064DD63C77B5AC1839BC2027B9DB5AB7A821E37C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/E433C0C0FFDD91E3DCEA664F190687CA216E5A99.mft caRepository: rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Oct 2025 11:46:25 +0000 Certificate not after: Mon 19 Oct 2026 11:51:25 +0000 Subordinate resources: AS: 53097 IP: 187.63.208.0/20 IP: 2804:3190::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4d:d6:3c:77:b5:ac:18:39:bc:20:27:b9:db:5a:b7:a8:21:e3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 20 11:46:25 2025 GMT Not After : Oct 19 11:51:25 2026 GMT Subject: CN=E433C0C0FFDD91E3DCEA664F190687CA216E5A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:76:14:f4:0c:31:dc:47:13:1c:49:c4:01: 8c:c1:b2:f7:09:cd:bd:34:0f:62:40:4e:5b:58:d2: 8b:3f:78:c6:e6:dc:03:11:29:12:3b:3b:6b:ca:c1: 2f:d2:eb:b5:e4:9d:89:c9:80:6f:64:ae:76:5a:87: 89:84:39:ba:d3:41:f7:83:0f:ef:8a:f1:42:ee:2f: ce:b6:56:8c:18:8c:79:15:85:60:bd:da:ff:b1:18: 61:20:b5:ad:8a:dd:66:d7:5f:8e:f8:94:fd:b3:08: 72:18:a6:15:93:37:33:ca:c2:e2:e5:9b:50:ab:e3: 45:72:0e:97:41:60:4e:bc:80:88:d6:52:35:0c:b2: f2:d1:d3:78:76:ee:0d:73:d6:3b:87:42:d7:7a:e5: 04:0f:66:db:35:f4:fc:86:27:b2:50:2c:ae:6f:ef: 0c:ca:eb:de:7e:c9:d4:07:bd:97:20:74:58:59:d6: 71:d7:dc:b0:86:f8:fa:87:31:6f:cc:74:dc:c6:92: f5:3c:dd:2d:15:38:2d:71:2c:c3:02:b5:0b:37:3c: 36:0f:35:8e:53:60:80:55:02:64:55:9f:4e:fb:02: 1e:16:cd:e8:36:a7:59:42:2b:e3:d9:10:b5:ef:9e: 2e:01:4b:b1:c0:17:6d:23:c2:a2:e0:bc:e7:5f:21: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:33:C0:C0:FF:DD:91:E3:DC:EA:66:4F:19:06:87:CA:21:6E:5A:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/E433C0C0FFDD91E3DCEA664F190687CA216E5A99.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.63.208.0/20 IPv6: 2804:3190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53097 Signature Algorithm: sha256WithRSAEncryption d8:40:ff:36:37:94:00:d1:43:93:ec:fe:f5:02:dc:94:68:cf: 19:8b:0a:45:2c:13:f0:24:d0:27:15:3a:e1:3c:42:c6:75:4a: e0:f6:35:67:d9:10:5d:50:8d:40:ae:40:b4:f3:ea:f2:14:33: 9f:c5:c9:79:82:9d:df:d3:ca:0b:58:d7:8b:b4:bb:bc:c0:6d: 48:fd:cf:4b:c9:60:49:c5:07:18:e4:02:f5:1d:bc:b4:b0:67: 7e:38:d5:a4:65:b8:ba:05:3c:22:77:7d:ef:ce:44:b5:5a:d2: 67:2f:1f:58:49:7a:c3:69:56:9a:13:bb:e6:d0:c5:2b:54:21: dd:5c:58:fc:28:13:4b:84:70:92:ec:d5:10:08:48:af:c9:94: 25:e3:95:60:7c:2c:71:df:64:64:33:06:15:3f:c4:7c:26:37: 7a:27:81:4f:48:92:7b:7a:9d:0d:62:07:bf:1c:ae:e2:5f:c4: 94:34:7b:b9:45:31:0c:25:0f:9e:3a:03:bd:55:ef:23:4f:2b: 4c:1d:56:99:f3:1a:34:83:89:0a:42:2d:fd:3b:cd:ab:07:5f: 03:e2:48:c7:8b:89:04:cc:2c:d6:e3:80:29:be:c7:b6:1c:03: c0:0b:95:68:9a:2e:fd:80:a7:16:24:bd:6d:4f:ce:ed:01:d4: 3c:45:97:e5 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUBk3WPHe1rBg5vCAnudtat6gh43wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjAxMTQ2MjVaFw0yNjEwMTkxMTUxMjVaMDMxMTAvBgNV BAMTKEU0MzNDMEMwRkZERDkxRTNEQ0VBNjY0RjE5MDY4N0NBMjE2RTVBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0nYU9Awx3EcTHEnEAYzBsvcJ zb00D2JATltY0os/eMbm3AMRKRI7O2vKwS/S67XknYnJgG9krnZah4mEObrTQfeD D++K8ULuL862VowYjHkVhWC92v+xGGEgta2K3WbXX474lP2zCHIYphWTNzPKwuLl m1Cr40VyDpdBYE68gIjWUjUMsvLR03h27g1z1juHQtd65QQPZts19PyGJ7JQLK5v 7wzK695+ydQHvZcgdFhZ1nHX3LCG+PqHMW/MdNzGkvU83S0VOC1xLMMCtQs3PDYP NY5TYIBVAmRVn077Ah4Wzeg2p1lCK+PZELXvni4BS7HAF20jwqLgvOdfIXR9AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkM8DA/92R49zq Zk8ZBofKIW5amTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkRS Y1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFoUHIvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkRS Y1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFoUHIvMC9FNDMz QzBDMEZGREQ5MUUzRENFQTY2NEYxOTA2ODdDQTIxNkU1QTk5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAS7P9AwDQQCAAIwBwMFACgEMZAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAM9pMA0GCSqGSIb3DQEBCwUAA4IBAQDYQP82N5QA0UOT7P71 AtyUaM8ZiwpFLBPwJNAnFTrhPELGdUrg9jVn2RBdUI1ArkC08+ryFDOfxcl5gp3f 08oLWNeLtLu8wG1I/c9LyWBJxQcY5AL1Hby0sGd+ONWkZbi6BTwid33vzkS1WtJn Lx9YSXrDaVaaE7vm0MUrVCHdXFj8KBNLhHCS7NUQCEivyZQl45VgfCxx32RkMwYV P8R8Jjd6J4FPSJJ7ep0NYge/HK7iX8SUNHu5RTEMJQ+eOgO9Ve8jTytMHVaZ8xo0 g4kKQi39O82rB18D4kjHi4kEzCzW44Apvse2HAPAC5Vomi79gKcWJL1tT87tAdQ8 RZfl -----END CERTIFICATE-----Generated at Mon Nov 3 11:58:22 2025 by rpki-client