$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer File: E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer (raw, json) Hash identifier: hi/3ajSqDtAbE0Yz0wya++jAhhl1j8uvPbuwggt2Jpg= Subject key identifier: E8:36:8A:24:07:34:79:BF:2A:14:99:4A:13:6A:DF:E4:3F:6A:2E:6D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6402F95FE47052E49F0617A9130639F61F586C40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft caRepository: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 16:24:02 +0000 Certificate not after: Wed 21 Oct 2026 16:29:02 +0000 Subordinate resources: AS: 263384 IP: 138.185.40.0/22 IP: 177.87.28.0/22 IP: 2804:1554::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:02:f9:5f:e4:70:52:e4:9f:06:17:a9:13:06:39:f6:1f:58:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 16:24:02 2025 GMT Not After : Oct 21 16:29:02 2026 GMT Subject: CN=E8368A24073479BF2A14994A136ADFE43F6A2E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:a3:4d:79:6e:2b:95:74:e1:7a:ae:9d:24: a8:3b:20:cb:4a:b0:61:ef:e9:e3:ed:5e:c5:84:20: 76:b0:39:43:db:d9:cc:e3:a1:5e:00:4c:11:56:fc: 30:3e:dd:5d:05:8c:19:aa:31:e8:f8:3a:b1:3b:f5: 60:24:59:23:2a:6f:fd:6b:23:89:a2:b8:9e:c0:50: d8:80:be:8b:9a:1b:70:ea:25:6e:1c:51:60:8c:e5: 72:58:ef:2a:a9:25:27:07:82:a7:79:8a:88:a1:01: 8d:66:86:7e:01:c5:52:67:48:fd:49:5c:13:d3:99: 16:6a:d9:88:23:7a:44:b3:39:10:5c:98:b4:ed:b4: f6:c6:6f:9f:4c:ff:47:14:c8:5f:e1:cf:48:53:79: 8d:3f:49:04:fd:23:24:07:8c:35:10:16:f5:a0:90: 1f:2b:b3:50:8a:4c:12:ca:19:39:34:ca:54:d6:70: f2:ec:fc:7b:ec:e1:94:73:d3:01:39:ea:e8:4c:f8: 80:54:a4:d3:c2:c0:2d:5a:22:7f:d9:b8:05:08:a9: 96:26:f0:45:77:e8:40:6c:f0:55:3c:ec:6c:c9:a6: 00:ff:c4:01:45:ff:a7:15:53:02:c6:9f:e8:c4:08: bf:6b:ce:56:9d:1b:7f:2f:da:25:9e:96:de:64:26: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:36:8A:24:07:34:79:BF:2A:14:99:4A:13:6A:DF:E4:3F:6A:2E:6D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.40.0/22 177.87.28.0/22 IPv6: 2804:1554::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263384 Signature Algorithm: sha256WithRSAEncryption 8b:ca:23:03:93:42:ee:f9:4c:8d:eb:1a:77:e3:ec:7c:55:0c: 98:39:a5:75:ea:c5:99:93:e5:9c:84:80:37:c3:c0:08:ca:9b: 55:c5:39:b1:2b:ea:f0:da:52:6d:ca:15:d2:f3:b7:be:82:df: 71:a1:cd:2a:61:41:d5:f9:50:6e:3e:26:28:5c:46:ae:5e:7e: c9:8d:fe:fd:cb:79:f4:a4:bf:51:4b:51:35:25:79:32:3d:b8: 20:3e:39:be:d3:63:2c:3a:52:85:f5:cb:c9:b3:ee:f9:34:6a: 3e:e1:5f:fb:5d:8f:73:a1:cb:23:78:7f:df:4b:f3:48:58:6a: 9b:e9:0b:1b:67:8c:07:c0:3f:cd:75:3e:52:be:db:ac:da:34: 57:6a:0c:3f:2a:06:44:b7:91:0b:ae:8c:3b:82:ea:05:a6:af: 1e:1a:8a:fb:fd:b3:ef:12:57:84:eb:51:66:39:b5:b4:b0:a0: 49:91:ff:ff:ab:2a:94:3d:88:a9:93:45:75:47:f0:da:3a:9f: 8f:c9:a7:f1:a5:3d:18:e3:7b:07:f8:f4:f4:32:df:73:5e:fa: 2d:20:9f:0d:5b:d1:24:ce:06:d4:b1:23:ec:ae:14:eb:6c:bf: f4:d5:61:64:bd:08:8c:84:cd:2d:fc:35:94:2f:98:54:ef:74: 60:b0:1d:ff -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZAL5X+RwUuSfBhepEwY59h9YbEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjIxNjI0MDJaFw0yNjEwMjExNjI5MDJaMDMxMTAvBgNV BAMTKEU4MzY4QTI0MDczNDc5QkYyQTE0OTk0QTEzNkFERkU0M0Y2QTJFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKKNNeW4rlXTheq6dJKg7IMtK sGHv6ePtXsWEIHawOUPb2czjoV4ATBFW/DA+3V0FjBmqMej4OrE79WAkWSMqb/1r I4miuJ7AUNiAvouaG3DqJW4cUWCM5XJY7yqpJScHgqd5ioihAY1mhn4BxVJnSP1J XBPTmRZq2YgjekSzORBcmLTttPbGb59M/0cUyF/hz0hTeY0/SQT9IyQHjDUQFvWg kB8rs1CKTBLKGTk0ylTWcPLs/Hvs4ZRz0wE56uhM+IBUpNPCwC1aIn/ZuAUIqZYm 8EV36EBs8FU87GzJpgD/xAFF/6cVUwLGn+jECL9rzladG38v2iWelt5kJn7hAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToNookBzR5vyoU mUoTat/kP2oubTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlBX VzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlIQTEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZQ V1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAvRTgz NjhBMjQwNzM0NzlCRjJBMTQ5OTRBMTM2QURGRTQzRjZBMkU2RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirkoAwQCsVccMA0EAgACMAcDBQAoBBVUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQE2DANBgkqhkiG9w0BAQsFAAOCAQEAi8ojA5NC 7vlMjesad+PsfFUMmDmlderFmZPlnISAN8PACMqbVcU5sSvq8NpSbcoV0vO3voLf caHNKmFB1flQbj4mKFxGrl5+yY3+/ct59KS/UUtRNSV5Mj24ID45vtNjLDpShfXL ybPu+TRqPuFf+12Pc6HLI3h/30vzSFhqm+kLG2eMB8A/zXU+Ur7brNo0V2oMPyoG RLeRC66MO4LqBaavHhqK+/2z7xJXhOtRZjm1tLCgSZH//6sqlD2IqZNFdUfw2jqf j8mn8aU9GON7B/j09DLfc176LSCfDVvRJM4G1LEj7K4U62y/9NVhZL0IjITNLfw1 lC+YVO90YLAd/w== -----END CERTIFICATE-----Generated at Mon Nov 3 05:24:17 2025 by rpki-client