$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer File: EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer (raw, json) Hash identifier: nSUbNQCn42qaT3qdq3yL09OZBqMHNa5+YWmqVzEW5hE= Subject key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5592153993D9141B6C4E93CE1F44899A026CD599 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft caRepository: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 17:23:29 +0000 Certificate not after: Wed 21 Oct 2026 17:28:29 +0000 Subordinate resources: AS: 263913 IP: 138.204.240.0/22 IP: 170.231.216.0/22 IP: 2804:279c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:92:15:39:93:d9:14:1b:6c:4e:93:ce:1f:44:89:9a:02:6c:d5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 17:23:29 2025 GMT Not After : Oct 21 17:28:29 2026 GMT Subject: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:82:6e:02:38:f0:37:16:78:54:b4:62:0a: 93:e8:8f:54:f9:6b:42:95:56:4d:16:c1:c3:77:69: f2:ef:69:7c:5d:3e:2c:07:69:58:31:23:c0:e0:d8: 54:9e:f5:95:49:d0:a9:b7:1c:3b:90:a5:e9:62:c3: a3:68:9f:aa:28:74:ef:59:ff:7d:4b:ca:cb:83:e2: ad:f7:22:85:e9:2e:05:42:95:56:a9:4d:56:b6:53: 3e:75:44:49:0b:f6:37:b8:e3:32:58:ae:c5:65:d8: e5:37:32:5b:b8:af:19:67:52:1c:7f:0e:66:19:6a: 96:3b:cf:a8:3e:e2:07:34:43:b3:28:58:de:69:29: f5:f8:08:32:01:69:65:bb:81:79:8b:c6:a1:9b:85: e6:42:d5:ed:7e:a2:e4:33:37:35:4a:e5:d3:d9:44: 59:12:49:d9:4d:06:0d:69:64:a6:ea:52:36:65:15: 05:86:22:e3:e0:9c:b3:c9:7d:40:a9:a3:89:4b:ff: 97:45:d1:8c:3c:97:4c:f9:85:1a:2a:72:c5:d1:85: c0:16:6a:c7:2b:d1:92:11:01:08:44:9e:4a:b3:02: dc:fe:6f:07:05:60:28:b1:1e:7f:7e:ba:db:41:f1: b7:80:a2:a4:95:92:93:18:0d:25:1f:b0:9f:ff:6e: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.240.0/22 170.231.216.0/22 IPv6: 2804:279c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263913 Signature Algorithm: sha256WithRSAEncryption d6:77:2b:e8:42:ca:36:bc:3c:8e:6b:32:fd:fb:c2:54:53:47: 9d:ef:1d:f9:a8:e0:65:34:79:19:c0:89:50:62:5a:08:f0:df: 91:d6:5a:14:ee:4b:66:4a:6f:bb:fb:fe:d8:64:77:63:0e:1a: 06:81:7d:84:c5:f1:e3:aa:b6:9b:9c:30:2f:c7:e1:7c:8b:8f: f0:62:e9:2e:b1:d2:d2:e8:ac:86:8f:9e:0b:f8:82:a8:f8:0b: 45:c8:f6:9f:cb:a7:38:7f:dd:dd:2b:d5:02:28:72:8c:31:89: 57:42:ad:cf:8f:48:d4:59:08:17:81:85:aa:94:38:bc:5e:21: 1b:b4:18:e2:97:99:e4:d2:53:75:a0:91:e5:ef:af:3b:3b:f5: fc:6e:dc:02:5d:3d:88:60:6e:f6:21:02:c1:bb:30:c0:95:e8: 50:0e:c3:d5:6a:71:4d:94:45:db:92:5d:d1:ac:46:c7:df:f5: b2:9c:99:8f:f1:bd:1b:9d:13:3a:69:19:6b:6f:29:d1:e2:27: 94:c4:9d:56:3e:5e:4e:69:85:e0:5f:99:4a:25:ec:c2:36:12: f3:67:81:f9:2c:19:95:54:2e:07:22:d6:c5:c6:7c:85:b0:19: 02:bf:60:73:e4:5c:d7:04:21:91:85:30:cb:48:51:19:7c:31: a1:cf:47:52 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVZIVOZPZFBtsTpPOH0SJmgJs1ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMjIxNzIzMjlaFw0yNjEwMjExNzI4MjlaMDMxMTAvBgNV BAMTKEVDMjg1Mzg0MjdCRjJBNENBMjE4MjA5REI5QTIwMDhCNEU1ODdBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjoJuAjjwNxZ4VLRiCpPoj1T5 a0KVVk0WwcN3afLvaXxdPiwHaVgxI8Dg2FSe9ZVJ0Km3HDuQpeliw6Non6oodO9Z /31LysuD4q33IoXpLgVClVapTVa2Uz51REkL9je44zJYrsVl2OU3Mlu4rxlnUhx/ DmYZapY7z6g+4gc0Q7MoWN5pKfX4CDIBaWW7gXmLxqGbheZC1e1+ouQzNzVK5dPZ RFkSSdlNBg1pZKbqUjZlFQWGIuPgnLPJfUCpo4lL/5dF0Yw8l0z5hRoqcsXRhcAW ascr0ZIRAQhEnkqzAtz+bwcFYCixHn9+uttB8beAoqSVkpMYDSUfsJ//bvMDAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsKFOEJ78qTKIY IJ25ogCLTlh6ujAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1dU OWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NX VDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAvRUMy ODUzODQyN0JGMkE0Q0EyMTgyMDlEQjlBMjAwOEI0RTU4N0FCQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiszwAwQCqufYMA0EAgACMAcDBQAoBCecMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG6TANBgkqhkiG9w0BAQsFAAOCAQEA1ncr6ELK Nrw8jmsy/fvCVFNHne8d+ajgZTR5GcCJUGJaCPDfkdZaFO5LZkpvu/v+2GR3Yw4a BoF9hMXx46q2m5wwL8fhfIuP8GLpLrHS0uisho+eC/iCqPgLRcj2n8unOH/d3SvV AihyjDGJV0Ktz49I1FkIF4GFqpQ4vF4hG7QY4peZ5NJTdaCR5e+vOzv1/G7cAl09 iGBu9iECwbswwJXoUA7D1WpxTZRF25Jd0axGx9/1spyZj/G9G50TOmkZa28p0eIn lMSdVj5eTmmF4F+ZSiXswjYS82eB+SwZlVQuByLWxcZ8hbAZAr9gc+Rc1wQhkYUw y0hRGXwxoc9HUg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:47 2025 by rpki-client