$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer File: 2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer (raw, json) Hash identifier: Nz9ce/fQf93uE3fMjT3lzJ9+2RcfgUPwfLV1I2l8H7M= Subject key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 76E05CEF38E66640EF3EB007229BD4AF28214E64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft caRepository: rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 04:04:19 +0000 Certificate not after: Tue 03 Nov 2026 04:09:19 +0000 Subordinate resources: AS: 268360 IP: 45.238.200.0/22 IP: 2804:4ff4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e0:5c:ef:38:e6:66:40:ef:3e:b0:07:22:9b:d4:af:28:21:4e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 04:04:19 2025 GMT Not After : Nov 3 04:09:19 2026 GMT Subject: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:bf:2b:4c:e5:2c:84:0f:0a:7f:50:13:dd: 06:42:f7:18:20:7c:bb:3b:7e:dc:27:be:37:c3:a0: 68:93:8f:2e:a5:32:b4:a6:a7:05:3f:d3:1b:f2:35: 2f:74:09:30:db:bd:3d:76:cf:46:98:2c:8e:4c:06: 4c:a9:56:46:39:11:b9:b4:4a:db:f5:6b:4b:1d:51: ae:ab:e4:56:5d:cc:50:9b:e4:78:70:35:24:1c:04: 01:8c:cc:4d:84:48:d6:17:ed:67:16:ed:60:c3:c9: 29:8c:bf:87:d8:30:b0:a1:c5:f5:9e:ac:ec:be:56: dc:f0:a1:d2:42:56:45:2c:81:91:ea:a7:c6:9f:51: 4f:26:71:1d:f8:51:e1:e5:1c:9a:2e:9a:65:5d:48: 71:f0:84:67:b6:82:46:f1:90:e2:5b:24:82:b8:b0: ef:95:64:f0:f9:bf:65:f2:39:35:e6:e8:fc:68:93: 81:21:d2:8b:8d:07:38:f1:cb:61:64:b7:f1:4b:5f: c8:64:75:2e:9b:6a:d2:d3:eb:85:f9:51:26:9e:95: 57:21:a4:e2:ea:85:4b:d3:6f:24:ec:7a:f0:a1:44: b5:bc:99:59:bf:5e:a4:a8:7c:a7:7a:16:45:d2:7a: c6:10:e7:82:cd:3a:f7:eb:52:77:3c:3c:ac:40:39: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.200.0/22 IPv6: 2804:4ff4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268360 Signature Algorithm: sha256WithRSAEncryption 68:1d:c3:bb:ff:40:0f:33:c3:a6:b9:a1:5b:50:7a:67:8c:e1: 50:a5:c8:25:d7:46:bb:2e:58:6f:e9:d0:a9:4a:86:12:ac:8d: 53:17:03:b9:7d:56:3f:ab:67:87:d5:51:70:a2:c6:6a:e5:f1: 17:3c:1e:42:52:23:1c:05:45:79:5c:69:19:bd:d0:e1:fa:ec: 60:21:8d:45:ac:d8:b2:63:54:2e:68:00:1d:0c:42:f4:02:b7: 22:ec:fe:d6:d8:c3:fc:e6:af:fb:74:02:b5:99:a3:38:f8:88: ab:08:28:73:65:f4:7e:d8:81:cd:b1:8e:40:3b:2b:3a:22:ad: cf:ab:df:a9:d7:7d:89:9b:dd:2e:6a:ba:1b:e0:71:77:b2:35: a7:b9:8b:f0:16:7a:a1:5d:98:9a:a9:b3:76:42:3c:3a:4d:d1: 6d:8b:e0:83:6f:6f:a1:5c:68:e8:bc:ad:14:91:33:5a:86:4e: a0:d8:fe:6d:01:7e:ff:66:2c:84:10:54:16:17:f6:f0:27:94: 33:3f:28:3a:bd:a3:05:5c:98:1e:fa:ac:d7:cc:3b:da:ec:05: fa:a1:87:a5:19:37:63:a9:44:a2:b6:fd:8b:35:e1:20:4e:1a: d1:78:3f:d1:ac:8b:8b:00:e3:d7:e2:7c:09:45:da:55:da:02: 1c:3e:09:8a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUduBc7zjmZkDvPrAHIpvUryghTmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDQwNDA0MTlaFw0yNjExMDMwNDA5MTlaMDMxMTAvBgNV BAMTKDIyODJFQkFEODI0NTU2RkVCOUQxQjBGQTM4MEJDMUFCOUNFRDA2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUr8rTOUshA8Kf1AT3QZC9xgg fLs7ftwnvjfDoGiTjy6lMrSmpwU/0xvyNS90CTDbvT12z0aYLI5MBkypVkY5Ebm0 Stv1a0sdUa6r5FZdzFCb5HhwNSQcBAGMzE2ESNYX7WcW7WDDySmMv4fYMLChxfWe rOy+VtzwodJCVkUsgZHqp8afUU8mcR34UeHlHJoummVdSHHwhGe2gkbxkOJbJIK4 sO+VZPD5v2XyOTXm6Pxok4Eh0ouNBzjxy2Fkt/FLX8hkdS6batLT64X5USaelVch pOLqhUvTbyTsevChRLW8mVm/XqSofKd6FkXSesYQ54LNOvfrUnc8PKxAOTuTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiguutgkVW/rnR sPo4C8GrnO0GJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlJI SnBjN2ZoRExMdUpUUXJRaDVHZ0ZBM1ZhY0JoVndiaW5aTVZ0ZFdZckUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJS SEpwYzdmaERMTHVKVFFyUWg1R2dGQTNWYWNCaFZ3YmluWk1WdGRXWXJFLzAvMjI4 MkVCQUQ4MjQ1NTZGRUI5RDFCMEZBMzgwQkMxQUI5Q0VEMDYyNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe7IMA0EAgACMAcDBQAoBE/0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYSDANBgkqhkiG9w0BAQsFAAOCAQEAaB3Du/9ADzPDprmh W1B6Z4zhUKXIJddGuy5Yb+nQqUqGEqyNUxcDuX1WP6tnh9VRcKLGauXxFzweQlIj HAVFeVxpGb3Q4frsYCGNRazYsmNULmgAHQxC9AK3Iuz+1tjD/Oav+3QCtZmjOPiI qwgoc2X0ftiBzbGOQDsrOiKtz6vfqdd9iZvdLmq6G+Bxd7I1p7mL8BZ6oV2Ymqmz dkI8Ok3RbYvgg29voVxo6LytFJEzWoZOoNj+bQF+/2YshBBUFhf28CeUMz8oOr2j BVyYHvqs18w72uwF+qGHpRk3Y6lEorb9izXhIE4a0Xg/0ayLiwDj1+J8CUXaVdoC HD4Jig== -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:57 2025 by rpki-client