$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer (raw, json) Hash identifier: 6Hw2WRSsRTAxbqILy04HPEy3MkA5peNfwdmhSYyBnHM= Subject key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 389FC686957E09833D165169964FD4DA3DE7E7F0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft caRepository: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 14 Oct 2026 06:24:41 +0000 Certificate not after: Wed 13 Oct 2027 06:29:41 +0000 Subordinate resources: AS: 268186 IP: 45.171.28.0/22 IP: 2804:5960::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Oct 2026 20:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9f:c6:86:95:7e:09:83:3d:16:51:69:96:4f:d4:da:3d:e7:e7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 14 06:24:41 2026 GMT Not After : Oct 13 06:29:41 2027 GMT Subject: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:c5:2f:ce:c1:0b:98:fb:4e:ca:c1:25:34: b5:a0:fc:5d:3d:2d:98:dd:d4:16:f5:1b:6d:f9:71: 8d:cf:73:77:eb:a5:b3:47:0f:bf:b4:42:68:8e:6c: a8:5a:47:97:33:13:cd:bf:84:d8:ac:7d:41:65:f8: 7a:fd:06:7d:69:e8:9e:3c:1a:db:03:5e:34:01:07: 82:e5:8b:2c:0a:ea:a3:e4:5a:5a:cd:98:b8:59:62: 27:2b:29:a1:b3:32:33:93:c6:81:3a:08:5c:f6:78: 56:69:4a:65:27:a9:18:bc:15:7f:b0:11:ed:d5:96: 81:5f:c2:9f:4f:95:da:8f:3c:c7:b3:2c:3b:0e:8c: 3c:b1:f3:c2:8e:3a:36:2b:d4:1e:6a:47:4b:69:0c: 20:ba:de:87:8c:87:fc:10:3c:fd:71:2b:9e:15:03: 2d:c9:4b:91:da:22:d6:41:b1:19:f9:e9:eb:9e:66: e1:64:72:89:71:e8:1d:d4:1a:62:bc:17:32:c8:c1: 6f:f7:92:c2:9d:13:63:d6:5a:30:ce:a0:84:cb:3e: 81:9c:5a:a1:2f:91:4d:7b:d7:0a:a2:76:bf:f5:0b: e2:c5:21:2e:03:65:67:e4:0f:30:2d:61:57:f1:26: 4f:7f:89:fa:10:2a:75:f4:86:5a:90:80:0a:21:1d: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.28.0/22 IPv6: 2804:5960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268186 Signature Algorithm: sha256WithRSAEncryption 0e:10:b8:4a:6e:2b:21:7e:f5:b7:bd:2d:4e:37:1e:a3:a6:e0: 5e:7b:97:79:81:f2:99:34:a8:be:e8:9f:71:b3:6a:c8:6b:8e: e8:af:59:00:01:b3:83:32:69:d8:81:e6:e8:83:53:eb:27:50: 91:ab:f8:17:87:c0:c2:99:78:d1:44:11:9f:42:b0:a0:00:a2: 56:59:69:5e:13:72:f4:bc:3e:6f:60:2a:59:83:a4:be:32:1d: 64:23:b4:dd:c4:5e:1d:4e:79:b8:dc:f8:4a:9f:a6:82:49:62: d3:06:c2:1f:d6:d2:d7:4f:04:55:5d:0d:20:07:13:78:36:27: 89:fd:5a:e0:25:0d:00:16:ee:ff:7d:7a:ef:02:77:32:3e:8d: 21:88:2a:40:93:1f:af:da:b0:d3:f8:ba:ca:9b:1d:3f:e5:27: 63:76:bd:20:2f:cc:b5:bf:71:f5:ae:17:bb:06:53:90:b7:fc: 0b:f2:0e:d3:3f:5d:97:b4:02:79:d4:9f:0b:61:64:b4:4e:c9: 7a:80:23:b4:8d:05:c9:b2:e3:17:30:5a:25:5e:21:7c:2f:72: 64:4b:8d:dd:3d:98:69:55:50:3f:a6:3b:36:99:40:94:cb:ec: fb:25:fc:4f:76:4e:31:78:95:3f:6a:e4:a2:05:02:4b:88:7f: 93:e8:82:3d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOJ/GhpV+CYM9FlFplk/U2j3n5/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjEwMTQwNjI0NDFaFw0yNzEwMTMwNjI5NDFaMDMxMTAvBgNV BAMTKDI1QzRFOUMwMUU5N0Y0RTg5MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIMUvzsELmPtOysElNLWg/F09 LZjd1Bb1G235cY3Pc3frpbNHD7+0QmiObKhaR5czE82/hNisfUFl+Hr9Bn1p6J48 GtsDXjQBB4LliywK6qPkWlrNmLhZYicrKaGzMjOTxoE6CFz2eFZpSmUnqRi8FX+w Ee3VloFfwp9PldqPPMezLDsOjDyx88KOOjYr1B5qR0tpDCC63oeMh/wQPP1xK54V Ay3JS5HaItZBsRn56eueZuFkcolx6B3UGmK8FzLIwW/3ksKdE2PWWjDOoITLPoGc WqEvkU171wqidr/1C+LFIS4DZWfkDzAtYVfxJk9/ifoQKnX0hlqQgAohHbY7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlxOnAHpf06JEC rOSn67nO5TvQgDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEJa b2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hC Wm9oQUM2ekY4Zm1OUDQ4YXFiVlJNNE1MNWdCUnVBa1lGdmREWUdCdll3LzAvMjVD NEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VFNTNCRDA4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLascMA0EAgACMAcDBQAoBFlgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXmjANBgkqhkiG9w0BAQsFAAOCAQEADhC4Sm4rIX71t70t Tjceo6bgXnuXeYHymTSovuifcbNqyGuO6K9ZAAGzgzJp2IHm6INT6ydQkav4F4fA wpl40UQRn0KwoACiVllpXhNy9Lw+b2AqWYOkvjIdZCO03cReHU55uNz4Sp+mgkli 0wbCH9bS108EVV0NIAcTeDYnif1a4CUNABbu/3167wJ3Mj6NIYgqQJMfr9qw0/i6 ypsdP+UnY3a9IC/Mtb9x9a4XuwZTkLf8C/IO0z9dl7QCedSfC2FktE7JeoAjtI0F ybLjFzBaJV4hfC9yZEuN3T2YaVVQP6Y7NplAlMvs+yX8T3ZOMXiVP2rkogUCS4h/ k+iCPQ== -----END CERTIFICATE-----Generated at Thu Oct 15 19:17:16 2026 by rpki-client