$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer File: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer (raw, json) Hash identifier: k1LnkdQLST3dUTz5HEWJyN0JQvE/2eE/PsMZUqKyC+4= Subject key identifier: 71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 430A9486B6DB098D64A6260EBEFAC89E1492E508 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft caRepository: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 14:29:18 +0000 Certificate not after: Tue 03 Nov 2026 14:34:18 +0000 Subordinate resources: AS: 267501 IP: 45.183.132.0/22 IP: 201.182.64.0/22 IP: 2804:4274::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0a:94:86:b6:db:09:8d:64:a6:26:0e:be:fa:c8:9e:14:92:e5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 14:29:18 2025 GMT Not After : Nov 3 14:34:18 2026 GMT Subject: CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:cd:76:30:df:2c:41:03:cc:7d:16:73:91: 1b:e9:8e:ef:1c:2b:bc:a1:cc:c1:46:fa:53:82:a5: bc:45:32:a3:69:cc:df:ec:b6:b5:45:f5:b1:19:cb: 40:c0:a6:e5:14:26:fc:4a:2a:5e:cb:6c:7a:67:97: 67:61:ed:19:28:3b:5e:53:27:a7:9a:e6:f4:66:11: 16:89:99:94:06:af:2f:0e:2f:b3:3e:15:dc:e7:4a: ff:2b:86:f1:79:6a:b2:9b:b3:36:63:83:10:70:02: 4a:b3:32:d3:a9:bd:3d:b8:6c:b1:ab:34:7e:eb:55: ca:b2:05:5e:35:ce:06:3d:b7:10:a4:f8:a2:b4:f2: 07:b6:5c:f3:61:7d:39:74:fe:47:c4:da:ab:79:e9: 66:fa:ae:1d:93:a9:27:74:60:44:00:d4:7a:14:25: 9b:0a:11:13:2b:a6:99:70:03:a3:04:a6:fa:c2:92: fa:3a:58:4d:b3:24:6e:d8:c0:47:1b:e0:a0:8b:5a: b9:3f:08:56:27:c2:4a:c8:60:12:29:f9:10:81:12: c1:d0:b9:ad:ce:4e:ce:3d:eb:8e:8c:5f:e5:c0:08: 99:ec:91:14:bd:40:f7:ac:5f:89:ee:18:d6:f9:b0: 17:e0:a6:3e:b7:cc:64:f8:91:69:65:90:be:2d:cb: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.132.0/22 201.182.64.0/22 IPv6: 2804:4274::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267501 Signature Algorithm: sha256WithRSAEncryption 88:b1:0a:5c:fe:3a:60:fd:2d:a4:3c:d4:30:d4:5e:d9:10:5d: 0d:0d:48:6e:d8:79:0f:29:03:dc:7a:31:2c:60:05:15:e2:0c: 9b:6d:74:ec:4e:e3:b2:af:ff:49:7d:df:94:0f:c7:0a:06:61: 90:76:06:f9:56:91:3d:e6:96:3d:9a:9d:9c:9e:24:0e:fb:76: 51:93:7a:de:7b:77:3f:f4:04:01:cf:16:b6:01:c2:7d:0c:b9: de:09:5d:d8:c9:90:cd:e7:77:3c:ea:f2:22:c1:1a:b1:8f:f0: 07:6e:2e:2b:5c:8b:10:d1:a7:ec:49:f9:a7:aa:a2:1c:8a:1b: dd:8b:94:d7:5f:23:24:2d:a5:23:60:b9:60:4d:c2:38:2d:d9: d5:c8:9c:55:85:b9:9c:83:20:e3:cd:7e:c4:38:0d:49:f6:4d: 78:72:4e:ab:a8:a0:11:60:b3:a7:17:bf:6b:5a:15:a2:5d:77: cc:0e:39:3d:30:01:05:55:b7:86:c6:99:95:3f:7c:1f:ef:e4: fb:eb:57:34:93:a5:8d:84:da:5f:17:cb:b9:30:31:02:46:5d: 99:1a:47:4c:6f:19:ec:6f:97:87:75:ce:75:8a:35:15:f9:d0: 3a:0b:b9:ae:ef:48:9f:5f:5c:09:e6:a5:17:35:c7:8e:0b:a8: 33:51:01:52 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQwqUhrbbCY1kpiYOvvrInhSS5QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDQxNDI5MThaFw0yNjExMDMxNDM0MThaMDMxMTAvBgNV BAMTKDcxNjJGOUYzQzdCOEFGNEFEMkQ4MzEzRTlEMDBCMzJBRTM1RDMwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHc12MN8sQQPMfRZzkRvpju8c K7yhzMFG+lOCpbxFMqNpzN/strVF9bEZy0DApuUUJvxKKl7LbHpnl2dh7RkoO15T J6ea5vRmERaJmZQGry8OL7M+FdznSv8rhvF5arKbszZjgxBwAkqzMtOpvT24bLGr NH7rVcqyBV41zgY9txCk+KK08ge2XPNhfTl0/kfE2qt56Wb6rh2TqSd0YEQA1HoU JZsKERMrpplwA6MEpvrCkvo6WE2zJG7YwEcb4KCLWrk/CFYnwkrIYBIp+RCBEsHQ ua3OTs49646MX+XACJnskRS9QPesX4nuGNb5sBfgpj63zGT4kWllkL4ty0u1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxYvnzx7ivStLY MT6dALMq410wIzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0tu UHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZGb3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NL blB4aGtzUUhSdXFnc2FrRlJ4dW10NFhSY2dvN2dRVkdkU3o5aFRGRm9xLzAvNzE2 MkY5RjNDN0I4QUY0QUQyRDgzMTNFOUQwMEIzMkFFMzVEMzAyMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbeEAwQCybZAMA0EAgACMAcDBQAoBEJ0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQU7TANBgkqhkiG9w0BAQsFAAOCAQEAiLEKXP46 YP0tpDzUMNRe2RBdDQ1Ibth5DykD3HoxLGAFFeIMm2107E7jsq//SX3flA/HCgZh kHYG+VaRPeaWPZqdnJ4kDvt2UZN63nt3P/QEAc8WtgHCfQy53gld2MmQzed3POry IsEasY/wB24uK1yLENGn7En5p6qiHIob3YuU118jJC2lI2C5YE3COC3Z1cicVYW5 nIMg481+xDgNSfZNeHJOq6igEWCzpxe/a1oVol13zA45PTABBVW3hsaZlT98H+/k ++tXNJOljYTaXxfLuTAxAkZdmRpHTG8Z7G+Xh3XOdYo1FfnQOgu5ru9In19cCeal FzXHjguoM1EBUg== -----END CERTIFICATE-----Generated at Wed Nov 5 18:30:25 2025 by rpki-client