$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer File: 88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer (raw, json) Hash identifier: l52zgLwBzHzZVShbeMkck23DONNOxSesLFQ9DZdR1yU= Subject key identifier: 88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E37E441D144452AF0431EE45C0C872D51F35DE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft caRepository: rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 16:35:49 +0000 Certificate not after: Mon 02 Nov 2026 16:40:49 +0000 Subordinate resources: AS: 271310 IP: 177.53.208.0/22 IP: 2804:7984::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 00:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:37:e4:41:d1:44:45:2a:f0:43:1e:e4:5c:0c:87:2d:51:f3:5d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 16:35:49 2025 GMT Not After : Nov 2 16:40:49 2026 GMT Subject: CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:00:ce:6d:57:28:d3:85:e3:b6:fc:09:44: fd:14:cc:3c:f9:c5:ad:e6:81:e4:6b:eb:8b:1f:7c: 8a:56:07:63:73:e0:a9:d9:c6:32:37:d1:b6:4d:b3: d6:9b:29:14:ec:08:4c:e1:d5:40:a2:d1:73:56:72: 2f:56:dd:37:0b:09:4d:43:55:5b:33:49:68:e2:42: 7b:c3:24:d1:9a:2d:c1:15:04:05:94:fc:26:0c:fc: 22:33:a7:32:01:ef:1d:21:d6:f6:4d:bc:7c:0a:5c: e7:20:5a:ed:6a:4f:33:89:02:e7:dc:88:c7:b7:7f: 48:e6:b1:6e:80:95:ef:0a:2c:5f:0b:3f:ab:76:a6: d5:0c:af:49:c2:3e:6f:3e:d5:52:18:c2:b9:e7:ac: 58:a7:81:73:36:cd:9a:20:b7:af:58:e0:f0:43:4d: ab:a1:ec:8d:6e:96:55:80:f9:40:30:8a:e1:b0:d0: 29:65:76:1e:6d:ef:ab:56:2d:ec:98:09:18:52:ac: 15:f4:2a:a1:f4:de:ae:9b:2a:c1:bd:cd:4d:64:9b: 31:91:2d:d9:f6:50:f1:66:53:e7:d8:ef:c6:22:8d: 69:fa:a9:66:31:3e:a1:dc:4a:5c:bc:a4:34:37:2e: 90:e4:d3:19:b7:70:24:b2:72:91:56:46:ca:b0:9e: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.53.208.0/22 IPv6: 2804:7984::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271310 Signature Algorithm: sha256WithRSAEncryption 16:f8:84:20:ef:bf:a6:53:23:64:32:e5:74:69:b8:fe:99:b6: 5a:45:74:1a:f4:5a:c7:94:bf:9c:b6:f3:49:d7:c3:9d:84:7a: 8a:28:80:04:d7:b0:a8:b1:8e:a1:d3:50:41:d4:78:d9:f9:2f: 79:6f:d2:e8:5b:44:71:3b:7e:8b:cc:21:88:76:5a:fb:17:36: 66:2e:f2:58:04:d7:8a:b3:9c:c0:f5:cf:e0:70:45:fb:4a:87: 1a:d2:be:26:fc:92:75:d4:5c:5d:52:84:06:cf:28:e3:4c:bd: 1e:e9:a3:48:d0:52:31:02:aa:e6:41:34:0b:52:83:25:b9:d3: 8a:28:6f:b1:b6:98:04:a2:37:8d:bd:19:28:e3:c5:39:af:72: ea:cc:06:a7:09:ec:21:69:fe:44:41:fa:f4:9e:3a:8a:e8:09: 86:4d:47:09:0c:45:28:db:64:ef:2f:9f:9d:f7:6b:55:dd:5a: 51:f8:98:1f:b6:09:4b:dc:50:08:ec:22:f1:16:16:ab:5d:30: c8:22:bf:45:84:98:16:3b:84:a8:e9:e2:02:7c:4c:a6:2a:9a: 66:1a:c6:60:83:d3:ca:2a:ad:1f:77:42:52:57:fc:b5:96:2f: c3:e4:45:51:b4:42:0b:76:06:b1:85:06:94:17:74:b8:3f:58: 6d:da:bd:25 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfjfkQdFERSrwQx7kXAyHLVHzXegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMxNjM1NDlaFw0yNjExMDIxNjQwNDlaMDMxMTAvBgNV BAMTKDg4RDU1RkFBN0I1RTFFNzFEMTM3NDc2QkEyNDI2N0U3QkRCRDU0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8gDObVco04XjtvwJRP0UzDz5 xa3mgeRr64sffIpWB2Nz4KnZxjI30bZNs9abKRTsCEzh1UCi0XNWci9W3TcLCU1D VVszSWjiQnvDJNGaLcEVBAWU/CYM/CIzpzIB7x0h1vZNvHwKXOcgWu1qTzOJAufc iMe3f0jmsW6Ale8KLF8LP6t2ptUMr0nCPm8+1VIYwrnnrFingXM2zZogt69Y4PBD Tauh7I1ullWA+UAwiuGw0Clldh5t76tWLeyYCRhSrBX0KqH03q6bKsG9zU1kmzGR Ldn2UPFmU+fY78YijWn6qWYxPqHcSly8pDQ3LpDk0xm3cCSycpFWRsqwnjHfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSI1V+qe14ecdE3 R2uiQmfnvb1UqTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXZ5 VXp1TTJWMWNyb3d3Ulp3RUVLaUdEZG9mVzdXUUd5eXRiZTUzb01xd1cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl2 eVV6dU0yVjFjcm93d1Jad0VFS2lHRGRvZlc3V1FHeXl0YmU1M29NcXdXLzAvODhE NTVGQUE3QjVFMUU3MUQxMzc0NzZCQTI0MjY3RTdCREJENTRBOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsTXQMA0EAgACMAcDBQAoBHmEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjzjANBgkqhkiG9w0BAQsFAAOCAQEAFviEIO+/plMjZDLl dGm4/pm2WkV0GvRax5S/nLbzSdfDnYR6iiiABNewqLGOodNQQdR42fkveW/S6FtE cTt+i8whiHZa+xc2Zi7yWATXirOcwPXP4HBF+0qHGtK+JvySddRcXVKEBs8o40y9 HumjSNBSMQKq5kE0C1KDJbnTiihvsbaYBKI3jb0ZKOPFOa9y6swGpwnsIWn+REH6 9J46iugJhk1HCQxFKNtk7y+fnfdrVd1aUfiYH7YJS9xQCOwi8RYWq10wyCK/RYSY FjuEqOniAnxMpiqaZhrGYIPTyiqtH3dCUlf8tZYvw+RFUbRCC3YGsYUGlBd0uD9Y bdq9JQ== -----END CERTIFICATE-----Generated at Wed Nov 5 22:43:51 2025 by rpki-client