$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer File: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer (raw, json) Hash identifier: DrpE6fsjsvjKu0UiRgvca9yb9LAUh6K68wUtPi6DLKA= Subject key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C2C569C51193F3256B97A3A952EC17ABF2F9628 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft caRepository: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 00:10:52 +0000 Certificate not after: Tue 03 Nov 2026 00:15:52 +0000 Subordinate resources: AS: 268663 IP: 45.165.12.0/22 IP: 2804:54a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2c:56:9c:51:19:3f:32:56:b9:7a:3a:95:2e:c1:7a:bf:2f:96:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 00:10:52 2025 GMT Not After : Nov 3 00:15:52 2026 GMT Subject: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:71:10:39:21:bb:ad:81:e3:5f:6f:61:0c: 39:ef:15:37:c1:7f:28:70:5a:e4:c2:1c:d1:d2:4f: af:e0:1f:8b:83:27:34:5f:64:3d:16:11:d5:fd:56: ad:61:da:a8:ab:b4:2d:67:82:cc:a1:55:84:fc:11: 88:c3:30:86:c7:6d:8f:c4:1c:80:d5:10:2b:de:61: cb:4d:d7:87:78:8c:95:a2:7d:35:10:f1:7c:d7:bc: c3:3e:11:c4:f7:02:2a:00:cf:47:ce:4b:46:eb:75: 79:f8:0b:72:22:9f:43:eb:c9:17:6c:86:4d:93:f0: 8d:fc:23:be:27:ea:34:3f:ad:b5:4a:fe:d9:49:5a: c0:c8:96:b8:c9:db:52:85:c2:ef:aa:7c:a0:9d:f9: 3f:f7:fc:d7:28:57:f4:c4:8e:e0:06:e5:a2:c3:11: 2d:54:99:bf:c4:2c:be:e6:72:ae:3b:84:8d:0c:0b: e6:e0:48:14:09:b3:14:99:ab:9e:0b:88:4c:2d:33: 97:88:aa:67:f0:48:8c:b0:e3:f7:c1:8a:0e:01:17: be:d5:fc:e7:27:c9:bc:bd:04:1e:cb:19:6c:dc:f3: 36:cb:33:57:72:c8:ce:ef:11:1c:0d:71:70:fb:c7: ac:1f:b8:d6:2a:ff:e2:3b:49:32:e9:6f:03:d7:61: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.12.0/22 IPv6: 2804:54a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268663 Signature Algorithm: sha256WithRSAEncryption d9:ac:38:d0:1f:89:ab:93:f8:b8:c1:66:f8:8c:04:f7:0f:70: a5:38:3c:a5:5f:41:39:f5:ef:78:e2:a7:3d:12:3b:e8:9b:1a: 90:c6:5f:6c:be:85:ff:05:22:08:33:0b:fd:83:a7:72:66:03: c0:be:3e:36:a5:6a:62:75:4b:f4:48:8e:9a:10:68:e9:bb:61: ed:9e:8a:73:55:5d:0c:6d:d2:33:70:3e:e5:bf:13:07:fa:d9: c5:85:ca:23:5a:e9:c0:ab:b1:17:56:d0:c8:9b:96:15:da:1a: 4f:5d:c5:de:a5:e8:d4:4a:91:24:aa:2b:1c:4a:e0:03:26:a5: a5:bc:68:da:1f:f9:ac:a0:09:9e:3b:7e:47:59:92:cc:66:7f: 7c:dd:23:7e:4b:1a:c2:f0:fb:ed:42:5c:e1:bf:e2:41:a3:7e: f2:ef:93:78:45:c7:8b:b8:67:66:d1:c9:9f:47:90:28:3a:84: ed:a0:b2:d2:1c:5c:73:b4:99:ad:05:e4:d6:1d:f6:30:85:a6: 27:1f:53:ef:96:49:63:ae:50:b8:8e:a5:d0:c7:b4:0d:53:a7: 11:07:67:87:85:1d:8f:a7:e7:ae:60:15:4d:01:a5:a8:a9:cc: f3:a0:42:a6:c7:0e:94:22:13:87:25:35:d6:17:bd:5a:08:37: 9d:24:84:2e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfCxWnFEZPzJWuXo6lS7Ber8vligwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDQwMDEwNTJaFw0yNjExMDMwMDE1NTJaMDMxMTAvBgNV BAMTKDhEQzVENUVEQUFGMzNDNzA2NjI0NEQyOEU1MzRDRkQ1RDY2OTEzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLHEQOSG7rYHjX29hDDnvFTfB fyhwWuTCHNHST6/gH4uDJzRfZD0WEdX9Vq1h2qirtC1ngsyhVYT8EYjDMIbHbY/E HIDVECveYctN14d4jJWifTUQ8XzXvMM+EcT3AioAz0fOS0brdXn4C3Iin0PryRds hk2T8I38I74n6jQ/rbVK/tlJWsDIlrjJ21KFwu+qfKCd+T/3/NcoV/TEjuAG5aLD ES1Umb/ELL7mcq47hI0MC+bgSBQJsxSZq54LiEwtM5eIqmfwSIyw4/fBig4BF77V /Ocnyby9BB7LGWzc8zbLM1dyyM7vERwNcXD7x6wfuNYq/+I7STLpbwPXYZwpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNxdXtqvM8cGYk TSjlNM/V1mkTUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnRH aHJpOUdtcFduV3dva2lTRUttd2tSTWRhSENrOHpNeHREakxjR2tQZlovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ0 R2hyaTlHbXBXbld3b2tpU0VLbXdrUk1kYUhDazh6TXh0RGpMY0drUGZaLzAvOERD NUQ1RURBQUYzM0M3MDY2MjQ0RDI4RTUzNENGRDVENjY5MTM1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaUMMA0EAgACMAcDBQAoBFSoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZdzANBgkqhkiG9w0BAQsFAAOCAQEA2aw40B+Jq5P4uMFm +IwE9w9wpTg8pV9BOfXveOKnPRI76JsakMZfbL6F/wUiCDML/YOncmYDwL4+NqVq YnVL9EiOmhBo6bth7Z6Kc1VdDG3SM3A+5b8TB/rZxYXKI1rpwKuxF1bQyJuWFdoa T13F3qXo1EqRJKorHErgAyalpbxo2h/5rKAJnjt+R1mSzGZ/fN0jfksawvD77UJc 4b/iQaN+8u+TeEXHi7hnZtHJn0eQKDqE7aCy0hxcc7SZrQXk1h32MIWmJx9T75ZJ Y65QuI6l0Me0DVOnEQdnh4Udj6fnrmAVTQGlqKnM86BCpscOlCIThyU11he9Wgg3 nSSELg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:46 2025 by rpki-client