$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer File: 93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer (raw, json) Hash identifier: 6rYc9HMznQkaTwjE/vmmnThwHV5Lk5gC3RBwFLWla8Y= Subject key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C2584C44D04B32966597B5BE21291A0DF3065C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft caRepository: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 21:56:56 +0000 Certificate not after: Tue 03 Nov 2026 22:01:56 +0000 Subordinate resources: AS: 263073 IP: 138.0.196.0/22 IP: 138.219.240.0/22 IP: 164.163.12.0/22 IP: 168.121.192.0/22 IP: 170.78.80.0/22 IP: 170.244.96.0/22 IP: 177.200.240.0/20 IP: 177.223.16.0/20 IP: 179.0.24.0/24 IP: 186.194.112.0/20 IP: 186.224.24.0/21 IP: 186.233.104.0/21 IP: 191.6.48.0/21 IP: 201.71.60.0/22 IP: 2804:954::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:25:84:c4:4d:04:b3:29:66:59:7b:5b:e2:12:91:a0:df:30:65:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 21:56:56 2025 GMT Not After : Nov 3 22:01:56 2026 GMT Subject: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:5f:ee:8e:29:f7:3e:fa:93:03:dd:a1:3b: 4d:4e:a2:a2:52:6f:9d:a8:0b:df:36:e4:72:fa:c4: 44:7d:a6:d2:5e:f8:2d:a8:ac:60:c4:ea:ed:16:eb: f7:a4:25:c8:20:f7:8d:35:38:96:4a:3d:a4:93:d9: 97:66:8c:ba:11:3f:cb:5d:69:15:ab:2a:c0:ab:e8: 3b:f8:2f:e4:56:c6:2a:1d:37:b3:91:01:c9:17:97: f7:89:e0:8d:8d:62:3b:f6:86:b5:6f:6e:c4:5b:a3: f7:fd:91:7f:bb:96:78:2a:1b:54:0f:8d:6b:31:40: 6f:e0:04:47:36:6e:fa:dd:5d:e3:56:d7:07:10:c4: 9b:3e:b3:cc:4e:ed:78:93:8a:05:e1:02:a6:63:28: e1:60:16:85:9e:49:0e:f4:5c:63:1b:23:02:a0:c3: df:28:81:d3:6f:e6:bd:e4:5d:55:4e:a9:02:26:2b: 09:f3:45:b4:b0:35:f8:99:ed:64:bb:49:fa:42:c2: a5:e3:f5:a3:09:1b:7e:b4:62:dc:ef:f3:ae:5a:03: a7:a8:38:c6:6a:89:4f:f2:a4:48:28:c2:ac:fd:80: 81:34:8d:ac:23:21:bf:84:50:14:9b:e1:f9:0e:52: 20:53:37:c6:7d:54:d8:6e:d0:1a:56:1d:57:4f:de: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.196.0/22 138.219.240.0/22 164.163.12.0/22 168.121.192.0/22 170.78.80.0/22 170.244.96.0/22 177.200.240.0/20 177.223.16.0/20 179.0.24.0/24 186.194.112.0/20 186.224.24.0/21 186.233.104.0/21 191.6.48.0/21 201.71.60.0/22 IPv6: 2804:954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263073 Signature Algorithm: sha256WithRSAEncryption 60:b2:39:de:76:c7:25:ad:06:4b:95:d1:49:4b:38:37:53:d2: 32:68:18:93:3f:62:bd:41:96:4b:fb:3f:bd:85:82:6a:55:54: f0:bf:31:5d:72:8f:3f:9e:21:ed:c1:9f:45:42:61:c5:b0:69: c9:33:7a:e5:c1:1a:9f:f6:37:09:fc:45:51:4f:47:95:03:d5: 44:81:79:2a:e3:01:35:45:d6:71:05:c4:fc:86:75:38:41:14: cf:c9:5d:ce:b1:b7:5c:b9:9b:e6:cb:83:81:12:01:30:b5:bd: e7:0b:ac:84:a4:b3:49:dd:1d:db:31:5d:56:a8:ef:b8:09:37: c1:d4:4a:b6:c0:48:eb:bb:cc:b4:05:ee:b6:ad:d6:8f:13:16: f1:44:f8:79:aa:4a:bc:e1:08:92:1b:d7:01:7a:db:4b:54:50: a4:78:23:50:20:71:b2:a0:22:25:1c:7f:7c:88:5a:05:ad:06: 53:21:0d:4c:5a:5d:11:85:1f:8e:7a:17:b8:7a:9d:ed:b8:3c: ae:8c:3b:84:43:a2:45:88:91:66:b9:d4:0a:75:3f:99:16:1e: c8:90:42:91:11:43:72:3b:15:91:7d:20:cd:29:02:b2:b6:38: 06:8b:50:e9:29:e4:d0:15:50:b3:94:d9:6b:bc:d8:e0:33:95: 0e:12:66:d8 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUTCWExE0EsylmWXtb4hKRoN8wZckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDQyMTU2NTZaFw0yNjExMDMyMjAxNTZaMDMxMTAvBgNV BAMTKDkzQkU0QjQ0MzEwM0M5RUEzQ0U0MDY5RDA5MkM2MkI5OEYwODk1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRl/ujin3PvqTA92hO01OoqJS b52oC9825HL6xER9ptJe+C2orGDE6u0W6/ekJcgg9401OJZKPaST2ZdmjLoRP8td aRWrKsCr6Dv4L+RWxiodN7ORAckXl/eJ4I2NYjv2hrVvbsRbo/f9kX+7lngqG1QP jWsxQG/gBEc2bvrdXeNW1wcQxJs+s8xO7XiTigXhAqZjKOFgFoWeSQ70XGMbIwKg w98ogdNv5r3kXVVOqQImKwnzRbSwNfiZ7WS7SfpCwqXj9aMJG360Ytzv865aA6eo OMZqiU/ypEgowqz9gIE0jawjIb+EUBSb4fkOUiBTN8Z9VNhu0BpWHVdP3np9AgMB AAGjggOIMIIDhDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTvktEMQPJ6jzk Bp0JLGK5jwiV/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmI4 NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFia20vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zi ODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEvOTNC RTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4RjA4OTVGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEH AQH/BG0wazBaBAIAATBUAwQCigDEAwQCitvwAwQCpKMMAwQCqHnAAwQCqk5QAwQC qvRgAwQEscjwAwQEsd8QAwQAswAYAwQEusJwAwQDuuAYAwQDuuloAwQDvwYwAwQC yUc8MA0EAgACMAcDBQAoBAlUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDoTAN BgkqhkiG9w0BAQsFAAOCAQEAYLI53nbHJa0GS5XRSUs4N1PSMmgYkz9ivUGWS/s/ vYWCalVU8L8xXXKPP54h7cGfRUJhxbBpyTN65cEan/Y3CfxFUU9HlQPVRIF5KuMB NUXWcQXE/IZ1OEEUz8ldzrG3XLmb5suDgRIBMLW95wushKSzSd0d2zFdVqjvuAk3 wdRKtsBI67vMtAXutq3WjxMW8UT4eapKvOEIkhvXAXrbS1RQpHgjUCBxsqAiJRx/ fIhaBa0GUyENTFpdEYUfjnoXuHqd7bg8row7hEOiRYiRZrnUCnU/mRYeyJBCkRFD cjsVkX0gzSkCsrY4BotQ6Snk0BVQs5TZa7zY4DOVDhJm2A== -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:34 2025 by rpki-client