$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BD0FB1ABB21EED5E3D6496D9D7B5595BC1220AEA.cer File: BD0FB1ABB21EED5E3D6496D9D7B5595BC1220AEA.cer (raw, json) Hash identifier: FKgXnAklZ4McGd3BSXwHS0zkt4oGOfy4+CLurIOs8yU= Subject key identifier: BD:0F:B1:AB:B2:1E:ED:5E:3D:64:96:D9:D7:B5:59:5B:C1:22:0A:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 61FF9526FE1C0EC17AB48CD4A5669ED7D30E55D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/1/BD0FB1ABB21EED5E3D6496D9D7B5595BC1220AEA.mft caRepository: rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 20:28:03 +0000 Certificate not after: Mon 02 Nov 2026 20:33:03 +0000 Subordinate resources: AS: 265466 IP: 168.196.176.0/22 IP: 2804:3494::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ff:95:26:fe:1c:0e:c1:7a:b4:8c:d4:a5:66:9e:d7:d3:0e:55:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 20:28:03 2025 GMT Not After : Nov 2 20:33:03 2026 GMT Subject: CN=BD0FB1ABB21EED5E3D6496D9D7B5595BC1220AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b3:a3:8e:c8:af:ed:6e:6b:07:51:5f:60:22: 9f:0f:07:04:49:3c:66:eb:c1:97:bc:08:68:e9:80: c6:d8:b4:b5:34:8d:87:5c:30:20:db:3b:58:a0:a0: 06:76:49:a4:c8:cf:4c:7c:95:ad:3a:c0:44:29:8c: d1:7d:36:1b:e4:ec:56:4e:5c:97:92:0e:7e:94:a4: 98:36:b1:22:b7:30:b6:dd:21:22:08:ab:5d:a6:a1: b3:05:f0:83:11:a1:cc:ba:bc:97:86:03:bb:36:af: 7c:fd:7c:07:a6:83:40:3a:af:cd:b7:d2:df:35:98: 44:e6:38:f4:34:4c:ea:be:47:19:56:d2:88:c4:99: f1:51:b3:c0:77:21:2e:bf:24:85:9b:fa:a7:4e:d1: 5c:f2:cb:1d:33:bd:32:a9:b8:80:61:ea:8b:69:54: 80:4a:a1:a2:fe:67:30:40:1e:b7:fb:41:e3:db:63: 74:5b:ee:8b:10:65:f1:2c:41:93:31:48:75:2c:f1: a9:97:b3:c5:91:0d:f0:db:45:e0:91:3e:99:58:39: 89:c5:df:8d:50:94:26:32:0b:8c:ad:62:1a:54:b4: 9f:ea:72:40:bd:36:d7:ee:f5:88:a4:14:13:b7:39: 68:86:0c:b2:ee:d3:d3:70:d5:29:6f:f0:95:e3:f4: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:0F:B1:AB:B2:1E:ED:5E:3D:64:96:D9:D7:B5:59:5B:C1:22:0A:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/1/BD0FB1ABB21EED5E3D6496D9D7B5595BC1220AEA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.176.0/22 IPv6: 2804:3494::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265466 Signature Algorithm: sha256WithRSAEncryption 7d:d1:a4:0e:b9:d3:8e:c8:57:a0:de:87:7e:7e:c2:2f:47:cb: 0c:c3:62:21:a8:1c:6b:f4:31:59:64:be:c7:73:f5:08:e2:88: e4:d6:b6:b6:c3:64:ec:7c:b9:8b:ce:f9:77:c7:5b:e7:b4:cd: 1f:4a:82:e9:de:aa:47:6e:c3:b8:b1:ff:80:2d:ed:d0:38:17: 41:97:bb:9e:69:ba:31:5e:a3:ce:37:1d:a8:52:55:13:a9:b9: de:e3:33:0c:58:a9:27:4c:9a:2e:41:d8:02:c2:ef:88:81:53: 02:d6:4d:3a:d9:79:dc:f7:c3:b9:5b:79:ef:21:c6:46:4a:15: ad:fc:d5:a1:0d:83:be:fe:84:b1:eb:ad:d7:17:60:b7:56:1c: ff:31:da:dd:8b:69:bc:9c:2e:44:36:62:62:43:3e:37:dd:3d: 0c:27:83:38:82:aa:10:08:bd:4b:1b:41:e7:49:de:12:b5:8d: 96:f1:5b:66:93:40:6d:69:38:c8:6e:fb:67:a0:dc:1c:16:d6: e0:3d:c6:fc:ba:43:33:ef:4e:33:43:55:d5:3e:06:f0:80:95: c6:b9:62:97:ed:26:cc:97:cb:f9:de:8a:4c:b9:01:65:3a:73: c5:46:40:d7:58:84:76:c1:c2:f6:c9:71:cd:a8:0a:e5:e5:ae: dc:68:6b:6a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYf+VJv4cDsF6tIzUpWae19MOVdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMyMDI4MDNaFw0yNjExMDIyMDMzMDNaMDMxMTAvBgNV BAMTKEJEMEZCMUFCQjIxRUVENUUzRDY0OTZEOUQ3QjU1OTVCQzEyMjBBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrs6OOyK/tbmsHUV9gIp8PBwRJ PGbrwZe8CGjpgMbYtLU0jYdcMCDbO1igoAZ2SaTIz0x8la06wEQpjNF9Nhvk7FZO XJeSDn6UpJg2sSK3MLbdISIIq12mobMF8IMRocy6vJeGA7s2r3z9fAemg0A6r823 0t81mETmOPQ0TOq+RxlW0ojEmfFRs8B3IS6/JIWb+qdO0Vzyyx0zvTKpuIBh6otp VIBKoaL+ZzBAHrf7QePbY3Rb7osQZfEsQZMxSHUs8amXs8WRDfDbReCRPplYOYnF 341QlCYyC4ytYhpUtJ/qckC9Ntfu9YikFBO3OWiGDLLu09Nw1Slv8JXj9Cd7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9D7Grsh7tXj1k ltnXtVlbwSIK6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEV0 TkJ4VWVvdTVoS20zRWdGV3JLdGdOb3N4ajJBQ2ZTQjFxQWg1WEhOOUMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRF dE5CeFVlb3U1aEttM0VnRldyS3RnTm9zeGoyQUNmU0IxcUFoNVhITjlDLzEvQkQw RkIxQUJCMjFFRUQ1RTNENjQ5NkQ5RDdCNTU5NUJDMTIyMEFFQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMSwMA0EAgACMAcDBQAoBDSUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQM+jANBgkqhkiG9w0BAQsFAAOCAQEAfdGkDrnTjshXoN6H fn7CL0fLDMNiIagca/QxWWS+x3P1COKI5Na2tsNk7Hy5i875d8db57TNH0qC6d6q R27DuLH/gC3t0DgXQZe7nmm6MV6jzjcdqFJVE6m53uMzDFipJ0yaLkHYAsLviIFT AtZNOtl53PfDuVt57yHGRkoVrfzVoQ2Dvv6Eseut1xdgt1Yc/zHa3YtpvJwuRDZi YkM+N909DCeDOIKqEAi9SxtB50neErWNlvFbZpNAbWk4yG77Z6DcHBbW4D3G/LpD M+9OM0NV1T4G8ICVxrlil+0mzJfL+d6KTLkBZTpzxUZA11iEdsHC9slxzagK5eWu 3Ghrag== -----END CERTIFICATE-----Generated at Wed Nov 5 14:19:10 2025 by rpki-client