$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer File: C264FB166D810B0B079997649A78C2454ECCCB7F.cer (raw, json) Hash identifier: /YUQS5PTfCDN8R3fPnZm8VnSMUiILPX/O8/oQZ3N1LI= Subject key identifier: C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 05C1F72C5F63BA95564D3401F1D91CC8B870C472 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.mft caRepository: rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 12 Sep 2025 19:33:30 +0000 Certificate not after: Fri 11 Sep 2026 19:38:30 +0000 Subordinate resources: AS: 52945 IP: 177.11.212.0/22 IP: 177.91.192.0/19 IP: 2804:11e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:f7:2c:5f:63:ba:95:56:4d:34:01:f1:d9:1c:c8:b8:70:c4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 12 19:33:30 2025 GMT Not After : Sep 11 19:38:30 2026 GMT Subject: CN=C264FB166D810B0B079997649A78C2454ECCCB7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:07:26:80:53:1a:ec:50:cb:87:3d:42:23: bd:13:fd:5b:9f:1d:1f:cb:2a:b2:04:45:6a:38:eb: 23:6b:22:c1:92:61:ef:e6:54:8a:81:f7:0e:70:6a: b5:63:80:fa:14:d5:3f:1f:6a:de:73:1f:87:54:c4: 6d:74:70:7b:92:a1:b4:05:6e:95:b1:b9:c4:6f:85: 1c:86:32:3f:82:6e:bf:53:92:1a:aa:c6:25:02:8d: 73:bb:1f:50:10:3c:a3:d9:a6:37:d3:2b:dc:1a:2f: 23:61:92:ec:64:0e:8a:ef:96:14:01:95:59:31:4e: ca:b1:ac:a3:fd:40:69:4d:8c:bd:ed:2a:2b:13:d4: b2:59:3e:ed:24:b7:ab:c0:e3:b8:7b:21:e3:ba:ee: 6c:cf:97:e5:9e:32:a7:88:47:2f:d4:a7:bb:51:c7: 01:ef:f9:ea:d3:34:bd:cd:e6:a5:6a:87:53:88:24: e0:62:36:40:89:04:2c:58:4d:98:57:bf:b6:05:9d: 9a:41:40:b0:07:22:34:ae:95:ab:71:65:6b:cd:4e: 7a:57:c8:50:b7:81:3f:a7:03:0c:f0:b0:f0:c5:99: 93:15:30:30:3e:bb:2d:62:72:75:3c:1b:82:d8:41: aa:2a:58:a0:05:71:15:1e:0b:72:21:7c:30:97:7e: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.11.212.0/22 177.91.192.0/19 IPv6: 2804:11e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52945 Signature Algorithm: sha256WithRSAEncryption d3:83:e0:00:d0:9f:42:e5:24:37:0f:57:91:10:d6:d7:86:c3: 3c:bc:63:14:af:61:47:82:cb:df:3f:82:6e:ed:c7:46:96:c9: 6d:d1:b4:da:35:5d:1e:bd:52:8c:3e:15:d9:7c:d5:f8:1a:52: 4b:2a:71:d9:1a:71:10:ba:5c:7e:6a:b1:aa:5e:ed:52:24:10: 57:26:3b:4c:d0:d4:7b:af:d4:2d:fb:31:76:72:df:00:bd:61: f1:14:a7:e0:40:86:e5:f4:f4:d8:2e:45:82:ad:06:f5:8a:76: 7c:00:d1:39:00:be:0c:40:f0:a2:37:98:aa:4b:78:8f:20:e2: bf:88:a0:42:c8:72:89:f3:84:38:4d:9b:ee:46:97:3a:39:70: 92:33:84:20:16:9a:34:86:3b:4a:e8:b2:a2:de:f1:d3:8c:41: 3f:41:ea:62:f3:c3:fb:9e:a7:25:3c:80:dc:91:cb:be:5d:3c: 29:a5:5d:00:de:22:a4:93:d6:ec:fa:4e:db:e0:70:4b:40:ff: 9c:9b:84:c0:db:bd:44:6b:86:ff:84:c9:77:b8:65:7f:c3:80: 3e:fc:2b:f7:4d:ea:f9:27:17:0a:74:c9:6f:95:b9:81:3c:7d: ee:d4:d2:e8:81:7a:49:3b:bd:51:91:bd:78:03:58:67:ca:76: b9:d8:90:ac -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBcH3LF9jupVWTTQB8dkcyLhwxHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTIxOTMzMzBaFw0yNjA5MTExOTM4MzBaMDMxMTAvBgNV BAMTKEMyNjRGQjE2NkQ4MTBCMEIwNzk5OTc2NDlBNzhDMjQ1NEVDQ0NCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7AcmgFMa7FDLhz1CI70T/Vuf HR/LKrIERWo46yNrIsGSYe/mVIqB9w5warVjgPoU1T8fat5zH4dUxG10cHuSobQF bpWxucRvhRyGMj+Cbr9TkhqqxiUCjXO7H1AQPKPZpjfTK9waLyNhkuxkDorvlhQB lVkxTsqxrKP9QGlNjL3tKisT1LJZPu0kt6vA47h7IeO67mzPl+WeMqeIRy/Up7tR xwHv+erTNL3N5qVqh1OIJOBiNkCJBCxYTZhXv7YFnZpBQLAHIjSulatxZWvNTnpX yFC3gT+nAwzwsPDFmZMVMDA+uy1icnU8G4LYQaoqWKAFcRUeC3IhfDCXflgRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCZPsWbYELCweZ l2SaeMJFTszLfzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjlI dUhqZm5EcTVMeEc2SGRnQVY2Yk0zZmdOWGVuaktwelBDWkxHSk52aFMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5 SHVIamZuRHE1THhHNkhkZ0FWNmJNM2ZnTlhlbmpLcHpQQ1pMR0pOdmhTLzAvQzI2 NEZCMTY2RDgxMEIwQjA3OTk5NzY0OUE3OEMyNDU0RUNDQ0I3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsQvUAwQFsVvAMA0EAgACMAcDBQAoBBHkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDO0TANBgkqhkiG9w0BAQsFAAOCAQEA04PgANCf QuUkNw9XkRDW14bDPLxjFK9hR4LL3z+Cbu3HRpbJbdG02jVdHr1SjD4V2XzV+BpS Sypx2RpxELpcfmqxql7tUiQQVyY7TNDUe6/ULfsxdnLfAL1h8RSn4ECG5fT02C5F gq0G9Yp2fADROQC+DEDwojeYqkt4jyDiv4igQshyifOEOE2b7kaXOjlwkjOEIBaa NIY7Suiyot7x04xBP0HqYvPD+56nJTyA3JHLvl08KaVdAN4ipJPW7PpO2+BwS0D/ nJuEwNu9RGuG/4TJd7hlf8OAPvwr903q+ScXCnTJb5W5gTx97tTS6IF6STu9UZG9 eANYZ8p2udiQrA== -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:18 2025 by rpki-client