$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer File: D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer (raw, json) Hash identifier: /aYCzV0ssQrb/On91xS52Pal+6T8oIcnpZdk9Ok0Qxs= Subject key identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25A76C9219C4E8F1FE2E6A05462D49A9FBDFEA1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft caRepository: rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Sep 2025 21:03:01 +0000 Certificate not after: Mon 07 Sep 2026 21:08:01 +0000 Subordinate resources: AS: 267563 IP: 45.70.128.0/22 IP: 2804:4354::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a7:6c:92:19:c4:e8:f1:fe:2e:6a:05:46:2d:49:a9:fb:df:ea:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 8 21:03:01 2025 GMT Not After : Sep 7 21:08:01 2026 GMT Subject: CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:4a:bb:b1:2b:ec:25:8f:cb:c4:99:46:00: 6d:7c:ce:cb:dd:b7:57:36:7a:1c:9b:46:08:52:6e: de:5e:7c:f8:f2:73:cc:29:71:f1:3f:02:ac:d7:b7: 66:78:0c:f9:ff:95:7f:1c:2e:76:cc:2f:ac:01:cb: f1:96:fa:2c:f6:b5:e6:ed:34:0f:53:a5:f2:03:0f: c6:7e:cf:59:ee:93:b6:48:c4:26:79:f4:00:b8:cd: 92:79:db:65:a4:39:81:20:68:53:09:52:65:d9:03: 72:ec:56:0a:94:58:dc:07:bc:3f:67:67:9f:0d:d4: d1:a0:0c:f4:97:25:ee:84:30:2e:88:37:4d:8a:dd: 27:43:3d:2c:43:4c:c4:11:36:de:10:db:76:31:0e: ce:14:29:6d:18:88:62:66:8e:a9:64:2d:5d:83:29: 61:a1:57:34:80:92:19:02:89:d5:9c:a2:9b:c6:a7: 59:bc:22:fc:63:ba:54:c5:82:9a:da:1e:e7:bc:de: 4a:f5:94:07:5a:00:45:c5:a4:5b:b6:c5:fa:61:14: 44:14:5a:b0:82:9b:a9:4d:82:fd:70:03:77:df:fd: ae:f0:d7:3b:0a:f1:2e:e7:1d:31:6b:34:1f:91:ce: 1f:c7:0c:2e:e2:f5:d6:cb:b5:e4:85:9d:da:48:79: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.128.0/22 IPv6: 2804:4354::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267563 Signature Algorithm: sha256WithRSAEncryption cc:8c:21:0e:dc:c5:6e:78:87:b7:ec:a9:ed:6e:c4:f3:01:10: 30:15:76:47:cb:69:2c:99:ed:fc:75:dd:91:4e:1b:18:43:24: 35:2a:31:44:72:c3:f1:0a:17:b9:48:c6:40:58:ef:6d:d7:16: e0:38:56:30:d6:a0:5f:00:0c:f2:5b:bf:05:88:a0:8f:7b:f5: fd:ab:e2:55:5d:4f:df:1a:36:f2:d0:dc:69:91:76:ea:6e:eb: 64:67:a5:75:b9:77:49:14:26:1e:e0:cf:84:f9:b9:d9:9e:ad: c7:f3:fd:df:d3:0f:bc:80:2e:a6:82:da:dc:a3:73:7e:18:c8: ca:48:e7:90:99:40:57:fe:3a:ad:9b:ae:32:3a:eb:41:9f:9c: 79:56:f2:c0:41:dc:46:3c:e6:4a:a5:d8:c5:03:73:4b:30:c1: d5:01:16:c5:7a:50:86:1e:84:d2:0a:88:4f:39:b0:96:b9:f3: 65:c1:a0:14:e0:7b:7d:c0:e2:82:f7:84:d2:26:0e:53:b1:1b: a9:8c:35:06:a6:c8:7c:5e:32:67:b0:63:fd:51:7d:a7:3c:31: 12:52:3b:39:ba:13:3a:18:4f:c7:a7:52:5c:f9:1b:6a:e2:2c: 8f:66:75:6c:ea:ae:df:87:76:b0:43:77:b4:f7:ea:ac:10:4d: 66:c0:1f:a9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJadskhnE6PH+LmoFRi1Jqfvf6h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDgyMTAzMDFaFw0yNjA5MDcyMTA4MDFaMDMxMTAvBgNV BAMTKEQxNThDM0JGMDVCMjlFQjlGNTM5MzYxOEI5N0NENTEwRDFEQTIzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK0q7sSvsJY/LxJlGAG18zsvd t1c2ehybRghSbt5efPjyc8wpcfE/AqzXt2Z4DPn/lX8cLnbML6wBy/GW+iz2tebt NA9TpfIDD8Z+z1nuk7ZIxCZ59AC4zZJ522WkOYEgaFMJUmXZA3LsVgqUWNwHvD9n Z58N1NGgDPSXJe6EMC6IN02K3SdDPSxDTMQRNt4Q23YxDs4UKW0YiGJmjqlkLV2D KWGhVzSAkhkCidWcopvGp1m8IvxjulTFgpraHue83kr1lAdaAEXFpFu2xfphFEQU WrCCm6lNgv1wA3ff/a7w1zsK8S7nHTFrNB+Rzh/HDC7i9dbLteSFndpIeUYJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRWMO/BbKeufU5 Nhi5fNUQ0dojVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMno4 VEhKMzZENlBqbURTWnJLRHN3ODVDZ0Nuckg3bnNranpZaGJ4ZmdHTTkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ6 OFRISjM2RDZQam1EU1pyS0Rzdzg1Q2dDbnJIN25za2p6WWhieGZnR005LzAvRDE1 OEMzQkYwNUIyOUVCOUY1MzkzNjE4Qjk3Q0Q1MTBEMURBMjM1NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUaAMA0EAgACMAcDBQAoBENUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVKzANBgkqhkiG9w0BAQsFAAOCAQEAzIwhDtzFbniHt+yp 7W7E8wEQMBV2R8tpLJnt/HXdkU4bGEMkNSoxRHLD8QoXuUjGQFjvbdcW4DhWMNag XwAM8lu/BYigj3v1/aviVV1P3xo28tDcaZF26m7rZGeldbl3SRQmHuDPhPm52Z6t x/P939MPvIAupoLa3KNzfhjIykjnkJlAV/46rZuuMjrrQZ+ceVbywEHcRjzmSqXY xQNzSzDB1QEWxXpQhh6E0gqITzmwlrnzZcGgFOB7fcDigveE0iYOU7EbqYw1BqbI fF4yZ7Bj/VF9pzwxElI7OboTOhhPx6dSXPkbauIsj2Z1bOqu34d2sEN3tPfqrBBN ZsAfqQ== -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:45 2025 by rpki-client