$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer File: DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer (raw, json) Hash identifier: X0uaLNoE8jh4JpjoBVM0bdqphRlU2G6xNnQkWMwZYAI= Subject key identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02CBD2B98515EAEF9EC130670883547F0720834E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft caRepository: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 12:29:19 +0000 Certificate not after: Tue 03 Nov 2026 12:34:19 +0000 Subordinate resources: AS: 269283 IP: 45.183.152.0/22 IP: 2804:6238::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cb:d2:b9:85:15:ea:ef:9e:c1:30:67:08:83:54:7f:07:20:83:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 4 12:29:19 2025 GMT Not After : Nov 3 12:34:19 2026 GMT Subject: CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:3e:f2:8b:82:a1:3d:17:eb:32:d4:67:63: c8:b1:8c:14:47:f3:9c:1c:b6:0c:4a:0b:8a:00:2e: 4f:91:ee:78:83:b3:5b:43:5e:ed:0d:ea:d9:19:e5: ce:bc:fd:d8:6e:f5:e4:a8:2f:14:ca:d9:9b:ec:c6: 9d:53:b1:8c:44:bd:bc:6f:8e:c5:df:ab:63:32:00: b4:d1:16:4a:f8:83:2f:63:ef:c7:f0:a8:3a:8e:3f: 5b:03:93:42:10:e0:1a:e7:68:a7:f3:bc:44:99:57: ba:8e:e7:38:26:54:86:5f:e0:88:51:cd:c1:38:48: 2e:63:07:6e:b9:cc:19:a4:ec:b0:72:76:f6:2a:a6: d2:4a:12:f9:92:8b:e4:c8:fb:2b:5b:b0:5e:83:db: 46:03:70:74:ad:38:3a:fe:1d:90:a6:ea:33:eb:2e: df:ee:5b:06:de:bf:31:c6:25:09:28:2f:d5:92:74: 8b:b5:3d:08:1a:c8:be:ab:e6:90:5d:5c:ac:13:b4: 82:49:9c:44:99:78:b3:ec:da:dd:b4:b8:ef:ea:f8: d5:d7:ac:22:83:dc:e7:2c:c7:48:80:f9:fd:7a:86: 51:7e:09:09:ff:d9:97:a9:76:9d:82:86:a7:32:1e: c1:6a:0c:5d:64:3b:7d:84:07:06:ea:4a:eb:8c:eb: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.152.0/22 IPv6: 2804:6238::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269283 Signature Algorithm: sha256WithRSAEncryption 9c:d7:46:69:b5:cc:4d:94:84:91:62:75:58:21:e9:21:4d:9b: f0:09:86:1b:f1:b1:df:a7:aa:7b:09:87:af:4e:22:a2:19:a7: 09:36:a2:77:ea:6b:d9:69:f2:4b:4b:d5:07:83:99:a1:d7:fb: 92:1e:06:cd:ce:9e:67:4e:b9:05:16:e2:13:61:6f:21:33:2a: 36:48:54:b3:b4:f6:d9:9e:8f:fa:2f:11:22:82:40:74:ce:ac: 5d:da:0f:77:85:d5:51:12:31:10:94:1a:e9:44:b9:ca:33:36: 1f:1a:ef:18:d1:c6:f5:c3:10:f9:5e:c6:bd:9b:00:91:94:c2: b3:53:17:69:d6:f8:5b:55:36:97:5c:12:47:04:9d:f5:c3:5f: 26:f3:41:8b:d4:a2:c1:92:22:4e:b2:51:72:fe:21:cb:7a:b0: 95:18:dc:28:5d:62:55:3f:18:c8:60:db:b4:55:c1:77:37:3e: b2:64:2c:fb:e1:ad:fb:47:62:2a:1e:89:45:c8:33:3e:28:6c: e3:6c:c4:0d:a8:cb:e0:4f:b6:15:36:a7:95:73:a2:3f:62:15: 64:68:8e:f7:cd:5b:cc:b3:b1:f4:b4:f0:9a:25:4c:45:2f:f6: c4:d5:00:7c:59:59:a0:e3:a6:cf:6d:7d:78:6a:c7:c8:9b:2d: d3:7e:ac:f0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAsvSuYUV6u+ewTBnCINUfwcgg04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDQxMjI5MTlaFw0yNjExMDMxMjM0MTlaMDMxMTAvBgNV BAMTKERGN0YwMEVEREEzMjYzOTREQTY1QkYyQjkyMzNGNzJFNERFQTk4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxz7yi4KhPRfrMtRnY8ixjBRH 85wctgxKC4oALk+R7niDs1tDXu0N6tkZ5c68/dhu9eSoLxTK2Zvsxp1TsYxEvbxv jsXfq2MyALTRFkr4gy9j78fwqDqOP1sDk0IQ4BrnaKfzvESZV7qO5zgmVIZf4IhR zcE4SC5jB265zBmk7LBydvYqptJKEvmSi+TI+ytbsF6D20YDcHStODr+HZCm6jPr Lt/uWwbevzHGJQkoL9WSdIu1PQgayL6r5pBdXKwTtIJJnESZeLPs2t20uO/q+NXX rCKD3Ocsx0iA+f16hlF+CQn/2Zepdp2ChqcyHsFqDF1kO32EBwbqSuuM6/iVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTffwDt2jJjlNpl vyuSM/cuTeqY3jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzI5 R2tGUHNRQzZuelNMWkZTVlM4Q3FucW5TYlQ3eTRHYXJWUTVmVWZGdGMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcy OUdrRlBzUUM2bnpTTFpGU1ZTOENxbnFuU2JUN3k0R2FyVlE1ZlVmRnRjLzAvREY3 RjAwRUREQTMyNjM5NERBNjVCRjJCOTIzM0Y3MkU0REVBOThERS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbeYMA0EAgACMAcDBQAoBGI4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQb4zANBgkqhkiG9w0BAQsFAAOCAQEAnNdGabXMTZSEkWJ1 WCHpIU2b8AmGG/Gx36eqewmHr04iohmnCTaid+pr2WnyS0vVB4OZodf7kh4Gzc6e Z065BRbiE2FvITMqNkhUs7T22Z6P+i8RIoJAdM6sXdoPd4XVURIxEJQa6US5yjM2 HxrvGNHG9cMQ+V7GvZsAkZTCs1MXadb4W1U2l1wSRwSd9cNfJvNBi9SiwZIiTrJR cv4hy3qwlRjcKF1iVT8YyGDbtFXBdzc+smQs++Gt+0diKh6JRcgzPihs42zEDajL 4E+2FTanlXOiP2IVZGiO981bzLOx9LTwmiVMRS/2xNUAfFlZoOOmz219eGrHyJst 036s8A== -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:58 2025 by rpki-client