$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.cer File: 9DDDE3346BC9D5D003676856DD2EB4B001661C4D.cer (raw, json) Hash identifier: 2sbs7CBIRyEpggPAa67TidddO7Qrrw0eM6HLjBEzzRI= Subject key identifier: 9D:DD:E3:34:6B:C9:D5:D0:03:67:68:56:DD:2E:B4:B0:01:66:1C:4D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 77CA3D33E0A1F244CA021159A749CA6A061412C6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.mft caRepository: rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 18:42:49 +0000 Certificate not after: Mon 06 Jul 2026 18:47:49 +0000 Subordinate resources: AS: 272636 IP: 2804:8654::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 22:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ca:3d:33:e0:a1:f2:44:ca:02:11:59:a7:49:ca:6a:06:14:12:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 18:42:49 2025 GMT Not After : Jul 6 18:47:49 2026 GMT Subject: CN=9DDDE3346BC9D5D003676856DD2EB4B001661C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:88:9f:01:20:56:1f:1d:84:5d:4c:91:fa: c7:a4:dc:65:7b:1b:dc:f3:5b:6b:bb:e3:30:e9:37: dc:15:b7:87:28:be:c2:b5:77:3f:ee:0c:f6:3f:66: 44:80:fb:70:01:96:d3:65:f8:0f:79:d3:f2:43:08: ed:57:bb:24:81:b0:a4:1b:34:04:82:7e:c3:dd:96: 48:6b:25:bb:19:05:7e:81:ab:e5:a7:20:de:8c:5d: 5e:ce:38:5e:b3:c6:09:77:39:81:c6:67:9f:82:2e: 20:4b:b1:ff:79:04:4f:b0:b7:01:9e:50:6b:33:0a: c7:31:5b:61:25:2d:9c:51:ef:55:99:0a:1c:8c:a9: 80:ba:55:3b:56:d6:29:b7:c1:98:9e:d2:af:01:0f: 3e:c0:c4:54:5f:a5:eb:a6:7a:a8:ea:f4:16:2c:85: 60:6b:32:bd:75:cf:b5:5c:3a:10:f2:ee:07:f6:c8: 46:3f:ad:65:d8:75:2b:2b:b5:21:2d:dd:ae:36:4a: 48:a3:cb:6c:a9:f4:ce:b9:a0:c9:3b:90:f6:d8:2c: 9f:c6:dd:0e:0c:f2:44:0a:ac:67:d9:04:d0:3a:71: 90:4f:b6:b3:d4:13:d6:06:39:76:21:e6:c6:b4:82: c8:2f:f3:8f:80:cd:1c:d4:68:45:c9:7e:c9:6a:fc: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:DD:E3:34:6B:C9:D5:D0:03:67:68:56:DD:2E:B4:B0:01:66:1C:4D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/9DDDE3346BC9D5D003676856DD2EB4B001661C4D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8654::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272636 Signature Algorithm: sha256WithRSAEncryption 82:df:f3:1e:42:e8:d3:39:ec:f6:98:36:50:c0:3f:ca:00:10: 6a:14:84:1d:72:fc:a7:6f:31:8c:12:a2:d3:c1:fa:45:0f:41: 4f:6c:8a:e9:3d:60:ae:f0:88:6f:f0:b2:a2:b8:57:21:2b:0a: 18:da:0b:80:bf:1f:fb:01:d9:e0:6b:97:98:d7:a5:f5:a0:97: a8:74:b7:4c:2e:78:36:1c:f1:b4:a8:d8:07:71:c9:a5:cc:41: 7c:eb:c5:e7:ed:81:14:c1:42:48:55:da:67:48:69:17:1a:0f: 9d:62:23:60:39:1b:2d:5a:37:0c:26:27:37:25:e3:14:e5:3a: 96:0c:6f:cb:dd:c9:34:bb:a2:8c:32:a0:ff:a9:22:95:b6:03: 7a:67:76:cd:77:22:c7:6d:d0:ae:59:34:a6:88:2a:54:6a:2f: 2f:77:66:9b:90:56:27:df:67:de:a0:2c:79:0f:6c:90:e3:f5: 1b:bd:7f:bd:f6:44:28:ee:4c:f1:7b:a2:fc:84:9d:39:f3:b6: 3f:db:4b:7a:55:28:66:0b:d4:17:78:49:b8:53:7e:7b:7b:0e: 10:5c:69:d3:11:2a:54:3b:d3:1d:b7:93:fb:a5:92:61:c0:51: cb:6f:9a:87:32:24:13:46:9d:c5:ee:07:8a:b4:be:36:5f:ef: 9d:5c:de:a2 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUd8o9M+Ch8kTKAhFZp0nKagYUEsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDcxODQyNDlaFw0yNjA3MDYxODQ3NDlaMDMxMTAvBgNV BAMTKDlERERFMzM0NkJDOUQ1RDAwMzY3Njg1NkREMkVCNEIwMDE2NjFDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbD4ifASBWHx2EXUyR+sek3GV7 G9zzW2u74zDpN9wVt4covsK1dz/uDPY/ZkSA+3ABltNl+A950/JDCO1XuySBsKQb NASCfsPdlkhrJbsZBX6Bq+WnIN6MXV7OOF6zxgl3OYHGZ5+CLiBLsf95BE+wtwGe UGszCscxW2ElLZxR71WZChyMqYC6VTtW1im3wZie0q8BDz7AxFRfpeumeqjq9BYs hWBrMr11z7VcOhDy7gf2yEY/rWXYdSsrtSEt3a42Skijy2yp9M65oMk7kPbYLJ/G 3Q4M8kQKrGfZBNA6cZBPtrPUE9YGOXYh5sa0gsgv84+AzRzUaEXJfslq/D1HAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSd3eM0a8nV0ANn aFbdLrSwAWYcTTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDg0 ZWMxMk5tdXlhRkFNMVdMQkZ6SlM5UGpqdk5ocDN1WFVuS3pWUGtQWWQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ4 NGVjMTJObXV5YUZBTTFXTEJGekpTOVBqanZOaHAzdVhVbkt6VlBrUFlkLzAvOURE REUzMzQ2QkM5RDVEMDAzNjc2ODU2REQyRUI0QjAwMTY2MUM0RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASGVDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KPwwDQYJKoZIhvcNAQELBQADggEBAILf8x5C6NM57PaYNlDAP8oAEGoUhB1y/Kdv MYwSotPB+kUPQU9siuk9YK7wiG/wsqK4VyErChjaC4C/H/sB2eBrl5jXpfWgl6h0 t0wueDYc8bSo2AdxyaXMQXzrxeftgRTBQkhV2mdIaRcaD51iI2A5Gy1aNwwmJzcl 4xTlOpYMb8vdyTS7oowyoP+pIpW2A3pnds13Isdt0K5ZNKaIKlRqLy93ZpuQViff Z96gLHkPbJDj9Ru9f732RCjuTPF7ovyEnTnztj/bS3pVKGYL1Bd4SbhTfnt7DhBc adMRKlQ70x23k/ulkmHAUctvmocyJBNGncXuB4q0vjZf751c3qI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:01:53 2025 by rpki-client