$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer File: 08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer (raw, json) Hash identifier: GnQgHttsbhJwOtuFD56unkILLgvwQwWbwEkz81J8QH8= Subject key identifier: 08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C70AF9B2DD10DB4FDF0EFD284E87FE1308FC413 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft caRepository: rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 19 Sep 2025 23:25:12 +0000 Certificate not after: Fri 18 Sep 2026 23:30:12 +0000 Subordinate resources: AS: 270699 IP: 200.187.108.0/22 IP: 2804:6ffc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:70:af:9b:2d:d1:0d:b4:fd:f0:ef:d2:84:e8:7f:e1:30:8f:c4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 19 23:25:12 2025 GMT Not After : Sep 18 23:30:12 2026 GMT Subject: CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:41:9d:53:4a:35:5f:f1:e3:f6:2d:58:b7: b0:3f:0c:66:eb:24:20:5a:9d:28:e1:1f:88:84:31: 44:41:54:3e:84:29:b8:e9:41:73:3c:be:84:8e:a3: f9:a5:d5:38:b6:da:09:95:d3:68:f6:69:92:63:33: bd:a0:b4:a6:5d:d6:5a:19:ce:ba:24:e8:c5:44:68: 08:94:cc:64:54:da:90:fe:da:4b:54:f8:a2:f5:5e: bb:72:38:3e:51:9c:33:95:d4:2c:9e:74:1a:b6:28: 56:2d:11:32:8e:e2:17:46:66:07:32:f0:be:4f:df: d7:fd:de:9f:18:17:01:84:15:26:61:ea:12:7b:98: 04:80:61:83:c7:0b:bd:d6:f7:53:79:97:ad:79:0e: d8:6a:ee:d2:3b:0a:e5:aa:d6:4c:7a:cb:36:54:45: e9:5c:a7:35:12:71:90:41:00:45:9f:b7:ec:f8:59: 0d:a6:b1:ee:d6:34:69:20:7a:76:d6:84:9e:56:d3: 8e:d3:b9:6b:22:5b:c5:2d:7a:97:e2:ce:76:d5:92: 03:bd:03:7d:27:8b:2a:d6:1c:14:86:9e:1e:1b:7a: f5:13:db:a7:a8:c4:50:5d:7a:13:82:f6:4d:64:fe: 4a:35:b4:e0:ec:6e:b5:c8:29:51:f9:22:62:c3:9e: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.187.108.0/22 IPv6: 2804:6ffc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270699 Signature Algorithm: sha256WithRSAEncryption 6b:2f:4d:f3:9b:62:c9:b8:1e:05:94:4b:ed:81:67:ea:10:b9: 48:e8:5c:24:72:a6:0a:e9:fa:09:0d:a2:ee:e5:77:6b:a5:fb: 15:24:b6:c0:ff:bb:3f:3c:5a:45:94:08:dd:93:23:b2:53:6a: 48:6d:1c:9d:c8:30:0f:fa:1e:45:f1:70:99:b4:1a:20:53:0c: fa:21:fd:1a:67:a8:88:eb:3d:4c:f4:2c:64:3a:af:85:27:56: 45:82:61:f0:09:f1:bf:a4:4c:ba:76:43:05:7b:2b:0b:1e:61: 93:87:8d:18:cc:70:f9:ee:38:a0:c0:e5:17:70:79:ac:1b:23: b1:1d:74:52:06:a2:78:dd:10:60:63:ec:70:ea:22:41:49:95: 6d:48:c1:66:75:da:13:60:ca:03:c6:6b:c0:71:3b:d8:1b:68: f6:35:95:69:a3:0f:92:b7:ec:b0:3b:ce:03:d7:d8:6a:59:63: 1a:4b:ca:bc:3f:e3:f5:52:d5:18:f2:ae:9e:a1:24:e3:e5:a3: d3:7d:58:88:13:00:9f:df:85:02:f4:e5:b4:6c:20:c8:a6:9f: fe:94:7f:ac:20:a3:98:cb:6f:a1:3f:e0:59:86:c5:d7:5d:b2: 3b:41:7c:47:0d:90:a0:21:dc:0b:18:11:93:a3:11:ca:de:4e: 5a:0f:08:36 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPHCvmy3RDbT98O/ShOh/4TCPxBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTkyMzI1MTJaFw0yNjA5MTgyMzMwMTJaMDMxMTAvBgNV BAMTKDA4RERERDNEOTU0OTIwNDZERTVEREYwQTgwREZBNDA3NkIyNEIxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcUGdU0o1X/Hj9i1Yt7A/DGbr JCBanSjhH4iEMURBVD6EKbjpQXM8voSOo/ml1Ti22gmV02j2aZJjM72gtKZd1loZ zrok6MVEaAiUzGRU2pD+2ktU+KL1XrtyOD5RnDOV1CyedBq2KFYtETKO4hdGZgcy 8L5P39f93p8YFwGEFSZh6hJ7mASAYYPHC73W91N5l615Dthq7tI7CuWq1kx6yzZU RelcpzUScZBBAEWft+z4WQ2mse7WNGkgenbWhJ5W047TuWsiW8UtepfiznbVkgO9 A30niyrWHBSGnh4bevUT26eoxFBdehOC9k1k/ko1tODsbrXIKVH5ImLDnixJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQI3d09lUkgRt5d 3wqA36QHaySxmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDZh dFZlNlFmZzhpRDM5NzVEVmVaWTl5ZTNTeEMyelVkWTdxWGRrcTVMY0cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2 YXRWZTZRZmc4aUQzOTc1RFZlWlk5eWUzU3hDMnpVZFk3cVhka3E1TGNHLzAvMDhE REREM0Q5NTQ5MjA0NkRFNURERjBBODBERkE0MDc2QjI0QjE5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyLtsMA0EAgACMAcDBQAoBG/8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhazANBgkqhkiG9w0BAQsFAAOCAQEAay9N85tiybgeBZRL 7YFn6hC5SOhcJHKmCun6CQ2i7uV3a6X7FSS2wP+7PzxaRZQI3ZMjslNqSG0cncgw D/oeRfFwmbQaIFMM+iH9GmeoiOs9TPQsZDqvhSdWRYJh8Anxv6RMunZDBXsrCx5h k4eNGMxw+e44oMDlF3B5rBsjsR10UgaieN0QYGPscOoiQUmVbUjBZnXaE2DKA8Zr wHE72Bto9jWVaaMPkrfssDvOA9fYalljGkvKvD/j9VLVGPKunqEk4+Wj031YiBMA n9+FAvTltGwgyKaf/pR/rCCjmMtvoT/gWYbF112yO0F8Rw2QoCHcCxgRk6MRyt5O Wg8INg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:02 2025 by rpki-client