$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer File: 1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer (raw, json) Hash identifier: sqi+kU9IFAv+FFi5arwsI1ekRSw6qfEYwTnysUG4ewc= Subject key identifier: 1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 65FA4450DE92A80E48D0F4BD53A47664778FDC10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft caRepository: rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 12:30:30 +0000 Certificate not after: Fri 25 Sep 2026 12:35:30 +0000 Subordinate resources: AS: 269633 IP: 45.5.140.0/22 IP: 45.190.40.0/22 IP: 2804:6784::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fa:44:50:de:92:a8:0e:48:d0:f4:bd:53:a4:76:64:77:8f:dc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 26 12:30:30 2025 GMT Not After : Sep 25 12:35:30 2026 GMT Subject: CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:4b:2c:3f:35:6b:61:77:89:7f:ef:e5:db: c2:7a:00:52:c7:e7:f3:f1:71:17:26:15:38:e2:3a: d5:57:74:ba:2f:dd:f1:78:c0:a4:c9:ea:f4:7e:30: 53:2f:39:dd:4b:16:30:63:93:d3:3e:e1:10:fb:9f: 8b:3a:34:45:4c:4f:5c:0d:2e:85:ec:4e:e5:26:5d: 15:2e:71:53:77:c1:9d:0c:bf:ae:6e:d1:c3:b3:7f: fb:48:9c:ac:23:45:ed:4b:a9:9d:68:8f:3f:c2:17: 0c:92:bf:44:3a:62:6e:92:41:4e:8c:71:ad:96:e6: 8a:47:0f:5c:fd:89:02:9a:6a:f9:cb:8b:44:65:9d: e3:29:a9:20:86:7d:c9:d7:c9:f7:97:46:ae:fa:8d: 68:31:2a:88:67:0c:58:86:18:03:8b:fa:0a:d2:d8: 14:de:b7:40:16:56:94:5e:56:5a:f1:9c:15:c6:84: 04:bd:20:57:4b:84:c8:29:fe:71:3b:54:5a:1a:c2: 52:23:a8:41:bc:0a:8c:9f:8b:8c:d1:66:a1:f0:a8: f7:0e:a5:1c:85:cf:6e:be:dd:de:33:3a:a7:3b:45: 4d:b4:d7:69:d1:e0:45:eb:ad:2e:c7:ab:f0:0a:35: 71:1d:0e:e0:a0:b3:d8:9b:d9:99:f6:38:e0:5a:93: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.140.0/22 45.190.40.0/22 IPv6: 2804:6784::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269633 Signature Algorithm: sha256WithRSAEncryption 63:2a:38:ee:84:a4:bb:af:d8:68:d5:a9:fe:6c:7c:8d:68:9b: 5c:a2:07:bf:9b:d5:48:31:9e:1d:bb:03:07:02:7f:e0:40:73: 82:a5:17:fd:37:89:26:d3:36:ea:86:b6:38:f9:af:da:a4:ef: c0:ab:30:d3:36:d3:d2:eb:40:5d:1d:72:8c:4d:2a:99:a5:17: 03:0d:9e:be:30:d2:8c:52:9c:72:e1:de:9e:9b:97:a3:b1:83: 97:85:06:2d:8d:17:44:4b:e6:9d:89:5a:48:fd:a1:49:ca:95: fc:c9:0f:a5:55:27:0c:b3:95:3d:e5:4a:6d:6f:e2:2f:70:be: 33:59:05:5c:9c:c2:52:65:14:c0:4a:17:36:2e:94:94:53:0f: fa:77:41:c9:ad:38:af:5c:f4:95:12:d2:4b:7c:42:d6:7e:40: d2:ab:f2:34:09:c2:a6:b6:97:16:e2:70:a0:f0:a1:fb:65:fb: 5a:fb:b2:9a:cb:96:5a:38:5a:90:5f:ea:8e:b9:13:b5:fd:f1: 2b:98:07:63:36:cd:49:ed:27:8c:07:8f:19:1d:3a:75:87:c1: 43:c9:68:01:be:af:62:34:2a:e7:c9:2f:8b:03:11:70:35:7b: d9:3d:a5:0d:4e:42:27:77:ba:d0:6c:dc:c2:92:35:e7:69:68: a8:9e:90:ec -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZfpEUN6SqA5I0PS9U6R2ZHeP3BAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjYxMjMwMzBaFw0yNjA5MjUxMjM1MzBaMDMxMTAvBgNV BAMTKDFERDNFRjExMUY4MTY0MUM4QkJCMTRGMEIxQTJGQUNCMTZFNjczRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbkUssPzVrYXeJf+/l28J6AFLH 5/PxcRcmFTjiOtVXdLov3fF4wKTJ6vR+MFMvOd1LFjBjk9M+4RD7n4s6NEVMT1wN LoXsTuUmXRUucVN3wZ0Mv65u0cOzf/tInKwjRe1LqZ1ojz/CFwySv0Q6Ym6SQU6M ca2W5opHD1z9iQKaavnLi0RlneMpqSCGfcnXyfeXRq76jWgxKohnDFiGGAOL+grS 2BTet0AWVpReVlrxnBXGhAS9IFdLhMgp/nE7VFoawlIjqEG8Coyfi4zRZqHwqPcO pRyFz26+3d4zOqc7RU2012nR4EXrrS7Hq/AKNXEdDuCgs9ib2Zn2OOBak23nAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQd0+8RH4FkHIu7 FPCxovrLFuZz4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDcz RlRFb1BDUXFzcjR1MTdlOGJSTjRjQTVwdUwxWE1IeVF6VEpnTnFmMTgvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3 M0ZURW9QQ1Fxc3I0dTE3ZThiUk40Y0E1cHVMMVhNSHlRelRKZ05xZjE4LzIvMURE M0VGMTExRjgxNjQxQzhCQkIxNEYwQjFBMkZBQ0IxNkU2NzNFMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQWMAwQCLb4oMA0EAgACMAcDBQAoBGeEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQdQTANBgkqhkiG9w0BAQsFAAOCAQEAYyo47oSk u6/YaNWp/mx8jWibXKIHv5vVSDGeHbsDBwJ/4EBzgqUX/TeJJtM26oa2OPmv2qTv wKsw0zbT0utAXR1yjE0qmaUXAw2evjDSjFKccuHenpuXo7GDl4UGLY0XREvmnYla SP2hScqV/MkPpVUnDLOVPeVKbW/iL3C+M1kFXJzCUmUUwEoXNi6UlFMP+ndBya04 r1z0lRLSS3xC1n5A0qvyNAnCpraXFuJwoPCh+2X7WvuymsuWWjhakF/qjrkTtf3x K5gHYzbNSe0njAePGR06dYfBQ8loAb6vYjQq58kviwMRcDV72T2lDU5CJ3e60Gzc wpI152loqJ6Q7A== -----END CERTIFICATE-----Generated at Mon Nov 3 05:24:25 2025 by rpki-client