$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer File: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer (raw, json) Hash identifier: DeryHd1T1ms2N2dHhERZJchiHxIVW/Sf8px74kBNiSI= Subject key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 28592A2C3AC48296754B36B5E9A7DA2051C88DB1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft caRepository: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 10:24:00 +0000 Certificate not after: Tue 22 Sep 2026 10:29:00 +0000 Subordinate resources: AS: 269626 IP: 45.190.108.0/22 IP: 2804:6768::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:59:2a:2c:3a:c4:82:96:75:4b:36:b5:e9:a7:da:20:51:c8:8d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 10:24:00 2025 GMT Not After : Sep 22 10:29:00 2026 GMT Subject: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:bb:68:bd:16:c8:6a:4e:40:8c:7b:5b:e6: c8:34:6e:a6:02:fe:16:d1:b7:55:0e:ba:ff:e9:c2: 83:2d:9f:64:93:8e:6a:07:e0:59:c8:2b:bf:f5:db: 0a:fb:82:09:c1:b3:d6:4c:65:1e:6d:dd:65:06:b7: 08:d6:08:0d:5b:08:55:38:00:5d:48:96:3f:98:02: 92:4c:af:67:75:6f:2f:e9:c0:46:95:62:e4:fe:f1: 44:cd:c9:de:ef:49:d9:24:5a:8f:45:ea:fb:a3:5d: 72:9a:4a:94:30:2c:af:8f:2a:7e:94:a8:a1:b3:e0: 7d:d4:ed:ff:1e:78:4b:fa:57:32:93:5c:02:70:fe: 6c:88:83:19:0d:eb:0e:bd:84:4f:6f:49:18:e5:1a: 51:e1:d9:8c:f8:01:52:6b:32:26:50:6e:8a:80:50: 37:8f:bb:c0:96:00:51:fe:dd:90:54:f7:f6:6b:e1: cc:a0:fb:28:ea:b3:47:ba:0b:e6:fa:29:3a:78:2d: 94:d0:e6:6f:0b:cd:7b:8b:de:ad:0f:2d:a0:94:1f: 9b:fd:8b:9f:d4:26:a2:27:b7:80:43:f9:ed:eb:27: e6:0e:4e:d4:40:4a:e4:2c:8b:70:69:1f:29:45:fd: a8:8e:12:c9:d2:f5:08:b4:71:c9:c2:8f:68:1b:c3: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.108.0/22 IPv6: 2804:6768::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269626 Signature Algorithm: sha256WithRSAEncryption 7d:61:86:6a:ab:96:84:f2:9f:a1:ed:e8:54:26:9a:d4:a5:3e: 95:34:4d:d0:99:c2:13:3a:b9:77:c5:e7:41:a4:fe:d0:4a:96: 22:0f:df:c2:3b:3f:4e:47:ab:00:2f:e8:88:3e:f7:a2:ec:11: 39:d1:4d:c6:f4:e6:37:28:f1:13:11:94:e8:79:55:93:fa:4f: 7c:5b:1a:3e:2d:c5:01:65:66:b9:0c:ca:ac:bd:d0:12:44:04: 08:a5:70:41:29:bc:91:56:e8:9c:0f:3f:73:03:60:85:ce:c0: 38:7b:92:dd:3b:5d:66:2b:7a:d7:20:18:55:ec:4f:d0:7f:a6: ce:8c:76:e0:99:e1:38:36:cd:7a:1e:c3:b4:82:71:95:2f:ec: 96:d1:56:85:18:d7:d2:a5:86:b7:97:ac:92:4b:a4:7c:79:d5: 0c:40:78:77:1f:32:d6:c3:df:0f:b4:b0:c2:e4:f3:4f:9a:60: 59:71:74:69:12:7b:8a:d5:22:25:4a:eb:3e:be:ef:45:55:51: e3:a5:ad:3b:16:f2:5e:3a:78:4a:8e:46:4e:23:f4:52:20:49: 0a:bc:83:bd:56:c2:b3:be:f7:08:75:fb:bc:67:fc:2e:0c:48: 17:14:74:ca:b5:31:57:6f:4e:5d:b2:4a:9c:96:8c:b3:93:31: 52:d6:76:f6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKFkqLDrEgpZ1Sza16afaIFHIjbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMxMDI0MDBaFw0yNjA5MjIxMDI5MDBaMDMxMTAvBgNV BAMTKDIxRERERjA0N0E1NDJDMTA4MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYbtovRbIak5AjHtb5sg0bqYC /hbRt1UOuv/pwoMtn2STjmoH4FnIK7/12wr7ggnBs9ZMZR5t3WUGtwjWCA1bCFU4 AF1Ilj+YApJMr2d1by/pwEaVYuT+8UTNyd7vSdkkWo9F6vujXXKaSpQwLK+PKn6U qKGz4H3U7f8eeEv6VzKTXAJw/myIgxkN6w69hE9vSRjlGlHh2Yz4AVJrMiZQboqA UDePu8CWAFH+3ZBU9/Zr4cyg+yjqs0e6C+b6KTp4LZTQ5m8LzXuL3q0PLaCUH5v9 i5/UJqInt4BD+e3rJ+YOTtRASuQsi3BpHylF/aiOEsnS9Qi0ccnCj2gbw/1nAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQh3d8EelQsEIL2 3Z0XVOqu480K3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUda cHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZMU1QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH WnB4SjJTeTN2dTNtYjRqMW9XaHl0RzRoSEZqTkdHRWI2UWRvWHBWTFNULzAvMjFE RERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVFM0NEMEFEQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb5sMA0EAgACMAcDBQAoBGdoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQdOjANBgkqhkiG9w0BAQsFAAOCAQEAfWGGaquWhPKfoe3o VCaa1KU+lTRN0JnCEzq5d8XnQaT+0EqWIg/fwjs/TkerAC/oiD73ouwROdFNxvTm NyjxExGU6HlVk/pPfFsaPi3FAWVmuQzKrL3QEkQECKVwQSm8kVbonA8/cwNghc7A OHuS3TtdZit61yAYVexP0H+mzox24JnhODbNeh7DtIJxlS/sltFWhRjX0qWGt5es kkukfHnVDEB4dx8y1sPfD7SwwuTzT5pgWXF0aRJ7itUiJUrrPr7vRVVR46WtOxby Xjp4So5GTiP0UiBJCryDvVbCs773CHX7vGf8LgxIFxR0yrUxV29OXbJKnJaMs5Mx UtZ29g== -----END CERTIFICATE-----Generated at Mon Nov 3 05:32:31 2025 by rpki-client