$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer File: 2917CE017809B6041B895DCC93EFF28388A27E5E.cer (raw, json) Hash identifier: FhOL9SNBSa88OFhRVBuk4DWqtc1X4edFc9C/vfKnBMs= Subject key identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 156A35E7B3B3561493797044406A80966693C253 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft caRepository: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Sep 2025 15:11:17 +0000 Certificate not after: Thu 03 Sep 2026 15:16:17 +0000 Subordinate resources: AS: 269481 IP: 24.152.0.0/22 IP: 45.187.180.0/22 IP: 2804:654c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6a:35:e7:b3:b3:56:14:93:79:70:44:40:6a:80:96:66:93:c2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 4 15:11:17 2025 GMT Not After : Sep 3 15:16:17 2026 GMT Subject: CN=2917CE017809B6041B895DCC93EFF28388A27E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:a6:99:5e:62:09:8b:e6:0d:f5:f4:68:27: 4f:f0:81:a5:f0:74:d8:17:ae:68:27:e1:4a:15:e1: dc:dd:e7:80:fa:cd:0f:7e:4a:76:e6:c1:e7:e7:60: ab:67:a4:fc:3f:ca:2b:b2:8e:0c:04:0c:9d:d5:f3: 2e:fb:72:a0:5c:3e:83:32:dc:ae:fa:c9:27:1c:de: 32:22:92:e3:9b:21:d7:00:45:08:7c:f8:60:fc:26: 5e:63:2f:cc:7a:ba:eb:6a:33:4f:a5:32:e0:1e:c2: 02:5f:5c:4a:54:3f:69:8e:2d:69:5d:27:81:01:b5: f9:6e:7e:8e:4f:1d:16:15:c0:34:9a:f7:d9:be:7d: 06:08:f5:aa:c8:ca:1d:ab:76:e2:65:c8:b3:93:ab: cd:f0:02:a8:9e:32:d9:88:36:a7:82:20:a5:d0:6f: fc:92:16:fa:1d:a4:90:b4:ee:41:79:07:98:e2:b5: 50:c1:9f:24:7b:05:b9:12:41:5e:bc:b7:c6:37:de: ee:77:36:c5:09:e2:7d:9a:1e:83:27:ad:ce:1f:c2: ae:18:3f:49:7e:d4:7b:67:95:2d:6c:8a:7f:68:5d: ee:67:3d:19:11:c2:c4:10:94:e4:41:3e:d1:79:6d: 1c:31:9a:4a:bc:4d:c0:35:f7:df:ea:a9:e2:34:6a: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.0.0/22 45.187.180.0/22 IPv6: 2804:654c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269481 Signature Algorithm: sha256WithRSAEncryption 8a:f9:b8:0d:30:c4:58:6d:cd:41:97:fe:52:cc:dc:cd:29:8c: 98:7b:64:00:92:f6:34:cf:1f:4e:1b:1e:ab:89:52:08:d5:7b: 02:53:98:83:3a:2e:1e:53:53:5e:ec:17:f0:c1:66:e6:d1:83: dc:9a:64:c0:73:66:96:88:cd:eb:de:bb:b0:90:d1:8d:ba:c5: 31:ee:9f:3b:c9:02:f9:e1:6d:06:9c:5d:47:99:c0:06:86:b4: f0:22:8d:e8:0e:a2:4c:1e:fa:86:0c:0a:b3:29:c4:d9:73:e7: cd:53:c8:96:4a:7c:94:65:33:0c:83:a3:08:51:5f:f0:c7:26: 2b:54:fd:7c:0e:0c:38:91:d6:02:7a:c6:eb:4f:42:f0:82:50: 69:d3:25:21:58:0c:71:6d:79:87:e9:b3:3e:ab:9f:6c:8a:c0: 74:8e:ff:ec:81:56:95:5f:6d:25:20:ec:90:49:73:1e:1a:77: 0e:c4:52:cf:05:00:25:f5:bf:e5:ac:47:8e:70:a2:2a:4e:89: 5f:ee:90:4d:af:16:75:4d:e6:c0:fd:81:12:42:c6:8c:b2:14: b5:b0:12:94:3a:85:15:b4:aa:7b:35:37:47:ae:5a:a9:d1:10: ac:3b:ed:a8:bd:1e:57:13:f4:a8:72:70:98:17:d4:6c:18:ad: de:4e:63:1b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFWo157OzVhSTeXBEQGqAlmaTwlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDQxNTExMTdaFw0yNjA5MDMxNTE2MTdaMDMxMTAvBgNV BAMTKDI5MTdDRTAxNzgwOUI2MDQxQjg5NURDQzkzRUZGMjgzODhBMjdFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaKaZXmIJi+YN9fRoJ0/wgaXw dNgXrmgn4UoV4dzd54D6zQ9+SnbmwefnYKtnpPw/yiuyjgwEDJ3V8y77cqBcPoMy 3K76yScc3jIikuObIdcARQh8+GD8Jl5jL8x6uutqM0+lMuAewgJfXEpUP2mOLWld J4EBtflufo5PHRYVwDSa99m+fQYI9arIyh2rduJlyLOTq83wAqieMtmINqeCIKXQ b/ySFvodpJC07kF5B5jitVDBnyR7BbkSQV68t8Y33u53NsUJ4n2aHoMnrc4fwq4Y P0l+1HtnlS1sin9oXe5nPRkRwsQQlORBPtF5bRwxmkq8TcA199/qqeI0as3pAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpF84BeAm2BBuJ XcyT7/KDiKJ+XjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjVM MlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhOQmovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI1 TDJQSEhTcVFVcWI0WXFHUnEyaUZXZ2N6SFRKckg2SHR4ZFc5eFZITkJqLzAvMjkx N0NFMDE3ODA5QjYwNDFCODk1RENDOTNFRkYyODM4OEEyN0U1RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCGJgAAwQCLbu0MA0EAgACMAcDBQAoBGVMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQcqTANBgkqhkiG9w0BAQsFAAOCAQEAivm4DTDE WG3NQZf+UszczSmMmHtkAJL2NM8fThseq4lSCNV7AlOYgzouHlNTXuwX8MFm5tGD 3JpkwHNmlojN6967sJDRjbrFMe6fO8kC+eFtBpxdR5nABoa08CKN6A6iTB76hgwK synE2XPnzVPIlkp8lGUzDIOjCFFf8McmK1T9fA4MOJHWAnrG609C8IJQadMlIVgM cW15h+mzPqufbIrAdI7/7IFWlV9tJSDskElzHhp3DsRSzwUAJfW/5axHjnCiKk6J X+6QTa8WdU3mwP2BEkLGjLIUtbASlDqFFbSqezU3R65aqdEQrDvtqL0eVxP0qHJw mBfUbBit3k5jGw== -----END CERTIFICATE-----Generated at Thu Sep 18 09:56:13 2025 by rpki-client