$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29C5DA244743877B068DCECE28A41814C0136412.cer File: 29C5DA244743877B068DCECE28A41814C0136412.cer (raw, json) Hash identifier: 3xkBBpbUqw/fkval8CXCsc/jY+42teDFtZfTnKy2f20= Subject key identifier: 29:C5:DA:24:47:43:87:7B:06:8D:CE:CE:28:A4:18:14:C0:13:64:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 04D721C0F3A609D6B4B7F78D85F26CA9EBEEC113 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft caRepository: rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 16:29:37 +0000 Certificate not after: Tue 22 Sep 2026 16:34:37 +0000 Subordinate resources: AS: 271664 IP: 177.73.216.0/22 IP: 2804:7f10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d7:21:c0:f3:a6:09:d6:b4:b7:f7:8d:85:f2:6c:a9:eb:ee:c1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 16:29:37 2025 GMT Not After : Sep 22 16:34:37 2026 GMT Subject: CN=29C5DA244743877B068DCECE28A41814C0136412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:51:be:4f:af:4b:2c:fa:2a:b7:5a:89:ac: 1b:4c:b0:cf:2e:97:76:d8:5a:26:ff:48:ed:c9:05: 52:5d:69:6e:ba:ab:5a:7e:c7:16:74:47:fa:da:67: 05:0e:7d:14:af:d2:49:fa:43:54:18:a8:4e:64:62: 88:9c:d0:9f:60:e9:52:ca:ca:3e:a7:77:83:3f:8a: 94:25:09:76:a3:6a:c4:04:ef:90:4c:f3:ec:84:cc: 36:77:92:7d:92:b6:92:89:db:8e:d9:4a:9e:f4:24: b7:98:89:35:b9:61:a5:31:08:9a:4f:37:1f:13:5b: 3a:38:54:57:25:37:26:a1:c7:e8:ed:ea:41:8a:31: 27:d3:dd:4c:db:08:c0:0e:1f:2c:aa:02:8b:48:44: 15:b7:c1:83:67:fc:ba:19:c1:f6:a5:17:69:27:4f: 04:43:53:d3:3e:20:07:cc:3f:02:5f:cc:52:c6:79: a5:ad:79:03:71:07:6c:f9:97:f3:27:6e:b6:c2:db: d6:dd:d3:ee:68:82:79:bb:9d:84:50:a1:15:17:1a: c8:94:85:c3:8a:8c:74:a5:c3:84:7f:59:1a:96:84: 6a:bc:66:2a:da:77:d8:ad:6b:a0:51:4b:b7:b4:c8: 39:ed:17:bd:78:42:9f:c4:d5:3e:a8:60:ea:e3:26: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:C5:DA:24:47:43:87:7B:06:8D:CE:CE:28:A4:18:14:C0:13:64:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/29C5DA244743877B068DCECE28A41814C0136412.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.216.0/22 IPv6: 2804:7f10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271664 Signature Algorithm: sha256WithRSAEncryption 74:8c:c7:88:a4:3b:8c:dc:d4:9b:a3:16:a0:f4:e8:8d:33:e3: 12:51:61:5c:12:35:a1:43:3b:75:2a:c3:6c:94:db:7c:fb:21: 55:cd:2b:73:25:22:76:89:dd:f2:21:48:c0:0d:a6:94:51:69: 4b:15:4f:a7:97:67:5e:a2:db:73:bf:37:e0:0e:55:0d:d2:1a: f7:c3:ba:df:de:64:ff:c9:51:6f:1d:32:f9:c6:60:81:d3:a3: e6:0b:55:1b:3f:99:b0:ce:a3:8f:e8:2f:f4:ab:d6:8c:24:32: aa:e5:a1:e4:bb:c5:79:cf:16:a1:bd:4c:97:16:02:27:e2:26: c3:37:08:a0:74:2e:01:c1:9d:4b:5b:cd:e0:b4:82:ee:9f:ed: 71:02:89:a7:d2:14:a4:b8:92:f4:36:2d:c8:c2:3e:b6:0b:a6: 37:ac:48:ae:6d:c4:90:24:f2:53:81:75:e1:4e:77:3c:c7:09: 06:94:49:cc:da:df:67:a1:67:fa:f1:0a:f3:d5:bb:3b:b9:c4: ea:5b:b4:c1:af:1e:b2:4d:f1:1c:01:31:5c:ea:03:a1:d4:e2: 6e:5b:5f:8f:7b:7d:a8:22:87:d8:31:83:da:45:0e:72:13:4e: b6:95:12:84:66:48:88:d2:da:1d:28:c6:4b:1d:64:f7:53:fd: 0e:32:1c:75 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUBNchwPOmCda0t/eNhfJsqevuwRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMxNjI5MzdaFw0yNjA5MjIxNjM0MzdaMDMxMTAvBgNV BAMTKDI5QzVEQTI0NDc0Mzg3N0IwNjhEQ0VDRTI4QTQxODE0QzAxMzY0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHlG+T69LLPoqt1qJrBtMsM8u l3bYWib/SO3JBVJdaW66q1p+xxZ0R/raZwUOfRSv0kn6Q1QYqE5kYoic0J9g6VLK yj6nd4M/ipQlCXajasQE75BM8+yEzDZ3kn2StpKJ247ZSp70JLeYiTW5YaUxCJpP Nx8TWzo4VFclNyahx+jt6kGKMSfT3UzbCMAOHyyqAotIRBW3wYNn/LoZwfalF2kn TwRDU9M+IAfMPwJfzFLGeaWteQNxB2z5l/MnbrbC29bd0+5ognm7nYRQoRUXGsiU hcOKjHSlw4R/WRqWhGq8Zirad9ita6BRS7e0yDntF714Qp/E1T6oYOrjJnyHAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpxdokR0OHewaN zs4opBgUwBNkEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTmVx OHJkc0YyQ0FvdTNoWkQ2cUx6UTNhSzRpTmZ3M3NxS2ttOEYydzRUZC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTmVx OHJkc0YyQ0FvdTNoWkQ2cUx6UTNhSzRpTmZ3M3NxS2ttOEYydzRUZC8wLzI5QzVE QTI0NDc0Mzg3N0IwNjhEQ0VDRTI4QTQxODE0QzAxMzY0MTIubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEArFJ2DANBAIAAjAHAwUAKAR/EDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEJTAwDQYJKoZIhvcNAQELBQADggEBAHSMx4ikO4zc1JujFqD0 6I0z4xJRYVwSNaFDO3Uqw2yU23z7IVXNK3MlInaJ3fIhSMANppRRaUsVT6eXZ16i 23O/N+AOVQ3SGvfDut/eZP/JUW8dMvnGYIHTo+YLVRs/mbDOo4/oL/Sr1owkMqrl oeS7xXnPFqG9TJcWAifiJsM3CKB0LgHBnUtbzeC0gu6f7XECiafSFKS4kvQ2LcjC PrYLpjesSK5txJAk8lOBdeFOdzzHCQaUScza32ehZ/rxCvPVuzu5xOpbtMGvHrJN 8RwBMVzqA6HU4m5bX497fagih9gxg9pFDnITTraVEoRmSIjS2h0oxksdZPdT/Q4y HHU= -----END CERTIFICATE-----Generated at Mon Nov 3 05:23:04 2025 by rpki-client