$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer File: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer (raw, json) Hash identifier: q2iji8U5DOt7Jb1PdSLHebog67/aKO+dfK26vK3q6AM= Subject key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42A450C3C77ADF7EE959452971912A206A8AE8DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft caRepository: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 16 Sep 2025 20:54:47 +0000 Certificate not after: Tue 15 Sep 2026 20:59:47 +0000 Subordinate resources: AS: 273436 IP: 2804:8e98::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 05:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:50:c3:c7:7a:df:7e:e9:59:45:29:71:91:2a:20:6a:8a:e8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 16 20:54:47 2025 GMT Not After : Sep 15 20:59:47 2026 GMT Subject: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:fc:66:92:13:1a:c7:1f:fe:b0:da:88:e5: 22:d5:4e:29:ef:a6:5b:dc:94:bc:18:be:54:39:20: ae:ac:85:60:3b:26:3f:a6:4f:f2:bb:a8:8b:e7:b4: 5b:d8:5d:35:b8:7f:89:71:b0:92:81:32:74:05:c3: 4b:03:52:e4:26:84:01:13:56:be:39:ad:29:1f:93: 68:f8:97:ad:45:ef:31:57:29:3d:40:da:c5:9b:09: 09:48:6c:b8:95:45:72:06:77:8c:8e:50:6c:17:fe: e6:90:2c:0d:b4:2e:d1:50:a9:7e:95:be:a4:67:ac: 50:65:c3:b2:09:df:f1:20:be:78:2e:31:57:45:f1: 87:21:53:e6:48:6a:bc:47:55:f1:4f:27:d2:c6:d1: b5:af:73:a3:32:8c:c7:89:38:f5:89:78:36:66:2a: f0:cd:09:49:c2:18:a3:6c:36:dc:df:41:de:64:6d: 6d:f0:7b:91:76:c1:f5:cb:ee:cb:c7:b8:d9:2a:02: 73:a3:11:8a:73:75:2b:7a:e3:7e:d4:a4:a8:f0:85: 85:98:c7:b9:8e:5f:ff:38:26:d9:5d:84:cf:1e:c0: fc:d2:a2:4c:41:2e:b2:e8:73:74:5d:9b:f8:92:47: e0:50:43:f4:99:b4:a1:e8:41:97:ee:0b:09:bd:5b: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8e98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273436 Signature Algorithm: sha256WithRSAEncryption 8a:29:b8:87:5a:e6:51:7f:7a:b7:9e:37:fe:43:5d:ea:20:99: 55:90:36:e7:b5:82:95:69:7e:b0:70:85:93:22:6c:cb:0c:71: 0b:12:db:62:6a:f9:f0:23:87:b2:8f:cd:1d:1a:16:aa:bd:45: 86:3c:6f:04:d4:43:5a:eb:e8:bc:75:69:f5:7b:db:d8:fc:73: b6:a6:08:c9:f6:50:45:fa:83:49:82:82:71:cf:7f:68:7a:34: a5:4e:ad:1b:87:ef:08:e2:e5:45:c1:e5:11:29:33:87:47:23: 29:4b:7f:71:a9:8a:d1:af:58:bb:08:4d:4c:17:b5:4b:ba:55: 9f:14:9d:ea:ca:71:8c:fa:ad:fc:9f:c0:1e:55:d2:5b:47:4b: 60:da:25:c6:fd:84:0f:88:2f:39:64:e7:d4:f0:9c:e3:9e:ef: d6:fe:75:8e:72:24:f8:87:db:a6:34:bb:fe:ac:64:f5:2c:fa: 8e:68:48:6f:8e:95:e6:39:c6:d6:81:f3:75:9c:cb:98:d4:a4: 99:7f:1b:33:c1:85:14:16:98:55:70:15:fc:53:b4:e4:13:78: 94:4b:02:89:fa:50:d1:92:35:6c:5d:d1:bb:f6:30:8c:13:a3: a5:b0:1e:e7:8a:20:8c:f3:56:9c:62:fa:3a:45:67:3b:5e:0e: 21:07:aa:c3 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUQqRQw8d6337pWUUpcZEqIGqK6N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTYyMDU0NDdaFw0yNjA5MTUyMDU5NDdaMDMxMTAvBgNV BAMTKDVEQzA4QkMyRTdDQUJDMTFCODM5NUU1NUJEMUJFOUNEREE1NzQ5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXfxmkhMaxx/+sNqI5SLVTinv plvclLwYvlQ5IK6shWA7Jj+mT/K7qIvntFvYXTW4f4lxsJKBMnQFw0sDUuQmhAET Vr45rSkfk2j4l61F7zFXKT1A2sWbCQlIbLiVRXIGd4yOUGwX/uaQLA20LtFQqX6V vqRnrFBlw7IJ3/EgvnguMVdF8YchU+ZIarxHVfFPJ9LG0bWvc6MyjMeJOPWJeDZm KvDNCUnCGKNsNtzfQd5kbW3we5F2wfXL7svHuNkqAnOjEYpzdSt6437UpKjwhYWY x7mOX/84JtldhM8ewPzSokxBLrLoc3Rdm/iSR+BQQ/SZtKHoQZfuCwm9WzrnAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdwIvC58q8Ebg5 XlW9G+nN2ldJOTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkgz WjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZI M1o4ZVJwYmJuQnpNZVBiRDZMb0h2VDhUdm5WNE1ZM3p1WkFLc0diWnFwLzAvNURD MDhCQzJFN0NBQkMxMUI4Mzk1RTU1QkQxQkU5Q0REQTU3NDkzOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASOmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LBwwDQYJKoZIhvcNAQELBQADggEBAIopuIda5lF/ereeN/5DXeogmVWQNue1gpVp frBwhZMibMsMcQsS22Jq+fAjh7KPzR0aFqq9RYY8bwTUQ1rr6Lx1afV729j8c7am CMn2UEX6g0mCgnHPf2h6NKVOrRuH7wji5UXB5REpM4dHIylLf3GpitGvWLsITUwX tUu6VZ8UnerKcYz6rfyfwB5V0ltHS2DaJcb9hA+ILzlk59TwnOOe79b+dY5yJPiH 26Y0u/6sZPUs+o5oSG+OleY5xtaB83Wcy5jUpJl/GzPBhRQWmFVwFfxTtOQTeJRL Aon6UNGSNWxd0bv2MIwTo6WwHueKIIzzVpxi+jpFZzteDiEHqsM= -----END CERTIFICATE-----Generated at Fri Sep 19 03:31:32 2025 by rpki-client