$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer File: 68DD457AFD87757729E657881786601BF56ED45F.cer (raw, json) Hash identifier: DzlmoVBYvsqSoL2va7Gg+0NR1+FEeouqtEiCgPMGMX0= Subject key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 672CE4DE0FA8B61784614A032DC7B5C88D65EEA0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft caRepository: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 01 Oct 2025 16:10:15 +0000 Certificate not after: Wed 30 Sep 2026 16:15:15 +0000 Subordinate resources: AS: 270905 IP: 189.50.52.0/22 IP: 2804:7344::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2c:e4:de:0f:a8:b6:17:84:61:4a:03:2d:c7:b5:c8:8d:65:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 1 16:10:15 2025 GMT Not After : Sep 30 16:15:15 2026 GMT Subject: CN=68DD457AFD87757729E657881786601BF56ED45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:50:2a:9c:0d:72:c1:a2:8a:79:d7:ef:dc: 14:49:22:77:52:fa:fc:5d:56:35:3a:93:40:5e:46: 3a:2a:4e:53:c5:26:22:b9:40:6e:14:05:9d:93:5e: ac:ce:7e:90:b5:b5:cd:d6:d1:2b:88:a3:55:ae:67: 2e:8e:80:b5:1c:66:e4:75:16:63:dc:06:6d:10:99: f3:d9:fd:68:19:d7:fc:08:61:ac:f6:9e:7b:57:41: cb:14:7f:8a:c9:d2:99:87:8c:d1:29:9c:5c:e3:1b: 1a:24:81:7c:a2:f8:13:5e:ca:7c:c7:5f:01:fa:3e: 43:c5:50:b7:11:18:43:c1:d1:70:a3:e0:50:c3:b3: 10:b2:6f:3e:8d:23:73:01:c0:2f:90:02:c6:95:22: 5f:d4:d4:8d:84:41:07:7a:0c:8b:a3:c8:84:d6:a9: c6:c1:e9:53:83:e6:9a:c1:b1:78:ce:89:f7:0d:45: 26:7a:2d:ed:6c:5c:2c:82:3c:40:cb:df:aa:74:b7: b0:9c:84:5e:55:d3:df:31:71:66:77:63:54:a8:cd: 70:4d:49:c5:a1:c6:4c:aa:3f:0e:ff:3d:49:54:98: 68:39:a9:74:57:b1:86:a3:c8:73:36:51:68:9a:64: 1a:2b:5a:e1:a7:f2:12:da:1e:ef:1f:a4:f7:b2:b6: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.50.52.0/22 IPv6: 2804:7344::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270905 Signature Algorithm: sha256WithRSAEncryption 24:b2:2c:bb:bd:24:f0:3d:6f:bf:69:81:11:e4:a4:cd:0b:8f: be:71:fe:2b:09:83:d1:56:05:d4:f4:ce:b0:2f:83:fd:16:ea: 01:ad:ac:e3:9e:0d:ab:63:32:a9:c2:d6:68:71:0f:57:7b:51: cb:30:79:66:dc:3e:e5:f2:f1:97:4a:36:ed:a8:42:a0:2e:e6: f9:c9:e9:31:f9:b2:79:f2:51:9f:3a:b2:e8:c6:38:b1:9f:93: 65:ac:ac:81:31:5b:94:59:17:01:69:3c:68:d4:29:be:46:bc: 23:39:70:57:a7:94:a0:36:c0:15:58:25:bd:7f:54:a3:66:4e: 59:df:65:10:4f:0e:04:3c:c2:de:48:b6:27:1c:3c:93:2c:d8: 65:6d:46:53:a9:69:c9:cc:24:59:4c:54:84:50:3a:e4:48:e6: 76:22:ce:18:15:2c:d9:ee:f8:a8:2d:43:16:f7:04:58:36:87: 83:3a:d7:6c:66:14:9b:b1:ff:53:59:98:b1:04:bb:3c:07:f8: 62:1f:73:c5:d9:11:33:7d:be:25:9d:b4:1b:92:27:eb:0a:93: 7b:d4:a0:f7:e1:b4:00:81:6e:d6:23:e5:09:45:62:29:56:de: 05:f2:ce:85:26:ed:fc:d7:c9:dc:15:3e:23:36:07:86:71:d2: ff:1a:45:bd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZyzk3g+otheEYUoDLce1yI1l7qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMDExNjEwMTVaFw0yNjA5MzAxNjE1MTVaMDMxMTAvBgNV BAMTKDY4REQ0NTdBRkQ4Nzc1NzcyOUU2NTc4ODE3ODY2MDFCRjU2RUQ0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAlAqnA1ywaKKedfv3BRJIndS +vxdVjU6k0BeRjoqTlPFJiK5QG4UBZ2TXqzOfpC1tc3W0SuIo1WuZy6OgLUcZuR1 FmPcBm0QmfPZ/WgZ1/wIYaz2nntXQcsUf4rJ0pmHjNEpnFzjGxokgXyi+BNeynzH XwH6PkPFULcRGEPB0XCj4FDDsxCybz6NI3MBwC+QAsaVIl/U1I2EQQd6DIujyITW qcbB6VOD5prBsXjOifcNRSZ6Le1sXCyCPEDL36p0t7CchF5V098xcWZ3Y1SozXBN ScWhxkyqPw7/PUlUmGg5qXRXsYajyHM2UWiaZBorWuGn8hLaHu8fpPeythXVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo3UV6/Yd1dynm V4gXhmAb9W7UXzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVlL UTRlcnZQbXlvcjZrbVN1TEtCUGs0amNyVlQ1ZkhZaTNncGV6aDRxaEYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlZ S1E0ZXJ2UG15b3I2a21TdUxLQlBrNGpjclZUNWZIWWkzZ3Blemg0cWhGLzAvNjhE RDQ1N0FGRDg3NzU3NzI5RTY1Nzg4MTc4NjYwMUJGNTZFRDQ1Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvTI0MA0EAgACMAcDBQAoBHNEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiOTANBgkqhkiG9w0BAQsFAAOCAQEAJLIsu70k8D1vv2mB EeSkzQuPvnH+KwmD0VYF1PTOsC+D/RbqAa2s454Nq2MyqcLWaHEPV3tRyzB5Ztw+ 5fLxl0o27ahCoC7m+cnpMfmyefJRnzqy6MY4sZ+TZaysgTFblFkXAWk8aNQpvka8 IzlwV6eUoDbAFVglvX9Uo2ZOWd9lEE8OBDzC3ki2Jxw8kyzYZW1GU6lpycwkWUxU hFA65EjmdiLOGBUs2e74qC1DFvcEWDaHgzrXbGYUm7H/U1mYsQS7PAf4Yh9zxdkR M32+JZ20G5In6wqTe9Sg9+G0AIFu1iPlCUViKVbeBfLOhSbt/NfJ3BU+IzYHhnHS /xpFvQ== -----END CERTIFICATE-----Generated at Mon Nov 3 05:20:36 2025 by rpki-client