$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer File: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer (raw, json) Hash identifier: wOipvAT5mB83jUUK9bmm7KzXEYaLVQA5TcWP/t6uK/s= Subject key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3EDC5F5B97AD8E041B1DA4CD1FC9B7D87632C68B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft caRepository: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 13:00:33 +0000 Certificate not after: Thu 02 Apr 2026 13:05:33 +0000 Subordinate resources: AS: 28309 IP: 168.228.96.0/22 IP: 179.189.0.0/20 IP: 187.44.64.0/20 IP: 189.38.32.0/20 IP: 2804:16c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:dc:5f:5b:97:ad:8e:04:1b:1d:a4:cd:1f:c9:b7:d8:76:32:c6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 13:00:33 2025 GMT Not After : Apr 2 13:05:33 2026 GMT Subject: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:17:ea:9f:5a:d1:d8:6b:ac:74:47:84:67: 15:d4:f3:c8:f1:08:e2:64:47:9c:ed:1c:57:68:87: 0b:8f:62:63:34:f9:e7:fc:ba:b9:b4:63:cc:0a:9d: 2d:7b:2e:ef:df:bc:7c:3a:08:46:eb:6f:f0:b3:1a: 61:3c:21:00:67:52:65:4d:ae:8e:40:72:fb:2c:72: 13:03:bd:d8:83:c8:7d:14:5c:36:71:a1:8a:de:c0: 4b:11:0e:16:56:41:8b:02:41:1e:2c:f4:84:e3:df: 31:6a:4b:a3:4c:58:9e:d4:48:c8:9a:76:54:c5:60: bf:53:ea:cc:f5:c9:5f:7b:3c:62:0c:12:7e:9d:01: 19:b3:23:9e:ac:c2:ec:6a:4f:b0:85:cd:96:8f:e3: 82:c7:7f:c5:2d:e6:6a:5e:b0:84:1b:1d:ab:53:46: 29:ae:40:59:7f:4d:9c:3e:22:64:7d:db:27:aa:72: 75:68:fb:15:b3:11:4f:3c:5a:12:9a:5b:8c:5e:8f: ad:e2:be:b5:27:2b:01:6e:47:c7:69:54:fb:7c:33: 3e:6e:50:76:3a:3f:ad:06:e0:3f:d8:88:f1:4c:17: 35:bd:0a:b6:6b:31:79:df:70:18:b1:ff:3e:f6:87: 0e:bd:08:7b:d0:f6:e2:08:8a:56:6b:a3:41:7a:a5: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.96.0/22 179.189.0.0/20 187.44.64.0/20 189.38.32.0/20 IPv6: 2804:16c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28309 Signature Algorithm: sha256WithRSAEncryption 93:59:10:1d:98:e1:ec:d9:ac:bd:83:1f:25:35:71:5a:cd:6d: ea:08:de:01:92:2b:bf:e1:5c:57:45:96:a0:85:82:9b:8b:3f: c7:b5:7a:f1:6a:e9:e7:c9:e0:4e:2c:59:e4:37:6b:bb:d7:26: a0:68:4d:b9:d7:87:7f:e1:99:e3:56:8e:01:bf:70:fc:45:52: 72:5f:17:bc:41:3c:4d:67:14:76:06:20:9f:66:90:3f:69:ea: de:b5:d1:ab:d9:ae:74:75:5d:38:9f:a2:5a:dd:a4:cc:b8:9e: ee:4a:36:e9:24:3f:28:f6:95:55:46:7c:08:88:31:2f:15:43: 33:31:a2:83:89:53:77:3f:2c:7f:dd:80:50:e3:27:87:cf:3f: db:bd:74:e3:b8:32:45:f0:5f:29:79:fb:92:d7:3f:b7:14:d3: 79:db:61:c0:fb:df:58:25:15:da:c0:b7:6a:40:61:ab:fb:f7: 29:ba:e1:d5:4b:a1:6c:e0:dd:18:bb:47:a3:be:57:28:31:c0: 4b:2f:fb:22:97:22:f6:5b:09:03:f0:f5:33:d4:d6:0f:c7:2b: 52:ef:91:b0:43:3d:d8:23:87:55:19:d8:00:46:40:c6:37:94: aa:01:cb:a5:0b:24:37:42:02:70:de:20:01:22:7d:2c:7e:d9: 58:aa:6b:e6 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUPtxfW5etjgQbHaTNH8m32HYyxoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDMxMzAwMzNaFw0yNjA0MDIxMzA1MzNaMDMxMTAvBgNV BAMTKDY5REU1QUQxQTVCMUY5Nzg4NEQxOURDM0U5RUZEQTNGOTY1NEMxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEhfqn1rR2GusdEeEZxXU88jx COJkR5ztHFdohwuPYmM0+ef8urm0Y8wKnS17Lu/fvHw6CEbrb/CzGmE8IQBnUmVN ro5AcvsschMDvdiDyH0UXDZxoYrewEsRDhZWQYsCQR4s9ITj3zFqS6NMWJ7USMia dlTFYL9T6sz1yV97PGIMEn6dARmzI56swuxqT7CFzZaP44LHf8Ut5mpesIQbHatT RimuQFl/TZw+ImR92yeqcnVo+xWzEU88WhKaW4xej63ivrUnKwFuR8dpVPt8Mz5u UHY6P60G4D/YiPFMFzW9CrZrMXnfcBix/z72hw69CHvQ9uIIilZro0F6pRnjAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRp3lrRpbH5eITR ncPp79o/llTBIzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDcz RGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3Q28vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g3 M0RhZzlveXJHd1c5eUU4Q3J1MUtCdG9lZWZhaEphdGJpeXg0eEg4d0NvLzAvNjlE RTVBRDFBNUIxRjk3ODg0RDE5REMzRTlFRkRBM0Y5NjU0QzEyMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCqORgAwQEs70AAwQEuyxAAwQEvSYgMA0EAgACMAcD BQAoBAFsMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm6VMA0GCSqGSIb3DQEBCwUA A4IBAQCTWRAdmOHs2ay9gx8lNXFazW3qCN4Bkiu/4VxXRZaghYKbiz/HtXrxaunn yeBOLFnkN2u71yagaE2514d/4ZnjVo4Bv3D8RVJyXxe8QTxNZxR2BiCfZpA/aere tdGr2a50dV04n6Ja3aTMuJ7uSjbpJD8o9pVVRnwIiDEvFUMzMaKDiVN3Pyx/3YBQ 4yeHzz/bvXTjuDJF8F8pefuS1z+3FNN522HA+99YJRXawLdqQGGr+/cpuuHVS6Fs 4N0Yu0ejvlcoMcBLL/silyL2WwkD8PUz1NYPxytS75GwQz3YI4dVGdgARkDGN5Sq AculCyQ3QgJw3iABIn0sftlYqmvm -----END CERTIFICATE-----Generated at Sun Nov 2 23:04:08 2025 by rpki-client