$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer File: 99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer (raw, json) Hash identifier: sDX8WXyVl3RrUipTpMil0HYtYtBvXEPf5OnTjiRs434= Subject key identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75E605AC500892EB56A4600E251F28A69CC6E0A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft caRepository: rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 19:51:13 +0000 Certificate not after: Mon 14 Sep 2026 19:56:13 +0000 Subordinate resources: AS: 262473 IP: 177.47.208.0/20 IP: 2804:7f94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e6:05:ac:50:08:92:eb:56:a4:60:0e:25:1f:28:a6:9c:c6:e0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 15 19:51:13 2025 GMT Not After : Sep 14 19:56:13 2026 GMT Subject: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:96:d5:ca:48:a1:de:26:fd:a2:01:55:23:c3: 4e:64:0b:d3:fa:1e:b7:c1:e2:37:08:86:0b:78:ce: 30:82:8d:08:58:0d:7b:c2:ad:c6:28:03:12:96:3d: b1:ee:73:fd:0d:f1:94:b5:e0:2b:df:e2:5c:62:be: 8e:01:84:a6:96:fc:36:d7:4c:d5:54:db:a4:da:e7: e8:02:d9:52:40:9d:02:61:e9:dd:52:34:83:cd:99: 4d:d1:d9:5c:fd:8b:39:42:50:01:f5:7a:9a:06:a2: e0:35:84:41:ec:32:f7:f2:eb:60:da:b2:8e:91:50: 20:b6:f4:bd:28:4e:e9:78:98:8c:7f:81:5a:34:58: 18:9d:ef:78:a9:41:c4:be:91:81:31:da:5c:53:ed: 79:4e:57:18:e9:33:ea:24:2d:96:94:65:b0:fc:95: 20:44:36:e6:53:85:a7:70:c4:44:c9:28:10:02:27: ec:0c:35:85:6f:86:7a:db:88:8d:cf:ca:3b:26:98: 78:5b:c0:43:e5:ed:9c:58:ac:ad:57:d4:29:fb:02: cc:68:23:b4:6c:ac:c4:fb:a7:ea:34:40:52:9b:76: 9b:8f:16:f7:28:a2:89:5a:18:ef:54:cb:8d:25:83: b0:27:9a:14:fa:7e:db:7b:74:d0:4d:88:ca:e4:45: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.47.208.0/20 IPv6: 2804:7f94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262473 Signature Algorithm: sha256WithRSAEncryption 06:02:9d:94:f0:57:d7:4e:91:6e:bb:1a:48:bc:c7:83:cd:6a: 95:d4:0a:86:fd:16:81:3c:24:28:78:84:78:8e:0d:f3:96:1b: 06:92:ee:ab:6d:cb:34:f7:aa:2f:2a:e5:96:b3:d6:7a:43:b8: 55:a5:e7:c2:87:c2:13:24:2c:6d:28:51:2a:97:7f:be:64:ae: 43:1a:40:f0:24:2e:95:34:78:5b:df:c2:35:ad:24:4c:30:bf: 75:c0:b2:9a:07:9e:cc:eb:d7:b6:ff:b2:a8:84:5e:f5:9f:81: dd:6c:3d:ae:c6:c7:ae:71:68:d2:d6:10:aa:bc:63:88:8e:6b: d9:5c:76:86:a1:f0:4d:c8:82:5b:d1:27:97:e6:fb:62:6e:9b: c8:63:1f:2e:4d:a8:c8:05:1b:c5:ac:94:63:38:71:34:ab:92: 72:35:63:0c:b8:cd:2d:7f:aa:ea:1d:63:ba:70:fb:0f:60:b7: bb:40:4d:3a:df:27:19:30:da:b7:4b:5c:48:35:4c:4e:19:53: 49:c7:cf:fc:3b:cb:c0:ba:4b:17:85:69:77:d5:ed:06:2c:b6: 1f:ba:84:80:35:2f:de:e3:d3:c5:10:a0:b8:1e:11:b3:e3:d4: e1:a9:bb:06:d6:4c:46:02:a9:39:e4:3f:8e:04:f0:96:1f:e7: 12:9b:4d:22 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdeYFrFAIkutWpGAOJR8oppzG4KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTUxOTUxMTNaFw0yNjA5MTQxOTU2MTNaMDMxMTAvBgNV BAMTKDk5RDI1RDU4N0Q5NTg5QkRCNDIzODNBQTA1RkQ0RjU4QzhFNjg2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYltXKSKHeJv2iAVUjw05kC9P6 HrfB4jcIhgt4zjCCjQhYDXvCrcYoAxKWPbHuc/0N8ZS14Cvf4lxivo4BhKaW/DbX TNVU26Ta5+gC2VJAnQJh6d1SNIPNmU3R2Vz9izlCUAH1epoGouA1hEHsMvfy62Da so6RUCC29L0oTul4mIx/gVo0WBid73ipQcS+kYEx2lxT7XlOVxjpM+okLZaUZbD8 lSBENuZThadwxETJKBACJ+wMNYVvhnrbiI3PyjsmmHhbwEPl7ZxYrK1X1Cn7Asxo I7RsrMT7p+o0QFKbdpuPFvcooolaGO9Uy40lg7AnmhT6ftt7dNBNiMrkRYFzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZ0l1YfZWJvbQj g6oF/U9YyOaGrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMTJ5 S2Y1ZU1xUGdqdWszaFRzeEFNUEtSREZXbnkxSHZuS3RQUjVBd1R2RnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzEy eUtmNWVNcVBnanVrM2hUc3hBTVBLUkRGV255MUh2bkt0UFI1QXdUdkZyLzAvOTlE MjVENTg3RDk1ODlCREI0MjM4M0FBMDVGRDRGNThDOEU2ODZBRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEsS/QMA0EAgACMAcDBQAoBH+UMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQBSTANBgkqhkiG9w0BAQsFAAOCAQEABgKdlPBX106Rbrsa SLzHg81qldQKhv0WgTwkKHiEeI4N85YbBpLuq23LNPeqLyrllrPWekO4VaXnwofC EyQsbShRKpd/vmSuQxpA8CQulTR4W9/CNa0kTDC/dcCymgeezOvXtv+yqIRe9Z+B 3Ww9rsbHrnFo0tYQqrxjiI5r2Vx2hqHwTciCW9Enl+b7Ym6byGMfLk2oyAUbxayU YzhxNKuScjVjDLjNLX+q6h1junD7D2C3u0BNOt8nGTDat0tcSDVMThlTScfP/DvL wLpLF4Vpd9XtBiy2H7qEgDUv3uPTxRCguB4Rs+PU4am7BtZMRgKpOeQ/jgTwlh/n EptNIg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:19:53 2025 by rpki-client