$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer (raw, json) Hash identifier: +fVYWM7T51g/AlyL3UMZO7oN2p6YE3j/eXKYfM8dGpo= Subject key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 65719E0BA9A2E938F189C7466A57D009E6B63F92 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft caRepository: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 10:19:51 +0000 Certificate not after: Thu 05 Mar 2026 10:24:51 +0000 Subordinate resources: AS: 263945 IP: 45.188.24.0/22 IP: 138.219.180.0/22 IP: 170.84.72.0/22 IP: 2804:282c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:71:9e:0b:a9:a2:e9:38:f1:89:c7:46:6a:57:d0:09:e6:b6:3f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 10:19:51 2025 GMT Not After : Mar 5 10:24:51 2026 GMT Subject: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:54:70:08:32:53:4e:83:4a:88:c6:15:15: 52:b0:db:c3:e4:41:42:a9:11:a6:11:e9:8c:90:2c: 93:4b:e7:f5:9a:bb:b2:72:aa:23:fd:86:a9:de:22: c2:de:a5:f4:49:f0:20:8f:28:7b:5f:b9:76:b3:50: b7:b3:7f:a2:7c:45:5a:2a:e7:01:fe:67:98:7a:e7: 88:05:83:ff:ba:33:9b:34:1f:e2:b1:bc:1d:77:e5: fe:e1:6f:07:28:66:d1:d6:92:8a:ce:62:cc:bf:75: eb:de:66:dd:93:27:90:b9:ba:fc:7a:1c:67:f0:60: 2e:2e:60:3a:54:b3:0e:39:b7:e5:a0:e7:20:2d:bc: e9:b3:cb:53:5b:de:c8:29:4d:b6:d9:59:ec:53:e5: 15:a7:9e:d6:77:e9:ed:bb:de:aa:4e:46:53:be:99: 10:3d:52:06:c7:f2:55:15:07:ea:15:cf:d0:b3:4a: e8:32:96:09:3c:71:bc:7a:42:94:6f:4a:d0:75:a3: a9:77:04:81:5a:36:bb:11:89:b0:f3:4d:f5:ce:fa: 26:e2:ca:41:86:28:0c:49:85:e9:e1:6d:97:13:9a: 00:31:45:2f:22:75:47:5c:27:91:40:ea:13:31:a7: 2d:7e:15:7e:f6:c1:97:2e:d8:7a:ac:e0:ef:60:82: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.24.0/22 138.219.180.0/22 170.84.72.0/22 IPv6: 2804:282c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263945 Signature Algorithm: sha256WithRSAEncryption 14:5a:a5:96:3c:9e:0f:9f:d9:a5:35:b9:80:af:e5:d4:40:a9: 63:78:64:07:40:ba:a1:99:4b:f4:cf:93:09:3a:3b:a0:d3:ce: dd:8f:4b:50:67:57:93:9c:3a:fb:7b:8f:10:68:8d:e7:e4:3c: d0:3f:77:b4:19:b7:b8:c5:b6:10:a9:2e:ac:d9:54:65:6b:d3: 4c:34:91:e4:08:15:92:51:9a:b6:82:bf:54:2f:13:0c:b7:53: 9a:9c:c0:91:d9:cc:06:fd:ef:80:de:bc:38:88:a3:fd:ee:f1: 04:32:b9:82:12:6f:ad:aa:33:76:cd:c6:0b:4d:c0:3c:84:f0: 80:ec:7e:b0:26:eb:b3:fb:27:b9:5d:87:b6:d0:3a:77:60:60: 85:03:b7:23:4a:a0:e3:d0:62:4d:bd:9e:9e:17:f6:e2:52:ce: f9:65:fc:0b:ad:42:8b:f9:5d:d4:9c:7e:c0:61:96:86:a8:26: 97:d3:0e:af:de:79:b3:52:7f:d3:45:25:95:6b:26:0f:0f:de: b4:97:d0:53:3f:c8:6c:72:1f:62:02:0e:c0:14:3d:72:f3:a3: ab:5f:13:57:0e:9d:06:28:51:61:45:92:d5:1e:ac:03:80:4d: f0:7f:27:f3:f9:a9:e6:30:64:69:27:a9:ad:ac:5b:0d:6c:ad: 0d:f1:38:f4 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUZXGeC6mi6TjxicdGalfQCea2P5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxMDE5NTFaFw0yNjAzMDUxMDI0NTFaMDMxMTAvBgNV BAMTKENDREZCMjUyODREMTQxMUEwNUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCA2VRwCDJTToNKiMYVFVKw28Pk QUKpEaYR6YyQLJNL5/Wau7JyqiP9hqneIsLepfRJ8CCPKHtfuXazULezf6J8RVoq 5wH+Z5h654gFg/+6M5s0H+KxvB135f7hbwcoZtHWkorOYsy/deveZt2TJ5C5uvx6 HGfwYC4uYDpUsw45t+Wg5yAtvOmzy1Nb3sgpTbbZWexT5RWnntZ36e273qpORlO+ mRA9UgbH8lUVB+oVz9CzSugylgk8cbx6QpRvStB1o6l3BIFaNrsRibDzTfXO+ibi ykGGKAxJhenhbZcTmgAxRS8idUdcJ5FA6hMxpy1+FX72wZcu2Hqs4O9ggnYZAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTM37JShNFBGgXC 1amBabqgkO704TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0Vr cnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dF a3Jxb3BraVRrbVZadGQ3ZmFqMndhbUd5QmFrcHRxNWVXS3pTVENnZW53LzEvQ0NE RkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5MEVFRjRFMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLbwYAwQCitu0AwQCqlRIMA0EAgACMAcDBQAoBCgs MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQHCTANBgkqhkiG9w0BAQsFAAOCAQEA FFqlljyeD5/ZpTW5gK/l1ECpY3hkB0C6oZlL9M+TCTo7oNPO3Y9LUGdXk5w6+3uP EGiN5+Q80D93tBm3uMW2EKkurNlUZWvTTDSR5AgVklGatoK/VC8TDLdTmpzAkdnM Bv3vgN68OIij/e7xBDK5ghJvraozds3GC03APITwgOx+sCbrs/snuV2HttA6d2Bg hQO3I0qg49BiTb2enhf24lLO+WX8C61Ci/ld1Jx+wGGWhqgml9MOr955s1J/00Ul lWsmDw/etJfQUz/IbHIfYgIOwBQ9cvOjq18TVw6dBihRYUWS1R6sA4BN8H8n8/mp 5jBkaSepraxbDWytDfE49A== -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:01 2025 by rpki-client