$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDB4502328A17F5E10125CA4554E967C912340D3.cer File: CDB4502328A17F5E10125CA4554E967C912340D3.cer (raw, json) Hash identifier: 1u1MNfFlDTYfLa2/ysSyA46zjEqGSqcsClr2v3PN1aA= Subject key identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B3DD008610F5D74420797F9297B28FDC68E4724 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft caRepository: rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Sep 2025 12:46:19 +0000 Certificate not after: Fri 04 Sep 2026 12:51:19 +0000 Subordinate resources: AS: 274520 IP: 2804:9564::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3d:d0:08:61:0f:5d:74:42:07:97:f9:29:7b:28:fd:c6:8e:47:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 5 12:46:19 2025 GMT Not After : Sep 4 12:51:19 2026 GMT Subject: CN=CDB4502328A17F5E10125CA4554E967C912340D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:a6:b3:41:ae:9d:77:03:82:c5:b2:3d:57: 59:27:f1:0e:c5:f6:ff:b7:6f:15:35:bb:d1:18:3c: d6:6c:1d:cd:d4:e6:90:e1:de:bc:54:95:69:3a:38: 51:79:30:b9:77:e0:80:9f:aa:ad:e8:d7:72:69:df: e2:e7:77:1a:0d:5e:14:cf:4d:51:0d:17:98:1f:eb: 4e:2f:ac:95:0e:e2:d4:e5:45:ee:7b:56:9b:a4:8e: c2:fe:d6:56:f1:01:49:70:18:c2:68:1a:7e:01:8d: ab:03:4d:6b:dc:ef:b4:e3:c6:ec:74:81:74:06:d5: 37:c0:f6:d1:da:e7:b7:80:3b:35:4b:d0:15:5c:d0: 68:82:f7:4f:c5:c4:72:92:33:a5:dc:43:f1:4b:bb: da:03:1a:41:8d:3a:fc:8e:6f:72:91:16:19:66:58: 09:2b:6a:61:64:23:ef:50:ba:f8:2a:74:bb:f6:6b: ab:a5:4a:4d:bb:87:2b:81:d6:51:fa:70:95:d4:d7: b2:4d:da:da:dc:94:5e:fb:a2:8b:66:13:d7:ed:16: 2f:aa:6d:ea:82:34:11:7c:dd:0c:dc:d6:44:52:5e: 77:bc:e3:b4:1f:56:5b:80:59:33:5a:a3:ae:b3:30: 52:de:23:44:57:bf:a2:57:da:f1:3e:74:22:47:9e: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:B4:50:23:28:A1:7F:5E:10:12:5C:A4:55:4E:96:7C:91:23:40:D3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/CDB4502328A17F5E10125CA4554E967C912340D3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9564::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274520 Signature Algorithm: sha256WithRSAEncryption 7e:e3:8a:62:55:a8:03:39:9b:62:a4:93:46:ed:54:22:59:f7: be:56:a2:0c:fb:94:a9:c8:6b:e7:2e:3a:6d:70:38:c3:1f:40: 99:70:04:3a:97:3d:15:56:ce:56:cd:7b:dc:29:0e:45:9b:92: c9:30:13:68:32:8d:7a:74:d9:fc:81:ea:2e:c7:bf:cd:55:fa: e4:5c:9d:cb:04:1f:25:a4:11:05:e7:14:3b:44:5e:43:4e:24: 91:b8:b3:de:2d:83:e3:65:07:60:3f:80:92:d3:72:7e:12:57: 12:2e:ba:5a:f2:69:aa:16:97:1a:95:ff:63:24:72:d3:4f:7f: 37:d2:a9:73:8f:82:7f:05:8c:f6:5a:d0:d4:5a:cb:6c:bf:5d: 8a:af:e7:cc:2d:30:ed:69:d0:2e:7b:94:c9:c0:5a:ec:d9:5b: 24:f1:d7:ae:31:09:49:e8:ab:37:93:e2:94:b8:18:fd:01:4b: 18:99:81:d7:f9:62:f1:e5:28:4c:ee:28:f7:c1:ce:d8:e6:82: 35:b5:66:6e:06:e9:c4:5f:6e:91:7e:eb:c1:ad:c1:c2:ec:9f: 5d:d7:3b:72:62:44:62:5e:60:b3:3c:c6:2a:a5:e5:71:0b:82: 72:0e:50:b2:f8:eb:4d:2c:70:fb:7b:38:24:d1:32:e0:57:a9: c1:2f:da:53 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUGz3QCGEPXXRCB5f5KXso/caORyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDUxMjQ2MTlaFw0yNjA5MDQxMjUxMTlaMDMxMTAvBgNV BAMTKENEQjQ1MDIzMjhBMTdGNUUxMDEyNUNBNDU1NEU5NjdDOTEyMzQwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8qazQa6ddwOCxbI9V1kn8Q7F 9v+3bxU1u9EYPNZsHc3U5pDh3rxUlWk6OFF5MLl34ICfqq3o13Jp3+LndxoNXhTP TVENF5gf604vrJUO4tTlRe57VpukjsL+1lbxAUlwGMJoGn4BjasDTWvc77Tjxux0 gXQG1TfA9tHa57eAOzVL0BVc0GiC90/FxHKSM6XcQ/FLu9oDGkGNOvyOb3KRFhlm WAkramFkI+9QuvgqdLv2a6ulSk27hyuB1lH6cJXU17JN2trclF77ootmE9ftFi+q beqCNBF83Qzc1kRSXne847QfVluAWTNao66zMFLeI0RXv6JX2vE+dCJHnqrnAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNtFAjKKF/XhAS XKRVTpZ8kSNA0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRndU VlRwR3plMUVvRFlSRVhTb044UVlURmdmSGtZaDRzaG9Cb1drMTJHd2YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z3 VFZUcEd6ZTFFb0RZUkVYU29OOFFZVEZnZkhrWWg0c2hvQm9XazEyR3dmLzAvQ0RC NDUwMjMyOEExN0Y1RTEwMTI1Q0E0NTU0RTk2N0M5MTIzNDBEMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASVZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MFgwDQYJKoZIhvcNAQELBQADggEBAH7jimJVqAM5m2Kkk0btVCJZ975Wogz7lKnI a+cuOm1wOMMfQJlwBDqXPRVWzlbNe9wpDkWbkskwE2gyjXp02fyB6i7Hv81V+uRc ncsEHyWkEQXnFDtEXkNOJJG4s94tg+NlB2A/gJLTcn4SVxIuulryaaoWlxqV/2Mk ctNPfzfSqXOPgn8FjPZa0NRay2y/XYqv58wtMO1p0C57lMnAWuzZWyTx164xCUno qzeT4pS4GP0BSxiZgdf5YvHlKEzuKPfBztjmgjW1Zm4G6cRfbpF+68GtwcLsn13X O3JiRGJeYLM8xiql5XELgnIOULL4600scPt7OCTRMuBXqcEv2lM= -----END CERTIFICATE-----Generated at Mon Nov 3 05:30:51 2025 by rpki-client