$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer File: CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer (raw, json) Hash identifier: R/0XvScsnftbYJi0XYW/Mi9/gHNgEQuaD4LLDwhZFFc= Subject key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 232111DCB5041D090A8C3F441FB1EAF5CBF911E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft caRepository: rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:44 +0000 Certificate not after: Wed 04 Mar 2026 18:40:44 +0000 Subordinate resources: AS: 268952 IP: 45.176.204.0/22 IP: 200.196.36.0/22 IP: 2804:5d20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:21:11:dc:b5:04:1d:09:0a:8c:3f:44:1f:b1:ea:f5:cb:f9:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:44 2025 GMT Not After : Mar 4 18:40:44 2026 GMT Subject: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:ce:58:9b:d2:6d:a1:f2:9a:a8:06:1b:2c: 64:aa:d1:08:53:85:1e:b0:5c:9a:63:dd:af:a4:b6: 71:d1:82:88:2b:21:37:42:60:6a:ed:e8:d9:4b:7c: 9d:c6:d1:d6:2d:f7:c8:f1:a6:de:b9:0e:7d:d4:93: b4:9b:13:fc:67:09:73:a8:1c:a4:04:ad:87:87:d8: bb:0f:65:bb:34:a3:df:5f:cf:fe:b5:94:17:3e:d6: 2f:a2:b7:49:cd:06:1a:b8:1b:5b:38:48:27:20:00: 0b:e3:32:28:36:55:40:0d:d3:73:fc:f2:e3:d0:3d: 55:f3:45:be:b7:a7:b7:3a:57:6e:8f:ef:b8:fe:8c: 3e:1e:0a:d3:9e:ed:24:0d:e2:c7:db:50:3d:a7:83: 97:99:a9:33:e1:b8:e2:41:e9:7b:f9:e3:15:49:af: c2:1e:12:04:24:da:80:1f:b2:04:67:d4:08:81:85: b1:3b:ac:74:af:c6:e2:88:53:c1:96:62:9e:9e:9b: 01:d7:72:6e:ca:b5:5c:2e:06:91:a5:3d:42:30:41: 3c:cf:3f:bb:3d:c3:9a:18:92:74:ce:db:57:d1:68: 8a:7b:1f:69:11:57:73:49:f9:e1:d4:c0:3a:f2:fb: a4:4c:e4:13:6e:d7:22:f1:b1:60:a6:36:8d:9f:e1: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.204.0/22 200.196.36.0/22 IPv6: 2804:5d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268952 Signature Algorithm: sha256WithRSAEncryption 4e:ff:af:81:c0:ee:3c:c6:ec:3f:9e:db:88:80:a4:69:ee:fb: a7:07:f1:49:1b:8f:a4:00:63:bc:4a:95:22:bd:d9:28:02:39: a9:b8:e7:31:c6:65:69:9b:34:57:ba:24:e7:a9:99:5d:36:fa: 75:ae:74:d4:eb:38:dd:60:b5:8a:90:1c:62:4a:94:f9:4e:0f: 35:ce:03:47:0a:9c:9f:45:f8:ce:d9:78:64:8a:1a:38:ee:26: 2c:b8:7e:62:ae:92:81:8b:fb:d3:70:c4:f7:7c:d6:79:79:49: ff:75:64:44:b6:7e:6e:e2:fa:75:55:f7:45:a2:f6:93:96:62: a1:10:d6:89:a8:69:b8:e1:f2:88:2b:6a:d3:6a:f3:0e:f7:28: 55:18:bb:f8:7b:c7:a7:a7:39:4a:99:b9:9f:14:eb:ac:d5:68: 57:f4:78:a2:e3:7c:3c:83:42:d7:eb:94:df:12:af:8a:b5:82: 83:2b:28:d0:af:8e:a3:0b:5b:f1:2a:68:13:88:26:9d:56:fe: 1c:92:ec:39:a1:fc:c2:e7:6c:b9:05:e6:f9:6d:f1:c2:b3:38: 28:8b:d6:bb:24:91:7a:47:4b:00:63:12:51:4b:9e:49:1e:ba: 4f:4d:83:45:f3:ab:c9:02:41:04:83:10:64:7e:91:99:10:74: 81:91:d2:71 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIyER3LUEHQkKjD9EH7Hq9cv5EeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NDRaFw0yNjAzMDQxODQwNDRaMDMxMTAvBgNV BAMTKENEQkJCQzhBMjFCNTY5QjhDMTM2NTdFRTczQ0M5M0NBOTU3N0EwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKK85Ym9JtofKaqAYbLGSq0QhT hR6wXJpj3a+ktnHRgogrITdCYGrt6NlLfJ3G0dYt98jxpt65Dn3Uk7SbE/xnCXOo HKQErYeH2LsPZbs0o99fz/61lBc+1i+it0nNBhq4G1s4SCcgAAvjMig2VUAN03P8 8uPQPVXzRb63p7c6V26P77j+jD4eCtOe7SQN4sfbUD2ng5eZqTPhuOJB6Xv54xVJ r8IeEgQk2oAfsgRn1AiBhbE7rHSvxuKIU8GWYp6emwHXcm7KtVwuBpGlPUIwQTzP P7s9w5oYknTO21fRaIp7H2kRV3NJ+eHUwDry+6RM5BNu1yLxsWCmNo2f4biFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNu7yKIbVpuME2 V+5zzJPKlXegJjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzRV VTR4VGZ4ZnNxNHhmczlkQ044bzJrU1F3WTZSWkdoZDY1YlRtYzhyZ20vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c0 VVU0eFRmeGZzcTR4ZnM5ZENOOG8ya1NRd1k2UlpHaGQ2NWJUbWM4cmdtLzEvQ0RC QkJDOEEyMUI1NjlCOEMxMzY1N0VFNzNDQzkzQ0E5NTc3QTAyNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbDMAwQCyMQkMA0EAgACMAcDBQAoBF0gMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQamDANBgkqhkiG9w0BAQsFAAOCAQEATv+vgcDu PMbsP57biICkae77pwfxSRuPpABjvEqVIr3ZKAI5qbjnMcZlaZs0V7ok56mZXTb6 da501Os43WC1ipAcYkqU+U4PNc4DRwqcn0X4ztl4ZIoaOO4mLLh+Yq6SgYv703DE 93zWeXlJ/3VkRLZ+buL6dVX3RaL2k5ZioRDWiahpuOHyiCtq02rzDvcoVRi7+HvH p6c5Spm5nxTrrNVoV/R4ouN8PINC1+uU3xKvirWCgyso0K+Oowtb8SpoE4gmnVb+ HJLsOaH8wudsuQXm+W3xwrM4KIvWuySRekdLAGMSUUueSR66T02DRfOryQJBBIMQ ZH6RmRB0gZHScQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:21 2025 by rpki-client