$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer File: D01D2EC076BDA62D438B972886851503EED04B2F.cer (raw, json) Hash identifier: pPQ0Ady3sCjaIYafkXVwspynRWLdOCJsmptp9UvjFCc= Subject key identifier: D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66E00E8AE0E572A44582F0F7D4356ECD05C4536F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft caRepository: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 14:11:07 +0000 Certificate not after: Tue 22 Sep 2026 14:16:07 +0000 Subordinate resources: AS: 268290 IP: 45.237.204.0/22 IP: 2804:4ee8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Oct 2025 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e0:0e:8a:e0:e5:72:a4:45:82:f0:f7:d4:35:6e:cd:05:c4:53:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 14:11:07 2025 GMT Not After : Sep 22 14:16:07 2026 GMT Subject: CN=D01D2EC076BDA62D438B972886851503EED04B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:b1:59:1f:c1:59:07:39:11:ba:9a:cc:9a: 90:a7:9e:34:5a:fb:97:85:15:09:cf:7f:d0:7d:e4: 68:8e:40:96:d7:d3:fc:01:c6:2e:1e:67:01:78:0f: ec:e2:a8:17:96:c0:76:5d:04:e9:4a:0a:dc:d9:54: 1c:7d:a9:d2:9c:55:49:fe:b7:07:1c:38:dc:2c:49: 58:fd:cf:9b:1d:94:2e:91:cb:82:b1:e7:6e:91:2c: a7:de:b0:84:e7:ef:db:18:03:e8:f6:61:25:23:01: c7:e6:d3:f4:c0:18:76:5d:d0:e1:ce:c1:e2:d8:74: 8d:26:6f:e7:57:a7:ab:9a:4b:3a:c5:d9:02:dc:22: a6:b4:7f:78:f8:5b:82:26:5a:a9:7c:45:f8:a7:6e: 87:16:8f:bc:2d:39:dd:31:2d:93:fe:c8:cd:e9:8a: 4f:00:fe:94:53:d4:99:03:6b:3f:10:9f:8b:94:3a: 67:96:a8:9d:23:7f:1a:ca:79:25:24:82:d2:5a:35: 6c:30:ef:c7:57:4b:d4:31:c1:0b:50:75:2a:5e:ef: 03:b3:b6:bf:66:d7:d1:0e:d6:65:f8:54:ee:4b:73: a6:e0:8e:54:b1:e3:17:5e:d1:af:83:00:37:b7:02: b8:b2:4a:c7:87:31:f7:71:85:2c:73:56:41:ed:2c: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.204.0/22 IPv6: 2804:4ee8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268290 Signature Algorithm: sha256WithRSAEncryption 8c:85:fd:bc:ff:29:bb:8c:13:23:0c:7d:fc:e6:6a:bc:ba:32: aa:c6:8d:ae:7b:b3:d1:3c:15:8e:25:7d:c0:7f:a4:75:25:48: 45:78:55:0f:6f:51:b6:0b:fe:bf:1d:a2:3c:8b:ac:f6:8d:20: 0c:3b:58:62:a2:ee:3f:b8:72:4c:50:11:85:14:89:ce:45:a9: 56:60:e9:9c:ae:ac:64:5b:4b:5d:67:cb:4f:f0:58:43:c3:4d: 45:1d:aa:54:26:96:7d:3a:17:9a:0e:07:5f:78:7e:1f:34:d8: 72:16:af:6c:63:6c:01:5e:08:2e:30:75:67:a0:a3:cf:5f:c3: 3d:8f:33:a1:04:f4:18:46:50:e8:66:76:b1:54:10:a4:f2:4b: 56:3f:d1:40:37:ec:ea:66:ad:2b:ec:2c:73:da:9a:cc:98:bf: 44:55:94:c3:88:31:64:fa:4d:cf:f3:ec:70:81:ab:fa:85:4a: 70:75:9c:8a:da:93:5f:c6:91:fd:10:14:1a:b3:b2:ed:5c:9a: db:66:39:ce:b9:dc:af:1c:7b:9f:af:d6:6d:54:6c:16:ee:aa: be:53:b8:b8:5f:78:4c:6a:59:e6:20:a8:1f:63:cd:4d:59:c6: 12:37:30:89:3d:92:93:d3:1d:eb:a1:31:47:ba:e9:99:dd:91: 94:f8:74:a0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZuAOiuDlcqRFgvD31DVuzQXEU28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjMxNDExMDdaFw0yNjA5MjIxNDE2MDdaMDMxMTAvBgNV BAMTKEQwMUQyRUMwNzZCREE2MkQ0MzhCOTcyODg2ODUxNTAzRUVEMDRCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6LFZH8FZBzkRuprMmpCnnjRa +5eFFQnPf9B95GiOQJbX0/wBxi4eZwF4D+ziqBeWwHZdBOlKCtzZVBx9qdKcVUn+ twccONwsSVj9z5sdlC6Ry4Kx526RLKfesITn79sYA+j2YSUjAcfm0/TAGHZd0OHO weLYdI0mb+dXp6uaSzrF2QLcIqa0f3j4W4ImWql8RfinbocWj7wtOd0xLZP+yM3p ik8A/pRT1JkDaz8Qn4uUOmeWqJ0jfxrKeSUkgtJaNWww78dXS9QxwQtQdSpe7wOz tr9m19EO1mX4VO5Lc6bgjlSx4xde0a+DADe3AriySseHMfdxhSxzVkHtLCOJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQHS7Adr2mLUOL lyiGhRUD7tBLLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEFQ TFdoaWhrblBVdktpY3JGbzJ5UUxiZ1o0Y3hMSFhZd2tQVUI2ZW5iM2IvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRB UExXaGloa25QVXZLaWNyRm8yeVFMYmdaNGN4TEhYWXdrUFVCNmVuYjNiLzAvRDAx RDJFQzA3NkJEQTYyRDQzOEI5NzI4ODY4NTE1MDNFRUQwNEIyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe3MMA0EAgACMAcDBQAoBE7oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYAjANBgkqhkiG9w0BAQsFAAOCAQEAjIX9vP8pu4wTIwx9 /OZqvLoyqsaNrnuz0TwVjiV9wH+kdSVIRXhVD29Rtgv+vx2iPIus9o0gDDtYYqLu P7hyTFARhRSJzkWpVmDpnK6sZFtLXWfLT/BYQ8NNRR2qVCaWfToXmg4HX3h+HzTY chavbGNsAV4ILjB1Z6Cjz1/DPY8zoQT0GEZQ6GZ2sVQQpPJLVj/RQDfs6matK+ws c9qazJi/RFWUw4gxZPpNz/PscIGr+oVKcHWcitqTX8aR/RAUGrOy7Vya22Y5zrnc rxx7n6/WbVRsFu6qvlO4uF94TGpZ5iCoH2PNTVnGEjcwiT2Sk9Md66ExR7rpmd2R lPh0oA== -----END CERTIFICATE-----Generated at Wed Oct 8 15:51:07 2025 by rpki-client