$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer File: D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer (raw, json) Hash identifier: BxQO6FxM8IerhoHQC+Tyi0nNEV3idXcIl5KGiHZxR7c= Subject key identifier: D2:A9:51:8C:5D:33:31:3C:38:2F:48:AF:C0:51:DC:6C:FC:87:7E:BD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 38CFF31AEADCB7FD70561933D61A216BACEBADBE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft caRepository: rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 16:27:25 +0000 Certificate not after: Thu 17 Sep 2026 16:32:25 +0000 Subordinate resources: AS: 268797 IP: 45.172.244.0/22 IP: 2804:5acc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 16:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cf:f3:1a:ea:dc:b7:fd:70:56:19:33:d6:1a:21:6b:ac:eb:ad:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 16:27:25 2025 GMT Not After : Sep 17 16:32:25 2026 GMT Subject: CN=D2A9518C5D33313C382F48AFC051DC6CFC877EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:0e:0e:0f:c1:a3:4c:be:f4:bc:04:82:9c: a4:af:91:db:fc:2f:1f:2b:a1:d2:b2:f3:34:4d:21: fa:4e:bd:67:71:ca:33:03:57:b2:0f:52:84:92:da: 02:2e:ae:01:3e:7f:c9:a6:9b:44:17:13:26:64:85: be:f5:8b:52:53:12:21:ed:70:5b:98:3f:1e:f1:9d: 36:a4:c0:7a:c7:a4:b3:26:70:fe:e8:be:25:1e:23: b4:bd:fb:16:b1:d8:43:6b:5a:94:03:66:aa:79:02: 8c:35:3c:88:e9:2a:49:d9:6d:c0:df:fa:2a:dd:c6: e1:c3:c1:cf:7f:3e:06:1f:c4:de:5e:d9:76:52:88: 31:ed:a8:37:51:0e:04:34:f1:a1:fc:49:d9:2a:a7: 64:4a:18:e3:7a:b0:97:56:f0:a0:6b:e8:20:3f:33: 91:81:d5:69:aa:83:8a:79:d4:29:53:1a:ce:14:c4: 63:0f:54:63:77:63:3d:b3:ab:7a:f2:a5:3b:5f:67: cb:ae:47:09:81:03:34:2f:1b:37:bd:b1:24:95:24: 6d:b8:23:11:51:2d:d3:91:31:ca:37:6a:9c:d9:51: 29:93:4c:eb:36:74:42:60:cb:9f:3a:1a:00:09:5d: 86:a5:97:5d:f9:61:67:52:08:cc:95:f3:53:fe:60: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:A9:51:8C:5D:33:31:3C:38:2F:48:AF:C0:51:DC:6C:FC:87:7E:BD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.244.0/22 IPv6: 2804:5acc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268797 Signature Algorithm: sha256WithRSAEncryption 51:8f:e1:54:1f:ba:57:75:0d:82:9d:ad:26:60:5b:a3:52:fe: fc:c6:47:d7:43:97:cc:ff:3f:7c:89:dc:a1:5d:c1:e2:3f:6a: 38:09:76:bc:0c:92:5d:d5:af:2b:77:c5:91:d8:f5:ea:7e:ab: d6:cc:57:ff:83:e8:ca:12:5a:eb:25:cc:ec:9a:1a:d7:c2:c7: d4:bb:b7:14:e4:ba:6e:26:d7:bb:92:b7:ec:6e:c6:4a:cc:e1: 14:0b:04:b7:a2:26:ec:2b:1d:c8:a7:73:48:df:35:8a:07:e4: 67:d2:41:cd:b3:eb:b8:81:ea:e5:d4:7c:cd:de:2f:25:ef:13: f4:e9:7d:0d:2a:8a:58:ec:e7:81:1c:ad:a3:d6:20:03:2a:91: 84:9b:fc:bc:53:cc:5c:70:67:fe:3d:4b:8d:63:f4:35:1c:18: 60:f9:6b:9c:1b:35:d7:b5:21:ac:8c:23:65:c1:3d:32:9a:f0: a4:58:57:36:c3:3c:10:c8:32:1f:74:bf:a2:89:f5:b5:06:b6: cf:30:21:a4:d6:28:47:b5:82:e1:19:de:c2:e2:a5:61:f9:d5: 97:ba:c5:5e:2c:51:0d:b7:37:88:bc:77:38:d0:b0:39:bd:b4: 0f:c8:57:0c:a6:b0:15:e4:d8:d5:73:dc:f3:15:80:09:e6:40: 27:c6:31:6b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOM/zGurct/1wVhkz1hoha6zrrb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgxNjI3MjVaFw0yNjA5MTcxNjMyMjVaMDMxMTAvBgNV BAMTKEQyQTk1MThDNUQzMzMxM0MzODJGNDhBRkMwNTFEQzZDRkM4NzdFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHA4OD8GjTL70vASCnKSvkdv8 Lx8rodKy8zRNIfpOvWdxyjMDV7IPUoSS2gIurgE+f8mmm0QXEyZkhb71i1JTEiHt cFuYPx7xnTakwHrHpLMmcP7oviUeI7S9+xax2ENrWpQDZqp5Aow1PIjpKknZbcDf +irdxuHDwc9/PgYfxN5e2XZSiDHtqDdRDgQ08aH8Sdkqp2RKGON6sJdW8KBr6CA/ M5GB1Wmqg4p51ClTGs4UxGMPVGN3Yz2zq3rypTtfZ8uuRwmBAzQvGze9sSSVJG24 IxFRLdORMco3apzZUSmTTOs2dEJgy586GgAJXYall135YWdSCMyV81P+YAs5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSqVGMXTMxPDgv SK/AUdxs/Id+vTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODRZ eDNHckFoN1g1YjdwWFpKUlBQbThMZVRDaHE3cldIOHpmZ2F6NzFNZmUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg0 WXgzR3JBaDdYNWI3cFhaSlJQUG04TGVUQ2hxN3JXSDh6ZmdhejcxTWZlLzAvRDJB OTUxOEM1RDMzMzEzQzM4MkY0OEFGQzA1MURDNkNGQzg3N0VCRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaz0MA0EAgACMAcDBQAoBFrMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZ/TANBgkqhkiG9w0BAQsFAAOCAQEAUY/hVB+6V3UNgp2t JmBbo1L+/MZH10OXzP8/fIncoV3B4j9qOAl2vAySXdWvK3fFkdj16n6r1sxX/4Po yhJa6yXM7Joa18LH1Lu3FOS6bibXu5K37G7GSszhFAsEt6Im7CsdyKdzSN81igfk Z9JBzbPruIHq5dR8zd4vJe8T9Ol9DSqKWOzngRyto9YgAyqRhJv8vFPMXHBn/j1L jWP0NRwYYPlrnBs117UhrIwjZcE9MprwpFhXNsM8EMgyH3S/oon1tQa2zzAhpNYo R7WC4RnewuKlYfnVl7rFXixRDbc3iLx3ONCwOb20D8hXDKawFeTY1XPc8xWACeZA J8Yxaw== -----END CERTIFICATE-----Generated at Fri Sep 19 19:52:08 2025 by rpki-client