$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer File: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer (raw, json) Hash identifier: Kt0Qi8ICaotavKx3JOT3GpkFVYS+29gHDuoBSDl1Jm4= Subject key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7700E42FD568641F65540FBB0098D47A3FE3E4A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft caRepository: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 09 Sep 2025 11:18:43 +0000 Certificate not after: Tue 08 Sep 2026 11:23:43 +0000 Subordinate resources: AS: 52612 IP: 170.79.248.0/22 IP: 177.124.20.0/22 IP: 2804:22fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 07:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:00:e4:2f:d5:68:64:1f:65:54:0f:bb:00:98:d4:7a:3f:e3:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 11:18:43 2025 GMT Not After : Sep 8 11:23:43 2026 GMT Subject: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:d4:34:16:09:a4:1b:3e:ec:0a:93:c9:29: bd:12:96:27:39:a7:dd:f2:93:e0:d2:fe:cc:ea:8a: 23:37:6a:6c:8b:37:52:e8:56:0d:44:80:fb:d5:cb: 0e:c0:a2:21:04:2e:03:14:cc:60:32:7f:b9:17:0c: 7c:aa:88:11:90:01:d8:dc:64:87:03:cd:e9:a1:e2: 8c:50:09:f0:e5:3c:38:70:8e:bb:9e:12:34:ad:3d: 98:9a:e6:f8:58:81:d1:b0:48:f4:88:a5:49:42:c6: 1d:f9:af:21:cf:ad:62:8d:aa:d1:89:f6:48:21:77: 11:f9:d5:ea:d9:69:fb:d4:28:d4:de:90:e4:bb:f2: 4c:5e:a1:82:65:5f:03:5c:c5:58:f3:29:5e:f1:19: 07:29:f9:0a:d4:b2:92:ac:54:b7:30:9d:2c:f2:93: cd:bf:53:3d:b5:ad:78:37:90:88:6c:68:81:3b:b0: e2:8a:31:db:9b:2c:69:0c:b2:f0:73:7f:68:5a:1f: d7:3e:89:c2:4b:16:6d:6d:82:17:02:b1:8b:51:bd: 67:d2:d9:38:59:5d:39:08:05:7b:8d:62:f5:af:51: 07:f7:8c:c8:5a:f3:53:a5:86:c7:aa:5b:7b:9d:59: e9:bc:37:0d:eb:32:bd:d7:d3:31:e4:e7:81:c2:d5: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.248.0/22 177.124.20.0/22 IPv6: 2804:22fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52612 Signature Algorithm: sha256WithRSAEncryption 86:19:8a:d1:d2:f8:cb:20:dc:dc:cd:af:52:b2:63:67:8b:c3: 77:bb:4a:cb:3a:52:97:86:d3:cc:a9:d5:d0:3f:7d:74:64:6c: 36:3f:43:dc:cd:2d:36:30:3a:cb:3c:4d:95:ad:41:e9:6b:a5: 12:c6:65:80:d7:b8:c9:8d:21:65:12:6c:89:a1:c7:4b:f3:7c: d5:8e:bb:df:38:11:42:b1:c0:90:20:0f:fa:fe:3a:a6:3d:8b: 1e:c0:50:6b:92:8b:c3:4e:b5:c6:e1:68:c6:4b:59:b1:c3:59: 17:58:90:f8:14:66:4e:29:08:99:01:98:41:18:9d:d5:05:c1: be:5a:81:a3:88:b0:3c:66:b4:56:4b:d1:d4:80:7e:a8:6c:b4: 5b:a8:3c:18:9e:dc:65:0f:9e:17:03:54:3b:c1:65:c3:b1:18: 6c:15:7d:c2:42:b2:71:a3:72:9c:ed:94:fb:1c:44:dc:9a:44: 5e:3f:43:44:52:42:0f:f6:11:a3:7f:3a:d4:81:57:a5:ad:5a: 93:e0:42:7c:ef:eb:13:6f:d4:82:df:38:a5:4b:40:7a:a4:5f: 11:70:f6:71:9c:69:9c:2b:af:ab:65:23:68:11:5b:d9:bd:87: ef:b1:41:af:3a:7e:47:9f:cf:53:fe:69:80:19:83:1c:63:42: ab:6a:2d:a6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdwDkL9VoZB9lVA+7AJjUej/j5KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDkxMTE4NDNaFw0yNjA5MDgxMTIzNDNaMDMxMTAvBgNV BAMTKEQ2MzM5Qzg2REUwQzY1RjQyOTlFMEI5MjVFREQ4OEVBQjg4NkY3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPNQ0FgmkGz7sCpPJKb0Slic5 p93yk+DS/szqiiM3amyLN1LoVg1EgPvVyw7AoiEELgMUzGAyf7kXDHyqiBGQAdjc ZIcDzemh4oxQCfDlPDhwjrueEjStPZia5vhYgdGwSPSIpUlCxh35ryHPrWKNqtGJ 9kghdxH51erZafvUKNTekOS78kxeoYJlXwNcxVjzKV7xGQcp+QrUspKsVLcwnSzy k82/Uz21rXg3kIhsaIE7sOKKMdubLGkMsvBzf2haH9c+icJLFm1tghcCsYtRvWfS 2ThZXTkIBXuNYvWvUQf3jMha81OlhseqW3udWem8Nw3rMr3X0zHk54HC1Ro1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWM5yG3gxl9Cme C5Je3YjquIb3LTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFF5 cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZvRWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hR eXJhSm5QRUVRV21qRkxhNGRCcFE5UTU4Mkx0N0prejJMNzNhM2p2b0VlLzAvRDYz MzlDODZERTBDNjVGNDI5OUUwQjkyNUVERDg4RUFCODg2RjcyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk/4AwQCsXwUMA0EAgACMAcDBQAoBCL8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNhDANBgkqhkiG9w0BAQsFAAOCAQEAhhmK0dL4 yyDc3M2vUrJjZ4vDd7tKyzpSl4bTzKnV0D99dGRsNj9D3M0tNjA6yzxNla1B6Wul EsZlgNe4yY0hZRJsiaHHS/N81Y673zgRQrHAkCAP+v46pj2LHsBQa5KLw061xuFo xktZscNZF1iQ+BRmTikImQGYQRid1QXBvlqBo4iwPGa0VkvR1IB+qGy0W6g8GJ7c ZQ+eFwNUO8Flw7EYbBV9wkKycaNynO2U+xxE3JpEXj9DRFJCD/YRo3861IFXpa1a k+BCfO/rE2/Ugt84pUtAeqRfEXD2cZxpnCuvq2UjaBFb2b2H77FBrzp+R5/PU/5p gBmDHGNCq2otpg== -----END CERTIFICATE-----Generated at Thu Sep 18 07:55:46 2025 by rpki-client