$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer File: DD880B71129737798123EE9EDC1423C3E8280892.cer (raw, json) Hash identifier: K52+VqMFNYyGlsdp0ToZj48JSXeFA3K6KHg46jSCN2M= Subject key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 775A647ABEDBC433A919F5000F6F02E508B19D10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft caRepository: rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:26 +0000 Certificate not after: Wed 04 Mar 2026 18:40:26 +0000 Subordinate resources: AS: 268881 IP: 45.175.32.0/22 IP: 2804:5bfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5a:64:7a:be:db:c4:33:a9:19:f5:00:0f:6f:02:e5:08:b1:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:26 2025 GMT Not After : Mar 4 18:40:26 2026 GMT Subject: CN=DD880B71129737798123EE9EDC1423C3E8280892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:c9:ab:1e:95:c7:ee:f8:2a:45:f2:28:56: 78:e8:d6:a6:b8:16:db:0e:84:6c:81:8a:ef:ad:f4: f1:a9:05:51:5a:3d:e2:c4:b7:88:9e:45:23:9c:12: 25:ca:01:2a:f9:6a:4c:7b:9c:5d:d2:ff:8b:87:44: 55:3f:cd:04:34:e7:fa:2c:5e:52:bf:16:8d:e2:3a: 57:c9:65:b6:4c:f0:33:c8:9d:49:42:c5:74:63:d3: b8:ac:e7:67:a3:9b:c0:e1:89:1b:6c:10:6e:00:75: f3:00:d8:d6:26:56:24:09:1e:32:ce:4f:8e:e1:b1: 05:77:cc:56:5c:95:d5:a7:62:d0:11:f8:5b:21:ea: ff:ba:45:06:ed:04:a1:1b:dd:bb:08:8e:4e:ca:7d: 17:5f:5a:08:70:29:7e:f5:12:8a:f4:b8:a4:10:a9: 3e:6a:e4:9a:26:7f:9c:ff:9a:27:5c:f6:5a:a5:6c: ce:ba:16:4c:83:13:18:d3:ac:a2:01:a1:f6:b3:95: c4:4f:a4:5e:db:37:26:f7:09:a8:56:35:14:d9:88: be:c4:ea:33:a1:f9:30:97:e3:c1:86:50:f4:c5:72: 08:09:8c:73:95:e3:49:e5:75:f9:66:39:c3:4c:06: 80:6f:dd:d9:9a:90:5e:bf:04:02:cd:20:59:c1:94: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.32.0/22 IPv6: 2804:5bfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268881 Signature Algorithm: sha256WithRSAEncryption 57:d0:0a:85:01:b3:14:11:91:7f:b9:3c:18:94:e8:72:8d:35: 8b:38:5c:93:a9:80:75:62:3f:56:4d:47:61:d9:d7:10:38:00: 76:41:a4:7e:3d:6c:b0:b7:61:c3:86:98:90:c0:52:44:39:0b: 15:d4:ec:c9:be:76:6f:d7:cf:fb:8d:6b:07:b7:30:5f:dd:e1: f8:23:92:33:b7:b1:bb:62:df:38:d1:3d:da:eb:f1:8a:48:4a: 20:a6:f7:67:44:d9:4a:68:53:f8:79:73:65:ea:70:90:58:4e: 15:df:b6:e3:f8:3c:22:a1:c4:36:81:0c:bc:f8:6c:29:02:c7: af:72:3e:34:64:c3:87:6c:00:b0:bc:b2:d9:c9:52:8e:76:aa: 8e:08:61:b2:1c:a8:68:5c:54:d9:62:de:2e:0d:73:5c:d3:e8: 6f:88:dc:61:49:28:52:39:1b:73:b9:f1:c6:e3:ef:89:5a:d4: 70:d7:6a:45:c3:37:9e:53:1e:ba:ff:d5:72:a0:da:c9:19:00: dc:2e:63:81:ee:6a:70:bf:bf:0b:11:6b:14:47:b6:fe:79:f5: ee:d3:71:40:5c:2d:fc:c6:bd:0b:5f:c9:2a:13:21:7c:e7:d6: 00:71:bc:68:93:6f:df:7b:a2:a3:37:68:a8:cd:26:4d:93:25: 79:00:90:b7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUd1pker7bxDOpGfUAD28C5QixnRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MjZaFw0yNjAzMDQxODQwMjZaMDMxMTAvBgNV BAMTKEREODgwQjcxMTI5NzM3Nzk4MTIzRUU5RURDMTQyM0MzRTgyODA4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DMmrHpXH7vgqRfIoVnjo1qa4 FtsOhGyBiu+t9PGpBVFaPeLEt4ieRSOcEiXKASr5akx7nF3S/4uHRFU/zQQ05/os XlK/Fo3iOlfJZbZM8DPInUlCxXRj07is52ejm8DhiRtsEG4AdfMA2NYmViQJHjLO T47hsQV3zFZcldWnYtAR+Fsh6v+6RQbtBKEb3bsIjk7KfRdfWghwKX71Eor0uKQQ qT5q5Jomf5z/midc9lqlbM66FkyDExjTrKIBofazlcRPpF7bNyb3CahWNRTZiL7E 6jOh+TCX48GGUPTFcggJjHOV40nldflmOcNMBoBv3dmakF6/BALNIFnBlAGjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdiAtxEpc3eYEj 7p7cFCPD6CgIkjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXhq aHJDNFpydWl5S05LdEwxYnBmRDh1RnRmemV2Y2Z3RExNckxUaURuY0wvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4 amhyQzRacnVpeUtOS3RMMWJwZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4 ODBCNzExMjk3Mzc3OTgxMjNFRTlFREMxNDIzQzNFODI4MDg5Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa8gMA0EAgACMAcDBQAoBFv8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaUTANBgkqhkiG9w0BAQsFAAOCAQEAV9AKhQGzFBGRf7k8 GJToco01izhck6mAdWI/Vk1HYdnXEDgAdkGkfj1ssLdhw4aYkMBSRDkLFdTsyb52 b9fP+41rB7cwX93h+COSM7exu2LfONE92uvxikhKIKb3Z0TZSmhT+HlzZepwkFhO Fd+24/g8IqHENoEMvPhsKQLHr3I+NGTDh2wAsLyy2clSjnaqjghhshyoaFxU2WLe Lg1zXNPob4jcYUkoUjkbc7nxxuPviVrUcNdqRcM3nlMeuv/VcqDayRkA3C5jge5q cL+/CxFrFEe2/nn17tNxQFwt/Ma9C1/JKhMhfOfWAHG8aJNv33uiozdoqM0mTZMl eQCQtw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:34:44 2025 by rpki-client