
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
File: DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer (raw, json)
Hash identifier: Di7m/JIMjkg4uoqr2MC846xumhPKYBy1WP5ivY9V8ig=
Subject key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6B7D0D0D9B8C7C169575DAD18A116E871519F947
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
caRepository: rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 17 May 2025 02:30:03 +0000
Certificate not after: Sat 16 May 2026 02:35:03 +0000
Subordinate resources: AS: 265038
IP: 170.150.200.0/22
IP: 2804:31cc::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7d:0d:0d:9b:8c:7c:16:95:75:da:d1:8a:11:6e:87:15:19:f9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 17 02:30:03 2025 GMT
Not After : May 16 02:35:03 2026 GMT
Subject: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:97:fe:ff:fd:3d:b8:7d:fa:d7:9d:6c:09:
0c:77:ba:56:4f:10:54:35:e6:3b:ae:f4:1b:32:22:
6a:06:f9:cc:72:3f:19:cb:a3:6e:ce:9b:2d:e2:e9:
99:29:56:1b:ac:78:14:1a:d7:c7:24:67:5a:9e:ec:
cf:29:7b:c4:ca:7a:74:12:15:e5:65:14:56:5f:26:
21:87:c2:d1:88:94:fd:32:48:53:ca:b2:e6:83:4f:
3a:dc:03:e0:26:5a:8e:e5:52:e9:9a:91:e7:27:84:
1d:5e:12:ff:80:9f:5d:6a:8c:3d:f9:c1:6f:3c:7a:
b5:bc:81:1c:5e:24:74:28:e9:9c:ef:94:99:e3:53:
24:85:f2:8a:e9:b3:b3:19:12:d5:36:78:6f:98:e6:
87:c8:e4:e3:60:40:0b:34:d6:31:68:f4:0b:bf:4f:
e0:5f:98:31:a4:db:66:07:10:35:55:cf:ed:c6:ad:
9c:5f:c5:ed:6c:60:d7:02:a8:50:d2:95:53:ee:6f:
04:31:a3:11:44:bc:f6:d0:15:9f:9b:6f:29:7d:20:
f9:5c:69:3e:c2:8a:f0:05:84:e0:07:da:60:02:9e:
6f:fa:aa:9f:21:12:96:ad:e1:f4:59:2f:d9:6e:e3:
96:b8:60:d5:4d:f3:6b:08:52:9c:aa:23:68:d3:b4:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.200.0/22
IPv6:
2804:31cc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265038
Signature Algorithm: sha256WithRSAEncryption
31:e2:80:ac:8f:bc:c2:04:1b:69:df:56:4b:82:f5:9a:94:90:
2f:42:35:d5:d6:3a:63:8c:3b:c8:00:47:fe:8b:fd:c7:04:92:
ff:7c:31:e4:f7:9c:e2:4f:6a:d9:7a:6e:7b:86:0f:4c:b7:81:
9b:d3:44:c8:c0:ae:d7:36:e5:7b:8a:16:2a:c7:51:c8:43:a2:
83:61:4b:79:a9:75:be:c6:6d:a4:8e:6d:cb:82:89:a9:18:d5:
d3:99:01:66:24:30:36:15:4c:bc:f9:fe:4d:f1:a0:85:28:92:
98:8d:a8:9b:18:74:bb:f0:c6:8e:88:a6:b9:d7:f1:d2:16:d8:
46:2c:7a:2e:d1:0e:26:63:e7:5a:bf:40:88:ca:d7:71:c0:5b:
33:a1:c4:5d:bf:c8:8a:80:e9:70:2f:a0:86:20:35:b8:e7:18:
62:68:3f:bb:0b:71:87:b0:42:4b:68:5f:f3:d8:6c:7c:b1:64:
06:d4:b4:66:4b:c0:44:25:c2:ac:c9:f2:4e:4d:77:1a:65:6c:
d3:ac:ca:af:d5:83:a4:59:4c:53:67:cb:50:93:e1:64:a7:87:
8e:da:ea:df:cd:14:68:fd:c7:9d:03:b4:be:23:b0:90:ae:7a:
e6:3f:16:dd:87:ed:56:d1:ce:89:b2:1c:1c:b6:1a:78:bd:1f:
13:2b:a1:c3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUa30NDZuMfBaVddrRihFuhxUZ+UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA1MTcwMjMwMDNaFw0yNjA1MTYwMjM1MDNaMDMxMTAvBgNV
BAMTKERERDJGRUNFMUE0OUYxNTQ2QzM1NUFGMDhCNEEzMjAyQUM2QjRDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Gpf+//09uH36151sCQx3ulZP
EFQ15juu9BsyImoG+cxyPxnLo27Omy3i6ZkpVhuseBQa18ckZ1qe7M8pe8TKenQS
FeVlFFZfJiGHwtGIlP0ySFPKsuaDTzrcA+AmWo7lUumakecnhB1eEv+An11qjD35
wW88erW8gRxeJHQo6ZzvlJnjUySF8orps7MZEtU2eG+Y5ofI5ONgQAs01jFo9Au/
T+BfmDGk22YHEDVVz+3GrZxfxe1sYNcCqFDSlVPubwQxoxFEvPbQFZ+bbyl9IPlc
aT7CivAFhOAH2mACnm/6qp8hEpat4fRZL9lu45a4YNVN82sIUpyqI2jTtFbhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd0v7OGknxVGw1
WvCLSjICrGtMxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmpn
ckZROU5XQjc2dGduS2F3WVVqNVAyQTZHc3ZoWnA5bWtyeDIzU1J1cEEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jq
Z3JGUTlOV0I3NnRnbkthd1lVajVQMkE2R3N2aFpwOW1rcngyM1NSdXBBLzAvRERE
MkZFQ0UxQTQ5RjE1NDZDMzU1QUYwOEI0QTMyMDJBQzZCNENDNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqpbIMA0EAgACMAcDBQAoBDHMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLTjANBgkqhkiG9w0BAQsFAAOCAQEAMeKArI+8wgQbad9W
S4L1mpSQL0I11dY6Y4w7yABH/ov9xwSS/3wx5Pec4k9q2Xpue4YPTLeBm9NEyMCu
1zble4oWKsdRyEOig2FLeal1vsZtpI5ty4KJqRjV05kBZiQwNhVMvPn+TfGghSiS
mI2omxh0u/DGjoimudfx0hbYRix6LtEOJmPnWr9AiMrXccBbM6HEXb/IioDpcC+g
hiA1uOcYYmg/uwtxh7BCS2hf89hsfLFkBtS0ZkvARCXCrMnyTk13GmVs06zKr9WD
pFlMU2fLUJPhZKeHjtrq380UaP3HnQO0viOwkK565j8W3YftVtHOibIcHLYaeL0f
Eyuhww==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:25:08 2025 by rpki-client