$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer File: DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer (raw, json) Hash identifier: Rk9ltPgOD6oDp2oyao8lT8/zC/Zhpjxm7ZzMUeaZznU= Subject key identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 229F46B900E1FED046D140E363F01EFA427E4207 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft caRepository: rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 17 Sep 2025 20:24:22 +0000 Certificate not after: Wed 16 Sep 2026 20:29:22 +0000 Subordinate resources: AS: 264574 IP: 138.36.108.0/22 IP: 2804:21cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9f:46:b9:00:e1:fe:d0:46:d1:40:e3:63:f0:1e:fa:42:7e:42:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 17 20:24:22 2025 GMT Not After : Sep 16 20:29:22 2026 GMT Subject: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:8f:63:9c:ef:8d:06:d9:3c:1f:f2:85:5e: f7:05:13:76:97:f9:79:36:01:c0:a8:ae:6a:c1:a8: be:5f:79:38:92:d8:60:b7:76:a5:be:fc:e8:d6:9d: d3:9a:07:a1:4f:90:4d:ad:7c:3f:71:a8:b5:de:20: a7:11:90:8d:c9:53:08:ba:4a:d1:8f:da:49:d8:2e: a6:82:dd:b2:c5:f5:a7:9b:8d:c8:a9:8a:15:24:1b: 2c:7a:cf:0f:5d:68:e0:54:35:4f:8e:ca:ec:de:d1: 68:d8:f7:64:ae:28:32:19:33:bb:9a:51:91:c9:93: b6:d6:00:c5:f4:ad:c3:d0:c0:a9:3a:92:32:56:b3: d9:bb:b2:e6:d7:04:b6:e7:ff:0b:e1:08:3c:f0:78: 05:fc:80:2a:be:ec:97:9f:b1:f8:d5:d6:8c:60:fd: 41:a2:65:d1:bd:80:2e:07:6e:6a:3c:6c:5c:7e:43: 4b:d7:8a:b7:90:f3:13:00:75:67:55:34:04:ce:a6: 1c:e3:6c:a4:f5:27:bd:c6:a2:ed:3b:8f:b9:b2:8d: db:90:28:8f:4a:53:59:da:4b:ab:65:8a:df:d7:6c: 73:ef:9c:7c:3e:00:64:cd:3f:f4:48:62:b3:8c:1e: fb:14:73:20:a0:94:f9:17:67:f9:3b:4f:0d:50:34: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.108.0/22 IPv6: 2804:21cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264574 Signature Algorithm: sha256WithRSAEncryption 0a:b6:9f:12:9a:50:08:a9:19:dd:18:19:fc:99:c5:d6:4d:f2: 58:32:4e:f9:a6:77:e2:07:83:2c:06:75:13:cc:45:64:f6:e1: e9:ba:87:1a:cf:f2:a4:26:49:76:d2:be:7f:86:dd:ab:23:c4: 3a:2e:23:85:c7:11:a4:3b:2c:e7:18:6e:e9:cb:4d:f4:8b:55: ef:94:e0:bf:91:34:9e:82:21:08:f6:42:f2:f6:d4:7b:85:90: a1:09:73:13:78:28:10:a5:c8:7f:de:83:ed:7d:c9:65:e7:ad: 05:a1:a3:38:f7:d3:61:b1:57:b5:04:40:41:15:a8:9a:bf:d5: 1e:b3:77:86:bd:22:06:a1:21:ac:aa:b1:01:b9:f2:4b:e1:32: b1:77:b4:4c:61:93:d4:6e:5b:33:8b:c2:6d:04:7d:4d:1f:86: cf:8a:9f:fc:21:eb:15:35:9b:ce:a4:ec:98:c3:e6:01:fc:ff: db:b9:80:bf:16:91:b5:57:b6:ed:6a:d2:02:21:55:7f:84:94: 2c:95:41:0a:88:df:89:59:23:76:89:2d:03:da:b3:62:91:e0: 7d:d4:2f:7c:4b:30:bb:cd:f4:16:79:be:71:15:b8:e9:78:74: 16:5d:21:c7:7d:56:1d:56:23:7d:58:27:ec:34:f7:5e:a8:bf: 71:57:1d:ce -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIp9GuQDh/tBG0UDjY/Ae+kJ+QgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTcyMDI0MjJaFw0yNjA5MTYyMDI5MjJaMDMxMTAvBgNV BAMTKERFRTk3RUE4MjJDNUMxNDczQjA1NzU5NjE3RkJDREI1NUJCNkU3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgo9jnO+NBtk8H/KFXvcFE3aX +Xk2AcCormrBqL5feTiS2GC3dqW+/OjWndOaB6FPkE2tfD9xqLXeIKcRkI3JUwi6 StGP2knYLqaC3bLF9aebjcipihUkGyx6zw9daOBUNU+Oyuze0WjY92SuKDIZM7ua UZHJk7bWAMX0rcPQwKk6kjJWs9m7subXBLbn/wvhCDzweAX8gCq+7JefsfjV1oxg /UGiZdG9gC4Hbmo8bFx+Q0vXireQ8xMAdWdVNATOphzjbKT1J73Gou07j7myjduQ KI9KU1naS6tlit/XbHPvnHw+AGTNP/RIYrOMHvsUcyCglPkXZ/k7Tw1QNJITAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTe6X6oIsXBRzsF dZYX+821W7bnrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlVF eUtIY0pVNjVHYzJaRUZjTTRQbWk5QWN3YlhWcVJna0V2cUYzNUZMaDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZV RXlLSGNKVTY1R2MyWkVGY000UG1pOUFjd2JYVnFSZ2tFdnFGMzVGTGg0LzAvREVF OTdFQTgyMkM1QzE0NzNCMDU3NTk2MTdGQkNEQjU1QkI2RTdBRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCiiRsMA0EAgACMAcDBQAoBCHMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQJfjANBgkqhkiG9w0BAQsFAAOCAQEACrafEppQCKkZ3RgZ /JnF1k3yWDJO+aZ34geDLAZ1E8xFZPbh6bqHGs/ypCZJdtK+f4bdqyPEOi4jhccR pDss5xhu6ctN9ItV75Tgv5E0noIhCPZC8vbUe4WQoQlzE3goEKXIf96D7X3JZeet BaGjOPfTYbFXtQRAQRWomr/VHrN3hr0iBqEhrKqxAbnyS+EysXe0TGGT1G5bM4vC bQR9TR+Gz4qf/CHrFTWbzqTsmMPmAfz/27mAvxaRtVe27WrSAiFVf4SULJVBCojf iVkjdoktA9qzYpHgfdQvfEswu830Fnm+cRW46Xh0Fl0hx31WHVYjfVgn7DT3Xqi/ cVcdzg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:29:50 2025 by rpki-client