$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer File: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer (raw, json) Hash identifier: nnEG58InX3dlfGATFWWhWx8mXUKiPahh7Pn3WPYszJI= Subject key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11556ADE55F70071B3793D4040C4DB84638FE496 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft caRepository: rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 09:44:32 +0000 Certificate not after: Fri 06 Mar 2026 09:49:32 +0000 Subordinate resources: AS: 273706 IP: 2804:8b00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:55:6a:de:55:f7:00:71:b3:79:3d:40:40:c4:db:84:63:8f:e4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 09:44:32 2025 GMT Not After : Mar 6 09:49:32 2026 GMT Subject: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:21:f1:c6:b6:2f:85:32:07:e4:98:c9:d8: 2a:0c:6e:14:d2:2a:ca:dc:9d:2d:c2:04:e6:2c:f5: 51:76:dd:b0:ce:9f:d0:85:1c:ba:4b:82:a6:44:ef: f2:98:e9:cd:7c:85:3f:24:0c:66:54:d9:50:c6:e6: cc:2c:f2:b7:c8:82:7a:68:12:bd:08:71:9f:fb:88: 8c:73:f6:d3:24:34:e3:a4:2c:ea:94:d3:f9:71:bb: d1:9e:e5:50:d7:14:6d:5b:c4:fa:33:01:95:4e:aa: 78:37:8d:8b:be:f3:50:46:d4:07:b3:1d:bb:e0:47: fe:34:76:db:5e:d9:9b:24:89:e5:04:34:ab:da:f3: 63:ab:62:5a:9e:8f:2d:17:a9:f1:41:74:4f:47:3a: eb:82:8e:49:00:d4:70:69:ca:3f:28:45:86:26:45: f8:da:f8:e9:4a:ef:59:76:15:4b:dc:ad:ec:9d:2a: de:42:e6:87:a3:9d:3a:1b:45:34:73:93:b6:5e:6a: e4:69:6b:4d:24:22:35:68:e1:5d:a1:70:78:1b:36: 7f:05:db:cd:6f:f0:06:1f:46:e4:ee:63:2b:2c:3f: 4b:ec:51:a9:e5:8c:d8:fe:2c:04:02:1b:80:c0:20: f6:18:78:34:1e:92:f0:54:b1:b6:ba:78:bf:4f:be: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273706 Signature Algorithm: sha256WithRSAEncryption a8:0c:b3:06:4f:68:9a:38:b0:1e:a6:52:0f:0b:f9:ec:e5:c9: 17:2c:34:64:71:0c:a5:4a:8a:7a:40:c7:ed:77:43:5a:40:38: 6e:c7:03:95:a5:7e:c0:96:18:24:b1:4b:74:80:98:da:56:4d: 6d:d1:5f:60:61:e6:50:d5:67:20:09:9f:38:88:da:26:43:8b: 2a:2e:0c:7c:ef:a8:ae:5b:8d:df:2b:0f:72:36:4d:7c:c4:f4: 5a:ee:36:60:b7:3f:b7:fe:c3:3b:18:fa:37:42:57:7b:8e:b7: eb:35:67:56:4d:10:24:9a:f6:7f:14:c2:cf:13:b6:bf:b2:50: cf:dd:ff:c9:7a:43:8d:d2:7d:ce:7c:57:dc:81:99:7d:19:aa: 21:7e:eb:4e:27:df:34:9e:67:c3:1b:c8:ae:e0:f1:50:5f:70: f3:9b:e9:4e:ff:b9:41:01:f8:14:c2:bb:48:09:eb:8d:16:85: 8c:c2:93:31:d5:d9:48:41:8f:8c:00:cb:24:1d:56:db:ff:7e: ed:aa:6a:b4:d6:2f:5a:d7:c9:a4:d2:0f:08:a2:7f:f7:39:c3: b8:1b:fa:4b:b7:09:63:38:2d:5d:6a:f2:69:03:33:06:74:81: 6b:50:70:90:7e:da:96:0d:9a:37:8b:d6:47:ed:54:30:b6:cb: 38:c9:30:e6 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUEVVq3lX3AHGzeT1AQMTbhGOP5JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwOTQ0MzJaFw0yNjAzMDYwOTQ5MzJaMDMxMTAvBgNV BAMTKERGRDQyMEJFRUU4NjY1OEM2OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALyHxxrYvhTIH5JjJ2CoMbhTS KsrcnS3CBOYs9VF23bDOn9CFHLpLgqZE7/KY6c18hT8kDGZU2VDG5sws8rfIgnpo Er0IcZ/7iIxz9tMkNOOkLOqU0/lxu9Ge5VDXFG1bxPozAZVOqng3jYu+81BG1Aez HbvgR/40dtte2ZskieUENKva82OrYlqejy0XqfFBdE9HOuuCjkkA1HBpyj8oRYYm Rfja+OlK71l2FUvcreydKt5C5oejnTobRTRzk7ZeauRpa00kIjVo4V2hcHgbNn8F 281v8AYfRuTuYyssP0vsUanljNj+LAQCG4DAIPYYeDQekvBUsba6eL9PvkTrAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTf1CC+7oZljGm/ e/Alq96zX3I7PTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTR1 SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0 dUp2cEIyS0FyQnlmU1JjcktUNEpEV0gxZEpDTnpjbW1MdXBkdlNzdFd2LzEvREZE NDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1RjcyM0IzRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LSowDQYJKoZIhvcNAQELBQADggEBAKgMswZPaJo4sB6mUg8L+ezlyRcsNGRxDKVK inpAx+13Q1pAOG7HA5WlfsCWGCSxS3SAmNpWTW3RX2Bh5lDVZyAJnziI2iZDiyou DHzvqK5bjd8rD3I2TXzE9FruNmC3P7f+wzsY+jdCV3uOt+s1Z1ZNECSa9n8Uws8T tr+yUM/d/8l6Q43Sfc58V9yBmX0ZqiF+604n3zSeZ8MbyK7g8VBfcPOb6U7/uUEB +BTCu0gJ640WhYzCkzHV2UhBj4wAyyQdVtv/fu2qarTWL1rXyaTSDwiif/c5w7gb +ku3CWM4LV1q8mkDMwZ0gWtQcJB+2pYNmjeL1kftVDC2yzjJMOY= -----END CERTIFICATE-----Generated at Sun Nov 2 23:03:25 2025 by rpki-client