$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer File: C0DD64892A0C121799367350C68DE3D2965E859B.cer (raw, json) Hash identifier: hiK0tukgagIX0Z3pf5w7rpfe4AhGddu+e5WrnGqLs0w= Subject key identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1799CA4C4B7713AB2F18F1332D0396AA581AEEFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft caRepository: rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 20 Sep 2025 22:43:17 +0000 Certificate not after: Sat 19 Sep 2026 22:48:17 +0000 Subordinate resources: AS: 272730 IP: 170.80.60.0/22 IP: 2804:87c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:99:ca:4c:4b:77:13:ab:2f:18:f1:33:2d:03:96:aa:58:1a:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 20 22:43:17 2025 GMT Not After : Sep 19 22:48:17 2026 GMT Subject: CN=C0DD64892A0C121799367350C68DE3D2965E859B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:5d:25:f5:3a:78:38:b8:54:db:26:2e:ec: 62:ec:50:c5:8e:21:61:00:54:83:b5:42:3e:2d:c2: 2a:65:af:7f:9a:c9:4b:0a:e0:9b:87:67:bc:6c:d9: 30:e3:70:24:41:5d:16:5c:a8:03:e3:50:ae:af:fd: 1b:cf:f7:9b:31:78:6f:7f:df:2f:7b:e4:27:11:ff: 6e:b7:62:f0:8e:f2:a7:25:dc:a8:b2:a7:59:b1:ac: 1a:aa:02:91:e7:fd:86:41:96:37:86:8c:e8:9c:00: 29:03:2f:62:a7:0e:ea:15:ce:0f:b9:f3:a9:da:fa: 98:05:5a:aa:8b:d7:b8:a3:85:a1:8d:73:93:9b:24: 5c:5a:a8:53:36:03:29:09:41:0d:96:d6:36:ee:d2: 79:53:ef:5c:1b:1d:38:0b:e9:cf:10:f7:e1:6f:e7: 67:9f:eb:48:4c:f4:12:16:08:f4:b2:82:da:a2:20: b2:05:ee:c2:64:3d:6b:b3:8a:d6:f8:6d:40:14:f9: 4b:ec:3c:0a:0c:0e:ed:9d:9b:06:7b:61:fb:a1:fc: 0d:4c:ca:41:76:f2:a1:e4:2c:85:a9:23:3e:50:22: 6f:d0:19:e1:0f:1b:9c:84:8a:dc:fa:b1:05:74:07: 6d:be:6a:12:ae:6b:25:97:78:f6:67:0a:18:6e:60: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.60.0/22 IPv6: 2804:87c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272730 Signature Algorithm: sha256WithRSAEncryption da:d0:ad:34:9d:bb:5d:cf:d7:d6:ab:aa:19:0a:7a:6c:16:c4: b2:ec:f6:3f:86:cc:e5:3b:d5:1c:ec:99:2e:22:3b:f7:a4:a6: 59:74:35:49:94:ea:58:ed:d1:94:c4:48:64:23:7f:aa:25:0a: 2c:86:01:87:16:38:68:53:21:93:b7:e9:b1:7c:f7:1b:69:79: b2:b2:b2:fb:ff:ff:2d:ab:af:82:86:db:2b:c5:a6:93:bf:cd: 11:62:00:be:51:33:f5:b2:f5:f0:91:84:e5:a8:93:5f:16:4d: ef:5a:9f:83:eb:ff:01:ba:57:bc:5f:6d:fc:57:d8:3f:19:27: c4:95:c0:d4:37:1e:67:db:c4:7a:cb:1b:fe:d6:44:78:f5:9b: 85:b7:8b:2f:04:30:01:d3:d2:fb:10:19:b5:5f:1b:35:9f:54: f9:3b:1a:7b:1d:c6:d1:0c:03:60:30:e2:32:3a:86:c3:c4:d6: bc:0d:e6:54:88:26:1b:9c:68:81:d6:3d:19:0f:78:c4:64:43: e4:71:6a:d3:82:4a:a4:ae:33:b7:16:25:ab:64:f8:f3:9c:1c: c6:c8:f2:b2:04:24:59:68:0c:4f:97:ee:19:2e:f8:52:7c:c8: 04:9d:53:07:e7:01:a6:12:ad:11:07:8e:72:fd:03:ff:91:77: 4d:ec:8a:8a -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUF5nKTEt3E6svGPEzLQOWqlga7v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjAyMjQzMTdaFw0yNjA5MTkyMjQ4MTdaMDMxMTAvBgNV BAMTKEMwREQ2NDg5MkEwQzEyMTc5OTM2NzM1MEM2OERFM0QyOTY1RTg1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsV0l9Tp4OLhU2yYu7GLsUMWO IWEAVIO1Qj4twiplr3+ayUsK4JuHZ7xs2TDjcCRBXRZcqAPjUK6v/RvP95sxeG9/ 3y975CcR/263YvCO8qcl3Kiyp1mxrBqqApHn/YZBljeGjOicACkDL2KnDuoVzg+5 86na+pgFWqqL17ijhaGNc5ObJFxaqFM2AykJQQ2W1jbu0nlT71wbHTgL6c8Q9+Fv 52ef60hM9BIWCPSygtqiILIF7sJkPWuzitb4bUAU+UvsPAoMDu2dmwZ7Yfuh/A1M ykF28qHkLIWpIz5QIm/QGeEPG5yEitz6sQV0B22+ahKuayWXePZnChhuYKc5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA3WSJKgwSF5k2 c1DGjePSll6FmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnR5 Z3pVM2RSdkNwMXlidjdoVHhGUjJ5TGM3Z05LUXE5UzQzSEt0Q2dvdFYvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnR5 Z3pVM2RSdkNwMXlidjdoVHhGUjJ5TGM3Z05LUXE5UzQzSEt0Q2dvdFYvMC9DMERE NjQ4OTJBMEMxMjE3OTkzNjczNTBDNjhERTNEMjk2NUU4NTlCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqUDwwDQQCAAIwBwMFACgEh8QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBClaMA0GCSqGSIb3DQEBCwUAA4IBAQDa0K00nbtdz9fWq6oZ CnpsFsSy7PY/hszlO9Uc7JkuIjv3pKZZdDVJlOpY7dGUxEhkI3+qJQoshgGHFjho UyGTt+mxfPcbaXmysrL7//8tq6+ChtsrxaaTv80RYgC+UTP1svXwkYTlqJNfFk3v Wp+D6/8Bule8X238V9g/GSfElcDUNx5n28R6yxv+1kR49ZuFt4svBDAB09L7EBm1 Xxs1n1T5Oxp7HcbRDANgMOIyOobDxNa8DeZUiCYbnGiB1j0ZD3jEZEPkcWrTgkqk rjO3FiWrZPjznBzGyPKyBCRZaAxPl+4ZLvhSfMgEnVMH5wGmEq0RB45y/QP/kXdN 7IqK -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:09 2025 by rpki-client