$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer File: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer (raw, json) Hash identifier: ii2tqEws08uB3rbDuWSnzte8CIlqU+aLX/Cha9qG/vE= Subject key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4ACB9A1E8B65D143519BEC50A765BF96F83039EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft caRepository: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 29 Sep 2025 13:00:16 +0000 Certificate not after: Mon 28 Sep 2026 13:05:16 +0000 Subordinate resources: AS: 271180 IP: 200.0.64.0/24 IP: 200.125.129.0/24 IP: 2804:7778::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cb:9a:1e:8b:65:d1:43:51:9b:ec:50:a7:65:bf:96:f8:30:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 29 13:00:16 2025 GMT Not After : Sep 28 13:05:16 2026 GMT Subject: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:5e:b9:d4:2b:cb:e9:55:cb:72:9e:bf:b2: d7:97:45:9a:76:24:55:38:b4:b3:c1:fe:e6:83:90: b7:da:db:2b:05:2b:41:24:9b:39:b3:99:b8:d0:a3: 6d:32:ce:b2:d7:12:65:b6:0a:39:54:3d:79:35:fe: a3:ad:ee:d7:ae:83:0a:48:36:ac:a1:5d:5f:98:a0: 24:83:32:9e:3f:d9:89:02:79:f4:10:94:ec:1c:90: 03:8c:1b:b9:c6:b4:fc:61:f0:81:20:4c:fb:a5:79: 70:78:4d:3c:e7:be:5e:2b:2c:8c:56:8d:f8:ea:34: c6:03:65:00:c8:9f:61:8e:a7:d3:ed:c0:d1:b2:21: 1c:5f:6f:4b:ba:2d:15:41:4d:96:f1:11:f5:32:13: 98:c0:8a:29:34:b3:c8:28:93:84:09:94:76:e0:7a: 30:72:14:79:76:c1:ea:9c:76:4b:1c:bd:93:40:31: 31:cc:f7:95:cd:bf:fe:8f:0e:cb:48:62:79:70:92: 68:1a:ec:2a:6c:e7:1e:79:2d:ef:7a:a5:7d:44:4c: c0:e7:94:e8:8d:51:f4:57:ed:50:bc:2d:09:50:cc: a8:a9:ed:aa:6d:ef:02:be:32:2f:45:31:8f:5a:c6: da:80:af:b1:d1:4c:87:e3:14:c9:62:fe:12:1b:50: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.64.0/24 200.125.129.0/24 IPv6: 2804:7778::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271180 Signature Algorithm: sha256WithRSAEncryption 14:bb:b6:93:67:54:d6:fe:f8:cf:e0:dc:7c:29:9d:3b:1d:50: b5:a7:f3:b1:e3:a9:57:81:3d:bc:6c:a0:ee:6e:62:1e:37:51: 59:82:03:4c:8f:a5:ff:fb:9c:76:7e:21:98:e9:de:8b:5c:ad: 00:78:72:f5:d0:2f:df:cf:cc:96:cf:7b:16:03:4e:b0:cc:78: c9:61:ef:2f:7b:62:2c:fa:6f:8a:7d:51:b6:74:41:d2:05:c3: d3:19:be:3f:ef:b7:05:d7:66:59:62:18:19:8d:23:f5:43:ee: 1a:a0:35:0f:5d:84:ca:d3:0c:4b:97:ef:9d:0f:74:b8:54:ca: e9:ee:47:f2:41:6c:1a:2f:9f:43:ce:27:e2:6a:9d:7c:97:3e: 9f:e9:37:89:ae:1d:35:46:8b:dc:21:75:29:d1:1a:31:1f:62: 02:ce:0d:3e:1e:11:d6:7e:1a:88:45:a2:41:b1:c2:2e:7b:18: 21:a0:2c:e9:62:64:48:01:55:e3:64:c7:e4:a4:49:fa:b3:c9: 58:b2:e3:f1:af:32:18:a4:e7:ee:c6:13:e5:dc:43:75:57:3d: 11:9a:b1:e6:6c:e3:0e:75:c0:34:34:9f:c2:8d:ba:e0:0b:08: e8:19:75:88:93:9c:da:4e:82:5b:43:82:be:79:f8:7c:f3:e1: 50:bf:5a:69 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUSsuaHotl0UNRm+xQp2W/lvgwOewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjkxMzAwMTZaFw0yNjA5MjgxMzA1MTZaMDMxMTAvBgNV BAMTKERBMkMzQjI1NzJDM0JDQTkyMjVFODcyQjc3RDdFQkVDNTFFNEEwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTl651CvL6VXLcp6/steXRZp2 JFU4tLPB/uaDkLfa2ysFK0EkmzmzmbjQo20yzrLXEmW2CjlUPXk1/qOt7teugwpI NqyhXV+YoCSDMp4/2YkCefQQlOwckAOMG7nGtPxh8IEgTPuleXB4TTznvl4rLIxW jfjqNMYDZQDIn2GOp9PtwNGyIRxfb0u6LRVBTZbxEfUyE5jAiik0s8gok4QJlHbg ejByFHl2weqcdkscvZNAMTHM95XNv/6PDstIYnlwkmga7Cps5x55Le96pX1ETMDn lOiNUfRX7VC8LQlQzKip7apt7wK+Mi9FMY9axtqAr7HRTIfjFMli/hIbUCJ3AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaLDslcsO8qSJe hyt31+vsUeSgGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhk S3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhk S3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMC9EQTJD M0IyNTcyQzNCQ0E5MjI1RTg3MkI3N0Q3RUJFQzUxRTRBMDFBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBADIAEADBADIfYEwDQQCAAIwBwMFACgEd3gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCNMMA0GCSqGSIb3DQEBCwUAA4IBAQAUu7aTZ1TW /vjP4Nx8KZ07HVC1p/Ox46lXgT28bKDubmIeN1FZggNMj6X/+5x2fiGY6d6LXK0A eHL10C/fz8yWz3sWA06wzHjJYe8ve2Is+m+KfVG2dEHSBcPTGb4/77cF12ZZYhgZ jSP1Q+4aoDUPXYTK0wxLl++dD3S4VMrp7kfyQWwaL59Dzifiap18lz6f6TeJrh01 RovcIXUp0RoxH2ICzg0+HhHWfhqIRaJBscIuexghoCzpYmRIAVXjZMfkpEn6s8lY suPxrzIYpOfuxhPl3EN1Vz0RmrHmbOMOdcA0NJ/CjbrgCwjoGXWIk5zaToJbQ4K+ efh88+FQv1pp -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:32 2025 by rpki-client