$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer File: DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer (raw, json) Hash identifier: evY1G5R0R9RIcT2G6DxvWcYzaPN2wHOhmo2iB2mJW+g= Subject key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70CF17D339E3EC390663C6B46C277824761642BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft caRepository: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 Oct 2025 18:36:42 +0000 Certificate not after: Wed 14 Oct 2026 18:41:42 +0000 Subordinate resources: AS: 266919 IP: 45.224.168.0/22 IP: 2804:4554::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cf:17:d3:39:e3:ec:39:06:63:c6:b4:6c:27:78:24:76:16:42:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 15 18:36:42 2025 GMT Not After : Oct 14 18:41:42 2026 GMT Subject: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:62:74:19:63:45:d2:88:cd:fd:3d:dd:29: 8c:aa:30:60:b5:9d:cb:1e:0a:8a:e1:d1:fe:87:ce: 02:46:92:7f:c9:99:b2:9b:c8:ff:2e:9d:53:17:a0: a7:b3:fc:f7:5a:47:3e:70:65:88:ee:31:4e:7c:6d: b7:15:f8:3f:e2:9f:50:0e:7e:b4:b8:96:cf:68:3e: 52:39:be:11:2e:2c:2f:b8:77:70:02:12:a6:fa:e5: e7:1d:3b:fb:8b:ee:4a:70:23:c6:3c:b0:ff:6b:6e: 50:92:31:25:a8:72:bf:ed:b0:84:22:2a:da:a1:4a: 82:7a:db:b1:b6:fa:ac:f2:a5:f4:57:c2:8c:36:b3: 68:3e:e3:a5:83:d2:68:63:ac:0b:0c:ae:76:08:19: ae:63:51:44:69:6b:60:48:72:cf:42:31:ee:50:bc: 57:96:55:ca:0d:6d:9f:97:5c:a2:c8:05:39:2e:5b: 11:04:4c:ce:85:24:fa:2b:ad:e0:e9:46:5d:35:18: 3a:9b:bc:ee:39:79:78:5f:32:2d:f4:4d:f3:17:76: 07:50:73:4a:6f:06:62:ab:6e:5c:23:09:04:3f:5e: 8b:8c:eb:e3:03:15:56:a2:64:61:d4:f9:55:3b:e4: e1:d8:cd:41:c4:d8:95:4b:ae:f2:e8:e1:b2:93:bc: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.168.0/22 IPv6: 2804:4554::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266919 Signature Algorithm: sha256WithRSAEncryption d1:93:05:a0:b1:12:9a:5f:bb:a1:d9:bc:e5:80:a0:29:0e:21: e0:25:52:4c:74:ad:f2:f7:b3:b3:bc:c7:80:5d:2a:b3:0b:d2: 4d:6d:e4:5c:e2:ad:26:e9:9c:c9:61:87:8a:01:a9:cc:33:d6: 6c:5b:75:4c:47:b3:8a:42:19:14:af:29:c5:f8:93:06:8e:eb: f5:03:db:a1:28:57:cc:b1:f0:dc:df:7a:23:8f:5c:10:9e:3a: b9:d5:ea:89:3d:92:a2:bd:02:fb:d6:2a:a3:96:0f:91:06:1d: f4:1e:74:ca:15:4a:87:ab:3b:86:81:a2:12:2a:b2:f9:96:d9: ec:60:b6:3d:fc:ec:56:fd:6f:0e:9e:1c:9f:f2:fb:d5:98:d0: 3f:7b:8b:d5:81:2b:d8:d6:37:18:87:d9:2b:11:75:eb:68:7e: 20:4e:b3:27:d9:21:0f:5d:80:3b:25:3d:64:52:04:f9:b9:41: 9c:d2:30:ef:ca:f2:8b:e8:1e:b6:0d:91:03:2d:70:6f:e6:cf: ae:86:1d:e1:0a:80:4b:cc:1c:41:b1:b4:97:0c:8b:5a:86:74: 28:8d:0e:42:28:a6:8a:e9:1c:f2:a3:c1:8e:19:47:35:35:a6: fd:44:a3:60:bf:7e:3b:eb:1e:54:48:31:3e:41:58:44:cf:75: c2:50:32:c4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcM8X0znj7DkGY8a0bCd4JHYWQrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTUxODM2NDJaFw0yNjEwMTQxODQxNDJaMDMxMTAvBgNV BAMTKERCMjY4ODY3MUVCREEzNDA5MjBGN0YyNzRFRDBDM0MzREZFMzgwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPg2J0GWNF0ojN/T3dKYyqMGC1 ncseCorh0f6HzgJGkn/JmbKbyP8unVMXoKez/PdaRz5wZYjuMU58bbcV+D/in1AO frS4ls9oPlI5vhEuLC+4d3ACEqb65ecdO/uL7kpwI8Y8sP9rblCSMSWocr/tsIQi KtqhSoJ627G2+qzypfRXwow2s2g+46WD0mhjrAsMrnYIGa5jUURpa2BIcs9CMe5Q vFeWVcoNbZ+XXKLIBTkuWxEETM6FJPorreDpRl01GDqbvO45eXhfMi30TfMXdgdQ c0pvBmKrblwjCQQ/XouM6+MDFVaiZGHU+VU75OHYzUHE2JVLrvLo4bKTvPXdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbJohnHr2jQJIP fydO0MPD3+OAJjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1dX OHp1ckJpSmttM0tVcVhISFdzczhKcTdRcU1KN05qN2dvYjEyVjNYMTcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdX Vzh6dXJCaUprbTNLVXFYSEhXc3M4SnE3UXFNSjdOajdnb2IxMlYzWDE3LzAvREIy Njg4NjcxRUJEQTM0MDkyMEY3RjI3NEVEMEMzQzNERkUzODAyNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeCoMA0EAgACMAcDBQAoBEVUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQSpzANBgkqhkiG9w0BAQsFAAOCAQEA0ZMFoLESml+7odm8 5YCgKQ4h4CVSTHSt8vezs7zHgF0qswvSTW3kXOKtJumcyWGHigGpzDPWbFt1TEez ikIZFK8pxfiTBo7r9QPboShXzLHw3N96I49cEJ46udXqiT2Sor0C+9Yqo5YPkQYd 9B50yhVKh6s7hoGiEiqy+ZbZ7GC2PfzsVv1vDp4cn/L71ZjQP3uL1YEr2NY3GIfZ KxF162h+IE6zJ9khD12AOyU9ZFIE+blBnNIw78ryi+getg2RAy1wb+bProYd4QqA S8wcQbG0lwyLWoZ0KI0OQiimiukc8qPBjhlHNTWm/USjYL9+O+seVEgxPkFYRM91 wlAyxA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:35 2025 by rpki-client