$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer File: DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.cer (raw, json) Hash identifier: wBzTweaOFbPuaHbeJbhyPLCF1CLsNvWn9Y3J+bf1Kfw= Subject key identifier: DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0CEB26C415C9021B62B470761F11F7F45CBD2FAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft caRepository: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 29 Sep 2025 17:30:13 +0000 Certificate not after: Mon 28 Sep 2026 17:35:13 +0000 Subordinate resources: AS: 269372 IP: 45.185.96.0/22 IP: 2804:639c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:eb:26:c4:15:c9:02:1b:62:b4:70:76:1f:11:f7:f4:5c:bd:2f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 29 17:30:13 2025 GMT Not After : Sep 28 17:35:13 2026 GMT Subject: CN=DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:c1:26:9a:e1:a5:34:45:3a:cb:9d:64:e1: ad:fa:b5:cf:29:ee:c8:5b:ab:6b:cb:be:db:ae:66: 5f:d7:66:c8:a9:9b:f9:08:84:45:49:79:4d:aa:da: f0:1f:c6:2b:b5:f5:0c:32:44:22:e3:e5:7d:9b:9c: 34:f4:52:93:55:49:dd:f1:8d:5e:4c:7d:52:22:db: 82:3b:a6:b2:be:10:1c:dd:24:b1:98:c3:11:2e:30: 1d:63:7a:0b:3d:81:55:bc:f4:20:ed:5e:56:62:e3: 65:77:86:b2:a0:aa:37:ca:ba:38:1f:d4:6d:d1:c9: 2b:60:80:33:f3:cc:d6:4c:5f:0a:19:38:ca:66:bb: a1:dc:6b:b6:ce:d6:56:04:f7:cc:19:96:71:84:24: eb:48:65:4c:19:6d:1d:31:82:94:cb:dd:bd:99:ab: fa:3d:fb:5d:d8:28:db:f1:a9:bc:9a:eb:e1:1d:09: 40:e1:05:e7:98:8e:9a:06:ec:f5:10:d5:20:fc:46: 44:8f:b7:08:ae:0c:2f:4e:db:fd:ec:94:73:a4:76: b0:da:af:ed:e9:91:da:9d:1f:68:8d:9e:78:f0:10: a6:94:a5:2b:1d:0b:29:6d:ff:46:17:51:21:77:8f: 5f:62:1f:d9:99:2b:a1:45:c2:e5:57:6d:7b:92:a3: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:ED:51:96:81:4C:98:4E:AF:EF:CD:AE:94:DB:A8:6A:0D:3C:7F:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/DCED5196814C984EAFEFCDAE94DBA86A0D3C7F4A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.96.0/22 IPv6: 2804:639c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269372 Signature Algorithm: sha256WithRSAEncryption 35:61:5c:38:e8:42:aa:fb:81:bc:2a:e0:60:80:c4:0f:2e:bf: c6:81:82:74:55:4c:45:10:90:5c:3e:92:3e:59:d0:2c:4a:66: fa:66:8f:82:06:29:f2:10:b6:34:00:76:b6:21:94:85:40:3a: b4:b1:8f:88:4b:4d:f9:80:64:16:50:0b:62:2d:3a:da:ce:c4: af:a4:a5:28:1b:25:8f:53:8d:0f:ef:50:bb:d7:3b:7f:8b:34: 01:a5:dc:ad:a4:ba:f4:6c:17:e8:74:18:cf:73:1f:71:d3:63: e7:47:91:fc:c7:6d:fa:3a:f4:8c:12:02:37:d7:37:4a:fd:2e: d4:00:9f:dd:6e:53:c8:cd:06:50:ee:98:18:a2:a8:c2:96:95: 0d:8f:e5:c1:c8:65:02:e3:20:8b:3f:47:df:61:72:35:be:5f: bb:95:45:c4:d6:20:85:9d:75:ea:af:c6:7c:af:cd:c2:23:f3: 97:7b:18:af:da:19:ef:85:5f:95:e0:62:5b:70:5b:5c:4b:4c: 0d:19:b5:41:46:bc:ba:f0:ec:03:6d:87:19:e3:0d:a3:86:f4: ee:e7:98:52:76:fe:0d:bd:a2:9a:bc:7d:93:05:c0:a5:46:6c: 79:14:78:e1:49:11:11:a4:c6:1a:76:36:52:f1:a2:fa:36:01: f2:15:de:20 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDOsmxBXJAhtitHB2HxH39Fy9L60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MjkxNzMwMTNaFw0yNjA5MjgxNzM1MTNaMDMxMTAvBgNV BAMTKERDRUQ1MTk2ODE0Qzk4NEVBRkVGQ0RBRTk0REJBODZBMEQzQzdGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeMEmmuGlNEU6y51k4a36tc8p 7shbq2vLvtuuZl/XZsipm/kIhEVJeU2q2vAfxiu19QwyRCLj5X2bnDT0UpNVSd3x jV5MfVIi24I7prK+EBzdJLGYwxEuMB1jegs9gVW89CDtXlZi42V3hrKgqjfKujgf 1G3RyStggDPzzNZMXwoZOMpmu6Hca7bO1lYE98wZlnGEJOtIZUwZbR0xgpTL3b2Z q/o9+13YKNvxqbya6+EdCUDhBeeYjpoG7PUQ1SD8RkSPtwiuDC9O2/3slHOkdrDa r+3pkdqdH2iNnnjwEKaUpSsdCylt/0YXUSF3j19iH9mZK6FFwuVXbXuSozorAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc7VGWgUyYTq/v za6U26hqDTx/SjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG43 OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVwdEhiRnc5bndvclkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru NzhjVDd3eHpjQjk3S2RqOEJuWDdmNFFWcXZUNmVVcHRIYkZ3OW53b3JZLzAvRENF RDUxOTY4MTRDOTg0RUFGRUZDREFFOTREQkE4NkEwRDNDN0Y0QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLblgMA0EAgACMAcDBQAoBGOcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQcPDANBgkqhkiG9w0BAQsFAAOCAQEANWFcOOhCqvuBvCrg YIDEDy6/xoGCdFVMRRCQXD6SPlnQLEpm+maPggYp8hC2NAB2tiGUhUA6tLGPiEtN +YBkFlALYi062s7Er6SlKBslj1OND+9Qu9c7f4s0AaXcraS69GwX6HQYz3MfcdNj 50eR/Mdt+jr0jBICN9c3Sv0u1ACf3W5TyM0GUO6YGKKowpaVDY/lwchlAuMgiz9H 32FyNb5fu5VFxNYghZ116q/GfK/NwiPzl3sYr9oZ74VfleBiW3BbXEtMDRm1QUa8 uvDsA22HGeMNo4b07ueYUnb+Db2imrx9kwXApUZseRR44UkREaTGGnY2UvGi+jYB 8hXeIA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:33 2025 by rpki-client