$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer File: DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer (raw, json) Hash identifier: b5kAQqUfcw1oxNWSli96rMkLRpCUjVR/hxc8hrHWw7Y= Subject key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D96DD8ECE76FCA682D5D84103202C56FA63B13C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft caRepository: rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 23 Aug 2025 08:14:34 +0000 Certificate not after: Sat 22 Aug 2026 08:19:34 +0000 Subordinate resources: AS: 269251 IP: 45.182.212.0/22 IP: 2804:61b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:96:dd:8e:ce:76:fc:a6:82:d5:d8:41:03:20:2c:56:fa:63:b1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 08:14:34 2025 GMT Not After : Aug 22 08:19:34 2026 GMT Subject: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:ef:04:27:6a:bf:f7:f5:88:7c:3c:69:1a: e9:a9:82:b4:11:ad:b0:ca:18:ad:9d:31:b9:c3:d0: 12:d4:a0:72:25:f0:a5:f9:24:17:6c:d5:da:de:0c: f8:d5:0a:68:14:eb:fb:8a:2c:16:51:51:f3:32:bb: 4e:63:52:f1:d8:6b:d7:57:ef:75:9d:bc:69:ea:f2: 2e:d3:14:5b:5e:b0:c7:12:95:de:d7:45:11:2f:2e: 43:01:ce:88:82:30:21:12:16:4f:0e:c1:08:1c:4c: 20:84:b6:f2:0b:ae:a7:8e:65:a8:5c:99:b8:66:d0: 22:03:ce:56:76:0c:49:20:98:f2:d7:4c:ed:46:b7: 33:57:77:58:38:84:fb:da:99:9b:3a:7e:1e:8c:17: 03:a2:f4:3f:3a:f0:4a:60:db:57:7a:ce:a9:f3:36: 92:18:c6:ad:aa:0e:d3:ad:fb:9a:37:9a:1f:6b:3e: d7:d2:34:a3:a9:0b:8d:32:73:cc:81:4d:a0:7c:68: 21:30:e3:aa:ad:19:f3:cb:01:fc:c1:a2:ac:29:d0: b9:02:a9:b9:9c:59:03:4d:bc:db:bd:39:74:c9:0b: 90:5d:75:8b:66:b0:65:16:12:92:6d:c3:ef:a9:c0: b4:2f:c6:c0:a5:58:b6:22:3d:a0:d8:94:b6:01:83: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.212.0/22 IPv6: 2804:61b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269251 Signature Algorithm: sha256WithRSAEncryption 13:36:ed:43:02:25:11:06:f5:67:ed:c3:ab:ef:bb:d6:bb:19: 08:95:45:ff:a7:ee:36:6b:46:2c:6a:a1:8e:4a:b5:7d:9c:2f: ff:83:f9:c3:51:1d:71:4a:d8:93:7a:09:b1:04:ca:aa:e7:6c: 36:29:15:eb:2c:47:34:82:19:d0:45:46:20:60:64:e3:93:8a: 37:40:3c:1e:60:70:7c:56:ab:68:72:a0:05:41:3c:dd:7e:68: 75:69:43:7d:d7:af:60:b8:9a:6b:8d:dc:e3:b1:a9:d7:30:32: 5c:24:d0:79:d4:b1:8f:7b:9d:b8:04:c3:01:b3:b0:ca:3f:08: 8f:12:54:7d:d5:10:0a:52:3a:7e:cb:c0:b5:cd:c3:23:28:3f: bb:41:72:e2:23:b5:eb:72:2b:dd:11:ea:af:c5:90:20:af:c1: 3c:57:7a:67:56:a4:ca:94:cb:1e:9d:07:09:f6:93:65:d6:f5: 9e:8f:4d:9e:20:44:98:6e:06:a0:07:62:0c:f4:91:cc:b2:b9: e4:4c:6b:d7:6b:c1:74:64:5e:6e:ff:ae:36:49:ad:7f:a8:ff: 68:28:0c:69:1e:c2:f5:5a:39:30:71:db:e7:6f:c6:da:dd:e2: af:8f:6d:8e:e9:40:ed:5a:4b:fb:36:37:22:08:34:b3:87:ed: 97:8c:3e:75 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPZbdjs52/KaC1dhBAyAsVvpjsTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA4MjMwODE0MzRaFw0yNjA4MjIwODE5MzRaMDMxMTAvBgNV BAMTKEREOTZDMjJEQTc5MTU3Mzg0QjhGNjhBQjE4NDVBQUYxRTc5NEE4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFe8EJ2q/9/WIfDxpGumpgrQR rbDKGK2dMbnD0BLUoHIl8KX5JBds1dreDPjVCmgU6/uKLBZRUfMyu05jUvHYa9dX 73WdvGnq8i7TFFtesMcSld7XRREvLkMBzoiCMCESFk8OwQgcTCCEtvILrqeOZahc mbhm0CIDzlZ2DEkgmPLXTO1GtzNXd1g4hPvamZs6fh6MFwOi9D868Epg21d6zqnz NpIYxq2qDtOt+5o3mh9rPtfSNKOpC40yc8yBTaB8aCEw46qtGfPLAfzBoqwp0LkC qbmcWQNNvNu9OXTJC5BddYtmsGUWEpJtw++pwLQvxsClWLYiPaDYlLYBg/NnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdlsItp5FXOEuP aKsYRarx55SobTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVN2 YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxBaDYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlT dmJDYlMya21vNHFDRlBHMmd6RzZVSmFZZVdXc1pDWjNHb29kSDVMQWg2LzAvREQ5 NkMyMkRBNzkxNTczODRCOEY2OEFCMTg0NUFBRjFFNzk0QTg2RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbbUMA0EAgACMAcDBQAoBGG0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbwzANBgkqhkiG9w0BAQsFAAOCAQEAEzbtQwIlEQb1Z+3D q++71rsZCJVF/6fuNmtGLGqhjkq1fZwv/4P5w1EdcUrYk3oJsQTKqudsNikV6yxH NIIZ0EVGIGBk45OKN0A8HmBwfFaraHKgBUE83X5odWlDfdevYLiaa43c47Gp1zAy XCTQedSxj3uduATDAbOwyj8IjxJUfdUQClI6fsvAtc3DIyg/u0Fy4iO163Ir3RHq r8WQIK/BPFd6Z1akypTLHp0HCfaTZdb1no9NniBEmG4GoAdiDPSRzLK55Exr12vB dGRebv+uNkmtf6j/aCgMaR7C9Vo5MHHb52/G2t3ir49tjulA7VpL+zY3Igg0s4ft l4w+dQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:58:36 2025 by rpki-client