$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer File: DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer (raw, json) Hash identifier: RoiCk7LPquV+Q1NHAbwgUlNjhmPZ4q/R/3FwYW23zqQ= Subject key identifier: DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A4B9769ACFA7D0EC0FCB6BA337917B629DA0BE1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft caRepository: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 14:34:54 +0000 Certificate not after: Thu 17 Sep 2026 14:39:54 +0000 Subordinate resources: AS: 28293 IP: 189.28.32.0/19 IP: 2804:6ec0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4b:97:69:ac:fa:7d:0e:c0:fc:b6:ba:33:79:17:b6:29:da:0b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 14:34:54 2025 GMT Not After : Sep 17 14:39:54 2026 GMT Subject: CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a8:ba:0a:ad:37:0f:b9:89:90:be:7f:c4:3a: d6:84:ad:2c:b1:0b:29:c3:e6:66:55:2b:86:4f:14: d0:56:b3:1c:33:b3:f4:4b:51:27:ea:ae:62:c1:32: 16:88:35:35:53:c9:a4:ff:92:7f:3d:00:0a:02:79: a1:91:1d:95:ae:7c:01:4d:d1:5e:d0:5c:3d:60:b5: d0:f2:78:38:72:6a:05:0c:cc:bf:2e:c4:8f:ca:78: 8f:53:d3:cf:a0:d0:57:ed:40:c5:fe:62:d9:a7:c7: a4:76:e7:45:d9:3a:44:0c:1b:57:0f:28:b6:22:16: 1f:1b:af:e2:e1:cb:be:90:2b:2b:e6:27:cd:f6:d3: 2b:b6:58:a7:a6:e8:31:01:47:10:eb:95:07:76:a9: 56:67:c1:80:ff:b3:b6:4a:10:a2:d2:3b:c2:db:a5: d9:a7:16:3b:77:26:37:1d:fb:76:39:c8:91:e5:45: 62:06:98:21:cf:8b:71:8a:e5:df:2f:38:13:0e:f6: 02:cd:78:df:e9:af:1a:47:09:c5:e5:a3:19:4e:17: f2:be:c9:9f:7b:6a:b4:02:0f:61:c2:b0:a2:5c:be: c0:1b:07:b6:11:1c:ba:e4:c4:f9:52:54:2f:9b:c8: b1:ec:a9:7e:dc:95:46:07:01:a1:a1:ad:c1:37:74: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.28.32.0/19 IPv6: 2804:6ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28293 Signature Algorithm: sha256WithRSAEncryption a2:2e:72:02:c5:f1:5b:6b:d8:4d:55:d2:ac:73:da:6c:b4:86: e7:3b:56:ff:d8:b4:0f:68:17:fc:24:74:21:db:99:9a:19:24: c3:d3:98:c5:bf:00:b3:3f:e8:60:74:6b:10:e4:a4:6c:d2:67: d1:3f:9a:e3:7c:57:8a:c5:1a:b1:44:09:fe:1a:c2:5e:2e:61: dc:ae:15:4a:54:ae:38:72:b0:66:cc:30:b1:d4:59:da:d7:f6: 99:f4:d6:ed:91:c3:0d:55:d9:8d:5c:c1:c2:c7:96:bd:ee:94: 44:86:4c:75:ae:7a:3c:55:89:c6:00:be:f0:60:a5:1c:f5:81: 8e:0c:36:36:a4:da:5b:80:49:db:06:04:e5:54:e1:e4:1c:bc: 92:96:49:ed:0e:54:21:85:f9:68:f4:75:ef:96:74:64:b6:98: 1a:51:39:94:8d:e5:b3:85:e4:84:eb:6e:4c:e9:22:e7:29:4e: 3f:c7:1f:48:3f:91:5b:0d:94:3c:1a:6d:90:ae:47:63:ab:98: 8b:f0:0e:fd:6b:67:53:04:88:01:17:2c:11:14:3c:7d:4c:eb: 74:6a:d5:25:98:fa:44:5d:87:04:ab:29:9c:e3:88:64:0b:89: 78:01:22:12:9f:a7:f1:ad:d7:17:b4:85:5f:7a:6e:c5:37:a8: b8:9a:0b:c0 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGkuXaaz6fQ7A/La6M3kXtinaC+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgxNDM0NTRaFw0yNjA5MTcxNDM5NTRaMDMxMTAvBgNV BAMTKERFRDlFOEZEMUQyREI4Njg5ODU4NzY1MDI2NjRBNENBMjk4OUMyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnqLoKrTcPuYmQvn/EOtaErSyx CynD5mZVK4ZPFNBWsxwzs/RLUSfqrmLBMhaINTVTyaT/kn89AAoCeaGRHZWufAFN 0V7QXD1gtdDyeDhyagUMzL8uxI/KeI9T08+g0FftQMX+Ytmnx6R250XZOkQMG1cP KLYiFh8br+Lhy76QKyvmJ8320yu2WKem6DEBRxDrlQd2qVZnwYD/s7ZKEKLSO8Lb pdmnFjt3Jjcd+3Y5yJHlRWIGmCHPi3GK5d8vOBMO9gLNeN/prxpHCcXloxlOF/K+ yZ97arQCD2HCsKJcvsAbB7YRHLrkxPlSVC+byLHsqX7clUYHAaGhrcE3dHrPAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTe2ej9HS24aJhY dlAmZKTKKYnCzzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG5u M1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJKY3gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hu bjNSZVZtclpBckFjQnM5bWl1WE13WlRpYzloUkFuRjF0Z25OTmpSSmN4LzAvREVE OUU4RkQxRDJEQjg2ODk4NTg3NjUwMjY2NEE0Q0EyOTg5QzJDRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQFvRwgMA0EAgACMAcDBQAoBG7AMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm6FMA0GCSqGSIb3DQEBCwUAA4IBAQCiLnICxfFba9hNVdKs c9pstIbnO1b/2LQPaBf8JHQh25maGSTD05jFvwCzP+hgdGsQ5KRs0mfRP5rjfFeK xRqxRAn+GsJeLmHcrhVKVK44crBmzDCx1Fna1/aZ9NbtkcMNVdmNXMHCx5a97pRE hkx1rno8VYnGAL7wYKUc9YGODDY2pNpbgEnbBgTlVOHkHLySlkntDlQhhflo9HXv lnRktpgaUTmUjeWzheSE625M6SLnKU4/xx9IP5FbDZQ8Gm2Qrkdjq5iL8A79a2dT BIgBFywRFDx9TOt0atUlmPpEXYcEqymc44hkC4l4ASISn6fxrdcXtIVfem7FN6i4 mgvA -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:49 2025 by rpki-client