$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer File: CDD7619BD4F71987C247C8670D9064F291B3E36F.cer (raw, json) Hash identifier: XRef0QO/rINJlfrJC0k1+0MhRpO6bAgB6YPns/ywqkw= Subject key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 714348C5C8F1780D53BFA3BCC8B835F5C712F130 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft caRepository: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 15:28:28 +0000 Certificate not after: Mon 02 Nov 2026 15:33:28 +0000 Subordinate resources: AS: 274518 IP: 45.6.119.0/24 IP: 2804:957c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:43:48:c5:c8:f1:78:0d:53:bf:a3:bc:c8:b8:35:f5:c7:12:f1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 3 15:28:28 2025 GMT Not After : Nov 2 15:33:28 2026 GMT Subject: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:d4:e3:b7:ca:d3:a7:70:ea:ac:69:4a:0a: d6:33:40:e0:a5:5a:2d:78:0a:19:6b:0f:dc:3c:80: cc:a8:04:41:9d:71:39:bb:6f:c6:e8:83:37:6b:1e: a7:be:f0:ef:59:8a:2b:63:a1:1a:60:d8:5a:01:d3: ca:27:1d:0d:3e:71:8b:e1:e9:8c:67:76:da:bb:48: 46:b2:2e:68:a4:09:56:93:cc:ef:a8:5a:27:cb:ab: 11:7b:c9:15:5a:0f:73:54:19:a1:25:e8:53:00:71: b1:4c:97:69:6e:3d:5f:71:21:a4:c9:4a:3a:19:d7: 7c:77:3c:aa:3c:d4:6a:f4:fb:c5:b5:47:d1:d3:9e: b8:c2:ce:17:ef:24:c0:61:cf:eb:98:95:58:a8:7d: 1a:9d:48:09:61:57:0c:6d:f8:bc:42:36:8f:8a:31: 2d:ba:60:fe:c7:39:6c:79:49:8b:d5:6e:8c:fe:4f: e7:57:ca:21:e2:54:f2:c8:d8:c8:7c:01:62:c6:c2: 30:b7:a6:0d:d6:f2:0a:72:86:12:58:42:3b:75:42: 0b:45:68:db:a8:c7:09:5a:ab:28:74:db:67:02:f0: bc:5d:c9:c8:ec:27:93:9f:65:32:fa:1e:13:e3:83: 97:0e:c6:2c:a5:fc:2d:52:9e:06:14:f4:f4:eb:36: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.119.0/24 IPv6: 2804:957c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274518 Signature Algorithm: sha256WithRSAEncryption 68:ae:5b:53:00:33:25:f4:a1:65:6b:34:b3:7d:62:1b:bd:07: 08:98:3d:db:0c:4c:df:4a:2d:aa:7a:37:bb:82:77:f0:1d:68: ae:31:77:3e:ca:97:c0:e4:5b:6a:94:71:13:5f:d4:73:1f:9a: c9:ad:29:9b:8f:96:50:18:95:e0:c1:48:b4:5f:78:82:d5:0e: 7c:cb:b7:43:a9:30:77:c6:16:5d:67:b6:d3:39:ba:8d:7d:29: f7:f8:56:f9:34:53:48:78:8d:c7:de:d0:f8:6e:8b:f8:bf:6b: 82:fc:43:c3:6c:33:e7:ea:29:65:c4:3c:64:ce:6d:06:8a:77: 06:e2:80:65:7d:51:30:e0:96:87:10:be:b7:bf:1f:5e:2a:4b: b3:a8:d7:64:8f:2d:d1:e8:76:e4:49:c8:61:b3:ee:b1:54:ab: 84:ef:a8:4e:6e:30:92:a2:43:75:a5:26:cf:b2:68:51:13:eb: e3:55:06:3c:6c:d7:bc:2d:28:b4:a0:b8:3b:a5:d4:12:68:e4: bc:ea:fa:12:7f:f7:91:35:f5:c1:29:1e:43:68:68:43:2c:8d: 5d:e3:0a:f0:fd:b4:51:b3:90:00:37:fc:dd:6e:a6:7e:96:7d: c4:19:52:8c:cb:35:f4:ff:b6:64:b4:04:cd:b8:25:84:ab:e6: f0:d2:0b:51 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcUNIxcjxeA1Tv6O8yLg19ccS8TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMDMxNTI4MjhaFw0yNjExMDIxNTMzMjhaMDMxMTAvBgNV BAMTKENERDc2MTlCRDRGNzE5ODdDMjQ3Qzg2NzBEOTA2NEYyOTFCM0UzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwtTjt8rTp3DqrGlKCtYzQOCl Wi14ChlrD9w8gMyoBEGdcTm7b8bogzdrHqe+8O9ZiitjoRpg2FoB08onHQ0+cYvh 6Yxndtq7SEayLmikCVaTzO+oWifLqxF7yRVaD3NUGaEl6FMAcbFMl2luPV9xIaTJ SjoZ13x3PKo81Gr0+8W1R9HTnrjCzhfvJMBhz+uYlViofRqdSAlhVwxt+LxCNo+K MS26YP7HOWx5SYvVboz+T+dXyiHiVPLI2Mh8AWLGwjC3pg3W8gpyhhJYQjt1QgtF aNuoxwlaqyh022cC8LxdycjsJ5OfZTL6HhPjg5cOxiyl/C1SngYU9PTrNiOZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTN12Gb1PcZh8JH yGcNkGTykbPjbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHdI MWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFiTDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR3 SDFqSDdwYnJraTVYYzhwb28yWXhha3ptYTVyZFBQdHo3TGF3UzFhYkw0LzAvQ0RE NzYxOUJENEY3MTk4N0MyNDdDODY3MEQ5MDY0RjI5MUIzRTM2Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQALQZ3MA0EAgACMAcDBQAoBJV8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQwVjANBgkqhkiG9w0BAQsFAAOCAQEAaK5bUwAzJfShZWs0 s31iG70HCJg92wxM30otqno3u4J38B1orjF3PsqXwORbapRxE1/Ucx+aya0pm4+W UBiV4MFItF94gtUOfMu3Q6kwd8YWXWe20zm6jX0p9/hW+TRTSHiNx97Q+G6L+L9r gvxDw2wz5+opZcQ8ZM5tBop3BuKAZX1RMOCWhxC+t78fXipLs6jXZI8t0eh25EnI YbPusVSrhO+oTm4wkqJDdaUmz7JoURPr41UGPGzXvC0otKC4O6XUEmjkvOr6En/3 kTX1wSkeQ2hoQyyNXeMK8P20UbOQADf83W6mfpZ9xBlSjMs19P+2ZLQEzbglhKvm 8NILUQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:25 2025 by rpki-client