$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/CDDBC27DB9574C1F4A901807E0F1809F6090C2D9.cer File: CDDBC27DB9574C1F4A901807E0F1809F6090C2D9.cer (raw, json) Hash identifier: cdfFBf06UIb1RsHlmzsGjkTEoTpZuWOFzaDYHM6/v+E= Subject key identifier: CD:DB:C2:7D:B9:57:4C:1F:4A:90:18:07:E0:F1:80:9F:60:90:C2:D9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 491627362BB2664D3505B23AAA9DAF6BA6164960 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/CDDBC27DB9574C1F4A901807E0F1809F6090C2D9.mft caRepository: rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 17 Sep 2026 23:44:06 +0000 Certificate not after: Thu 16 Sep 2027 23:49:06 +0000 Subordinate resources: AS: 271477 IP: 177.152.124.0/22 IP: 2804:7c20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Sep 2026 00:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:16:27:36:2b:b2:66:4d:35:05:b2:3a:aa:9d:af:6b:a6:16:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 17 23:44:06 2026 GMT Not After : Sep 16 23:49:06 2027 GMT Subject: CN=CDDBC27DB9574C1F4A901807E0F1809F6090C2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:b8:d5:ed:37:f7:c9:84:72:f2:c4:7a:86: a7:56:18:81:40:69:88:de:84:a5:f9:85:c8:f1:7d: f5:bf:a4:bc:2c:3d:80:57:ee:aa:bc:6e:57:32:ca: 5f:94:de:34:84:41:5d:17:c3:82:b8:63:1b:66:2d: fd:83:0c:c6:db:9e:b5:44:c0:ee:c4:85:3e:54:2d: 5f:ef:6d:2a:cc:35:66:fd:d4:cf:bc:61:bf:93:d8: 30:84:20:72:f5:e7:7c:d3:24:9a:07:56:fb:1b:a3: d6:88:61:af:a8:c4:82:9a:87:8c:18:85:e1:50:20: 90:5e:38:20:45:3d:73:03:aa:33:b8:b4:a8:40:8b: 27:df:9a:8a:f9:ad:bf:6b:8a:61:03:d3:7d:c5:a8: 05:35:91:d5:78:55:38:f6:81:54:c3:a7:ac:40:76: 4d:23:0f:17:59:82:c1:42:9a:00:28:0e:9e:c5:2a: aa:60:68:d0:f4:61:70:df:1d:1c:03:54:1e:c4:15: 90:37:b5:97:25:28:22:ab:56:53:a9:5e:65:ca:00: e4:1f:05:3f:af:a3:a7:26:fe:2d:7c:17:32:c6:3d: 95:78:b1:9d:dd:02:2d:2c:55:79:db:7f:75:9e:62: dd:eb:68:d7:c3:85:85:74:33:8b:11:7f:fa:63:74: 11:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:DB:C2:7D:B9:57:4C:1F:4A:90:18:07:E0:F1:80:9F:60:90:C2:D9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/CDDBC27DB9574C1F4A901807E0F1809F6090C2D9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.152.124.0/22 IPv6: 2804:7c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271477 Signature Algorithm: sha256WithRSAEncryption 24:15:70:d9:48:0f:e6:3d:c6:26:54:ea:2f:0e:c6:cd:a9:34: 98:30:3b:4b:85:b4:ff:d8:53:6f:92:2c:2a:26:30:d3:57:97: 77:a9:ba:18:bf:96:c1:2c:19:97:3d:d8:47:2f:c3:6a:47:18: a5:be:07:f8:99:57:ea:0e:0d:c9:84:7a:74:5e:ab:54:8c:31: 37:ae:36:fc:3f:cc:79:2a:c7:04:b8:c2:03:34:54:65:04:df: ac:a6:5b:0c:f1:a7:50:7e:ba:1c:11:41:44:e4:c5:bb:75:40: 2c:e5:a1:4f:83:c3:19:ba:1d:fc:cf:f5:bf:7d:a2:8e:19:b5: 0b:aa:44:ac:ca:a5:2c:33:92:63:10:f1:1f:3d:df:96:33:da: e8:68:ce:4f:f9:dc:1a:3f:12:cf:f3:6a:13:c4:5a:71:2d:1a: ae:d0:05:d2:9c:3a:90:e6:66:59:08:71:a6:7e:6b:f0:77:c0: 33:03:84:33:88:4d:53:3a:9e:4c:0a:93:0a:21:58:8e:10:8b: d2:fc:44:80:ca:73:6c:b9:b5:95:d5:16:be:75:f7:e2:a9:ef: fc:f3:3d:76:46:f1:f2:79:f3:39:6b:33:22:44:07:50:b8:8a: 96:50:fc:c5:13:1d:f5:8d:20:6c:c6:cd:81:57:9a:8b:0f:0d: db:84:d6:01 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUSRYnNiuyZk01BbI6qp2va6YWSWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA5MTcyMzQ0MDZaFw0yNzA5MTYyMzQ5MDZaMDMxMTAvBgNV BAMTKENEREJDMjdEQjk1NzRDMUY0QTkwMTgwN0UwRjE4MDlGNjA5MEMyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzLjV7Tf3yYRy8sR6hqdWGIFA aYjehKX5hcjxffW/pLwsPYBX7qq8blcyyl+U3jSEQV0Xw4K4YxtmLf2DDMbbnrVE wO7EhT5ULV/vbSrMNWb91M+8Yb+T2DCEIHL153zTJJoHVvsbo9aIYa+oxIKah4wY heFQIJBeOCBFPXMDqjO4tKhAiyffmor5rb9rimED033FqAU1kdV4VTj2gVTDp6xA dk0jDxdZgsFCmgAoDp7FKqpgaND0YXDfHRwDVB7EFZA3tZclKCKrVlOpXmXKAOQf BT+vo6cm/i18FzLGPZV4sZ3dAi0sVXnbf3WeYt3raNfDhYV0M4sRf/pjdBGdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTN28J9uVdMH0qQ GAfg8YCfYJDC2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODdX SmZXZ0d3QzY2M2JlNVBBV1pkRUo4dG43S3kyN3BtTFg0NFNIMUtRUVYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg3 V0pmV2dHd0M2NjNiZTVQQVdaZEVKOHRuN0t5MjdwbUxYNDRTSDFLUVFWLzAvQ0RE QkMyN0RCOTU3NEMxRjRBOTAxODA3RTBGMTgwOUY2MDkwQzJEOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsZh8MA0EAgACMAcDBQAoBHwgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkdTANBgkqhkiG9w0BAQsFAAOCAQEAJBVw2UgP5j3GJlTq Lw7Gzak0mDA7S4W0/9hTb5IsKiYw01eXd6m6GL+WwSwZlz3YRy/DakcYpb4H+JlX 6g4NyYR6dF6rVIwxN642/D/MeSrHBLjCAzRUZQTfrKZbDPGnUH66HBFBROTFu3VA LOWhT4PDGbod/M/1v32ijhm1C6pErMqlLDOSYxDxHz3fljPa6GjOT/ncGj8Sz/Nq E8RacS0artAF0pw6kOZmWQhxpn5r8HfAMwOEM4hNUzqeTAqTCiFYjhCL0vxEgMpz bLm1ldUWvnX34qnv/PM9dkbx8nnzOWszIkQHULiKllD8xRMd9Y0gbMbNgVeaiw8N 24TWAQ== -----END CERTIFICATE-----Generated at Sun Sep 27 02:12:38 2026 by rpki-client