$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer (raw, json) Hash identifier: aYN/eINMTL4WBfju+DDcVaQFvclbGsUKTzXrEYFDG50= Subject key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02E54052EC51B4E86570BAD316239F415F8DEB10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft caRepository: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 13:05:01 +0000 Certificate not after: Thu 30 Jul 2026 13:10:01 +0000 Subordinate resources: AS: 268500 IP: 45.161.36.0/22 IP: 2804:522c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e5:40:52:ec:51:b4:e8:65:70:ba:d3:16:23:9f:41:5f:8d:eb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 31 13:05:01 2025 GMT Not After : Jul 30 13:10:01 2026 GMT Subject: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:0f:fa:7d:07:29:2a:c5:cc:8a:c1:f7:51: e0:27:dc:31:57:5e:c3:72:75:47:73:7f:a2:89:be: dd:63:5f:38:2c:91:64:cd:60:c8:df:e0:17:ae:32: 17:09:89:60:5b:2d:16:26:e4:b6:6a:de:dd:9a:84: cd:a2:71:2f:fc:ca:fe:7c:bc:90:dc:a1:21:d2:6b: 35:c3:aa:7d:92:2f:10:e6:3c:7c:cf:f3:5c:58:fb: 25:9f:35:6a:7a:67:bd:4a:91:53:25:4e:11:49:c3: 7e:80:bf:4e:6f:aa:b4:5b:4a:b1:49:d9:2e:c9:1a: af:69:aa:46:c5:fc:2c:c7:cb:5e:b4:20:4a:69:35: fd:e3:53:91:1e:b4:df:22:82:3d:15:04:2b:6d:86: e1:c5:63:e6:7e:33:66:1e:2a:42:9c:11:e0:8f:a1: c2:2c:f5:44:2a:5e:c1:0c:a5:11:b0:45:9f:d3:d4: a5:4b:90:1c:81:9a:fe:ec:25:cc:f7:35:d5:39:e4: 06:fd:74:ac:9e:3c:5d:7f:45:47:16:be:a9:72:68: 98:35:12:08:e3:64:ee:b3:99:a7:e1:f2:c8:48:bf: 7c:72:6a:7a:a6:69:50:f0:f5:bc:d5:07:80:d2:c0: dd:c6:56:5b:b3:e2:3d:16:20:bd:00:59:91:89:82: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.36.0/22 IPv6: 2804:522c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268500 Signature Algorithm: sha256WithRSAEncryption a7:d0:b1:45:58:d5:4d:85:79:07:05:bd:80:80:65:bc:76:2f: 23:46:2a:57:be:9e:43:f3:4f:2d:81:d2:4d:9b:2c:3c:ff:60: ee:d0:a8:1b:cc:ed:2f:79:c5:de:e7:13:3a:d6:cb:1d:c9:fd: 84:ee:04:5b:c4:20:b7:d3:67:bf:53:d7:4a:47:63:a5:5b:f7: c6:90:c8:6c:1e:50:3a:52:94:15:df:c1:33:03:76:9f:36:2f: b3:4c:20:ac:d8:46:0c:05:7a:65:0c:5d:2b:a3:4a:75:50:da: 1d:18:28:ba:b1:12:a9:18:77:b8:61:f3:7c:20:c3:b8:c8:f2: dd:fb:b1:75:9a:3b:0f:67:49:17:a8:92:7f:57:fa:ac:71:48: 2a:02:ee:ba:c9:8f:03:61:76:12:64:98:03:0f:aa:1e:68:77: 3c:7c:75:d8:90:dc:b1:2f:a0:be:a1:9c:a1:7d:a6:f5:6a:c0: a1:59:01:f8:c9:43:88:3a:a7:9b:2e:3d:8f:56:15:ec:cd:ee: c7:58:cd:38:8c:2b:40:00:e6:d6:86:48:e2:92:12:f6:49:22: 17:40:c3:0b:af:68:13:d3:a1:19:46:3d:2a:82:a8:13:a3:f6: 7c:69:7b:1e:70:80:6b:9e:ca:c3:c5:1b:5f:5c:f6:44:87:14: bb:ee:31:e7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAuVAUuxRtOhlcLrTFiOfQV+N6xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MzExMzA1MDFaFw0yNjA3MzAxMzEwMDFaMDMxMTAvBgNV BAMTKDA5RDhENEE2NzA2OTU4MEUzNEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKDg/6fQcpKsXMisH3UeAn3DFX XsNydUdzf6KJvt1jXzgskWTNYMjf4BeuMhcJiWBbLRYm5LZq3t2ahM2icS/8yv58 vJDcoSHSazXDqn2SLxDmPHzP81xY+yWfNWp6Z71KkVMlThFJw36Av05vqrRbSrFJ 2S7JGq9pqkbF/CzHy160IEppNf3jU5EetN8igj0VBCtthuHFY+Z+M2YeKkKcEeCP ocIs9UQqXsEMpRGwRZ/T1KVLkByBmv7sJcz3NdU55Ab9dKyePF1/RUcWvqlyaJg1 EgjjZO6zmafh8shIv3xyanqmaVDw9bzVB4DSwN3GVluz4j0WIL0AWZGJgk3bAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ2NSmcGlYDjTx arBHQgvUoI1P8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnlM MURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J5 TDFEVDF3a1pidDNtdUFxYTFUWDFaelgzUGpjNkNmUGhhOWZBeDJvQ1FrLzAvMDlE OEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRBMDhENEZGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaEkMA0EAgACMAcDBQAoBFIsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQY1DANBgkqhkiG9w0BAQsFAAOCAQEAp9CxRVjVTYV5BwW9 gIBlvHYvI0YqV76eQ/NPLYHSTZssPP9g7tCoG8ztL3nF3ucTOtbLHcn9hO4EW8Qg t9Nnv1PXSkdjpVv3xpDIbB5QOlKUFd/BMwN2nzYvs0wgrNhGDAV6ZQxdK6NKdVDa HRgourESqRh3uGHzfCDDuMjy3fuxdZo7D2dJF6iSf1f6rHFIKgLuusmPA2F2EmSY Aw+qHmh3PHx12JDcsS+gvqGcoX2m9WrAoVkB+MlDiDqnmy49j1YV7M3ux1jNOIwr QADm1oZI4pIS9kkiF0DDC69oE9OhGUY9KoKoE6P2fGl7HnCAa57Kw8UbX1z2RIcU u+4x5w== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:46 2025 by rpki-client