$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer File: 09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer (raw, json) Hash identifier: ozn+9n9O/7JUOG8c+8fAgtRddcJKGHTzcuzRWlduWMg= Subject key identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D1C9EFA900D9BDC3975398B6E30BF90297C4C90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft caRepository: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Sep 2025 17:16:19 +0000 Certificate not after: Fri 04 Sep 2026 17:21:19 +0000 Subordinate resources: AS: 265419 IP: 168.195.20.0/22 IP: 2804:33d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1c:9e:fa:90:0d:9b:dc:39:75:39:8b:6e:30:bf:90:29:7c:4c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 5 17:16:19 2025 GMT Not After : Sep 4 17:21:19 2026 GMT Subject: CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:01:3b:e2:6f:11:3f:da:ec:6e:c4:85:71: 82:6a:71:dc:12:6c:b8:9f:84:39:92:b4:80:e8:d3: 3b:c7:63:2f:07:b1:6e:81:d9:d8:b9:c0:8d:e0:98: b8:39:ba:80:2e:b5:37:74:a4:b4:d2:e0:7a:72:45: 64:2d:33:f0:39:71:25:87:e2:c0:f2:48:0d:92:a7: 23:f4:a9:cc:43:b2:15:a9:66:86:6f:75:23:5f:74: 99:11:b7:3b:36:a0:04:57:a5:8f:7d:34:e6:a4:e5: 67:a1:66:2d:b0:16:95:55:5d:bb:49:36:f9:90:4f: 26:58:ea:9c:57:b4:0d:02:f1:a7:cd:29:30:f8:62: 36:14:2c:f2:12:bb:ae:29:51:5c:10:6f:d1:c8:37: 21:b4:58:95:6b:e4:c6:1f:cc:89:f9:56:ba:fe:63: b3:b1:cc:ce:57:c2:7e:9d:96:c0:bc:8d:a9:e3:96: 94:d6:85:15:bb:c1:86:7c:8e:3f:34:11:11:ac:75: 4a:a2:87:37:18:de:b7:bb:ac:ac:77:28:73:c2:bd: 59:80:46:04:d5:db:be:5c:90:ab:f6:02:4c:c1:bd: 59:0e:b6:0d:9c:a3:e7:f0:6f:e1:aa:60:cc:e7:5a: 65:dd:d1:9a:cf:c6:d0:b3:2c:f6:6f:6e:02:83:60: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.20.0/22 IPv6: 2804:33d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265419 Signature Algorithm: sha256WithRSAEncryption 18:1e:86:31:e5:8d:b5:c5:17:3e:c7:8b:df:0c:7e:6e:57:d7: 80:4e:a2:3b:17:73:0c:e7:6b:54:31:4b:c6:c8:e2:37:6d:25: 88:8a:c3:0c:fe:80:6d:65:5f:df:ce:b8:35:d5:5a:b6:31:96: 82:8f:fd:33:eb:94:52:4a:87:a8:81:34:2a:69:70:68:42:7a: 7e:c7:6c:be:8b:61:99:da:d9:62:d6:d3:e9:b6:33:76:8c:84: 80:16:a8:43:f7:0b:6b:2b:50:05:73:05:ce:52:6f:48:bb:49: c8:6a:00:97:3e:b4:f5:00:74:00:1e:ac:42:bd:59:b9:b4:97: 6d:dc:fd:a9:e2:37:e5:46:17:6d:98:3d:a2:b2:f1:ab:e1:19: df:c4:1f:e1:c2:8e:20:f4:0b:4a:8a:c5:0b:6e:1c:7b:98:61: 4b:93:fd:c5:19:cb:93:a3:ed:b9:7a:c2:fb:76:e8:4b:fd:bd: 4c:1d:0d:c4:3d:ae:32:1c:37:06:e9:b9:7e:b3:7a:5d:5c:bb: 72:60:35:e0:c5:b6:a5:b5:df:21:80:b5:b5:83:58:ee:7e:30: 1e:26:72:32:7d:80:54:6e:36:ce:e9:4d:0e:4d:7a:67:84:0b: 5c:1c:3a:62:0c:35:ab:58:32:e1:df:97:de:f7:ff:25:3d:1c: be:a9:28:f0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPRye+pANm9w5dTmLbjC/kCl8TJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDUxNzE2MTlaFw0yNjA5MDQxNzIxMTlaMDMxMTAvBgNV BAMTKDA5RkFGN0ZDMjA2MTIyNEMzN0Q3Q0ExNkU3MTg0RTVCRTNGMTI3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvwE74m8RP9rsbsSFcYJqcdwS bLifhDmStIDo0zvHYy8HsW6B2di5wI3gmLg5uoAutTd0pLTS4HpyRWQtM/A5cSWH 4sDySA2SpyP0qcxDshWpZoZvdSNfdJkRtzs2oARXpY99NOak5WehZi2wFpVVXbtJ NvmQTyZY6pxXtA0C8afNKTD4YjYULPISu64pUVwQb9HINyG0WJVr5MYfzIn5Vrr+ Y7OxzM5Xwn6dlsC8janjlpTWhRW7wYZ8jj80ERGsdUqihzcY3re7rKx3KHPCvVmA RgTV275ckKv2AkzBvVkOtg2co+fwb+GqYMznWmXd0ZrPxtCzLPZvbgKDYCnfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ+vf8IGEiTDfX yhbnGE5b4/EnnzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJZ ZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3RyOGMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hy WWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAvMDlG QUY3RkMyMDYxMjI0QzM3RDdDQTE2RTcxODRFNUJFM0YxMjc5Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMMUMA0EAgACMAcDBQAoBDPUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMyzANBgkqhkiG9w0BAQsFAAOCAQEAGB6GMeWNtcUXPseL 3wx+blfXgE6iOxdzDOdrVDFLxsjiN20liIrDDP6AbWVf3864NdVatjGWgo/9M+uU UkqHqIE0KmlwaEJ6fsdsvothmdrZYtbT6bYzdoyEgBaoQ/cLaytQBXMFzlJvSLtJ yGoAlz609QB0AB6sQr1ZubSXbdz9qeI35UYXbZg9orLxq+EZ38Qf4cKOIPQLSorF C24ce5hhS5P9xRnLk6PtuXrC+3boS/29TB0NxD2uMhw3Bum5frN6XVy7cmA14MW2 pbXfIYC1tYNY7n4wHiZyMn2AVG42zulNDk16Z4QLXBw6Ygw1q1gy4d+X3vf/JT0c vqko8A== -----END CERTIFICATE-----Generated at Thu Sep 18 10:29:29 2025 by rpki-client