$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer File: 2C9FA99864590E029577FEA8F4939F2B71325AE2.cer (raw, json) Hash identifier: 0KOZv6WiN1GHFd+2gNNgMC2kv0TRhLMYDHymL2AQsho= Subject key identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 45F830675584AB8D7D5B12092622A71149AD9806 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft caRepository: rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 22:21:20 +0000 Certificate not after: Tue 07 Jul 2026 22:26:20 +0000 Subordinate resources: AS: 264400 IP: 131.161.208.0/22 IP: 2804:1de0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f8:30:67:55:84:ab:8d:7d:5b:12:09:26:22:a7:11:49:ad:98:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 22:21:20 2025 GMT Not After : Jul 7 22:26:20 2026 GMT Subject: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:4c:1f:68:6f:d8:37:8b:16:66:cb:7b:ff: 7f:b1:db:ac:51:34:f9:e1:6f:f9:e3:4c:8a:2d:a1: 48:4f:d6:21:c8:6c:1f:9e:86:4a:3e:51:0a:a8:db: a1:36:aa:27:56:71:b6:a6:5a:51:41:e5:d2:04:eb: 2f:40:03:2f:f7:56:5b:ac:d2:ca:d7:ae:05:df:cd: 20:f0:60:6c:3c:ff:db:19:a7:a6:2b:75:b4:cf:e6: 53:e3:c9:9d:f2:7e:97:5a:0d:40:87:43:4c:42:80: fe:ab:f9:23:a9:25:81:90:97:8c:24:e3:24:a6:52: e8:4f:27:bf:a2:16:41:71:2b:aa:46:85:a0:c0:25: 94:61:cf:87:96:d0:61:69:b6:21:9e:74:dd:e4:87: 8d:00:f1:6e:70:18:7a:79:4a:bf:53:a1:1f:95:c6: b3:5e:3f:c6:6e:01:9f:bf:1c:c2:58:89:ef:ae:54: 12:3b:5b:97:76:81:98:b1:fa:3a:b1:df:8c:9a:06: 55:29:df:9e:cb:79:c1:6f:33:50:78:2a:cb:66:2f: 39:28:ba:f5:2d:23:c8:ab:fa:f1:76:69:52:de:86: a3:0e:d9:a2:d5:bd:93:c1:30:76:d6:80:03:2f:04: aa:56:11:b8:de:c6:78:56:e1:2e:0f:a3:ed:de:2d: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.208.0/22 IPv6: 2804:1de0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264400 Signature Algorithm: sha256WithRSAEncryption 4e:64:a8:d6:5d:e0:3c:12:43:17:cc:f7:24:db:9c:ec:af:32: cc:3a:e2:1e:f8:59:36:cd:99:f9:c4:45:4f:d8:f1:2b:94:17: 58:27:ce:bb:b2:93:1f:b0:82:a5:b4:05:db:96:a1:f8:8d:45: de:e6:42:1a:91:43:ef:b7:ed:2f:77:9d:75:de:4e:b6:d3:84: 63:e9:4a:6d:6a:a7:e6:59:70:64:2c:26:21:76:cb:7b:81:a9: 74:11:a5:c4:84:5d:90:5b:1b:6d:42:2e:81:b1:52:22:23:ea: 3c:cd:91:79:33:0f:36:bf:e9:20:8e:82:61:df:59:ff:91:94: c6:d1:ee:06:3c:2a:f1:dc:49:c9:7b:cb:22:40:a5:37:58:c4: a4:8e:67:3b:f1:57:62:32:f7:cd:81:f9:c9:30:0d:cd:d6:25: 99:37:9a:3d:e6:b8:9d:0b:fd:02:e4:c8:4d:1a:61:bf:38:99: 9f:b9:a0:ef:4c:c2:b5:27:08:64:6a:a3:01:32:5f:30:8c:29: 73:ff:2c:0d:f9:74:54:18:5b:8b:25:a0:f2:56:ea:02:c0:5d: 2f:58:b3:8b:41:f0:a1:a4:e8:85:18:4d:31:2a:ad:13:41:f1: a3:ab:da:8a:9b:72:00:65:b6:59:42:b9:88:95:79:14:d1:ea: f4:a3:ca:aa -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURfgwZ1WEq419WxIJJiKnEUmtmAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDgyMjIxMjBaFw0yNjA3MDcyMjI2MjBaMDMxMTAvBgNV BAMTKDJDOUZBOTk4NjQ1OTBFMDI5NTc3RkVBOEY0OTM5RjJCNzEzMjVBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgCEwfaG/YN4sWZst7/3+x26xR NPnhb/njTIotoUhP1iHIbB+ehko+UQqo26E2qidWcbamWlFB5dIE6y9AAy/3Vlus 0srXrgXfzSDwYGw8/9sZp6YrdbTP5lPjyZ3yfpdaDUCHQ0xCgP6r+SOpJYGQl4wk 4ySmUuhPJ7+iFkFxK6pGhaDAJZRhz4eW0GFptiGedN3kh40A8W5wGHp5Sr9ToR+V xrNeP8ZuAZ+/HMJYie+uVBI7W5d2gZix+jqx34yaBlUp357LecFvM1B4KstmLzko uvUtI8ir+vF2aVLehqMO2aLVvZPBMHbWgAMvBKpWEbjexnhW4S4Po+3eLXNjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsn6mYZFkOApV3 /qj0k58rcTJa4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkJ2 ek5mdWhnNEJhaUhyNWN1UG9xWHJpNUxycm5wZnFlbWtjYTF1V1VzWm8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZC dnpOZnVoZzRCYWlIcjVjdVBvcVhyaTVMcnJucGZxZW1rY2ExdVdVc1pvLzAvMkM5 RkE5OTg2NDU5MEUwMjk1NzdGRUE4RjQ5MzlGMkI3MTMyNUFFMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg6HQMA0EAgACMAcDBQAoBB3gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQI0DANBgkqhkiG9w0BAQsFAAOCAQEATmSo1l3gPBJDF8z3 JNuc7K8yzDriHvhZNs2Z+cRFT9jxK5QXWCfOu7KTH7CCpbQF25ah+I1F3uZCGpFD 77ftL3eddd5OttOEY+lKbWqn5llwZCwmIXbLe4GpdBGlxIRdkFsbbUIugbFSIiPq PM2ReTMPNr/pII6CYd9Z/5GUxtHuBjwq8dxJyXvLIkClN1jEpI5nO/FXYjL3zYH5 yTANzdYlmTeaPea4nQv9AuTITRphvziZn7mg70zCtScIZGqjATJfMIwpc/8sDfl0 VBhbiyWg8lbqAsBdL1izi0HwoaTohRhNMSqtE0Hxo6vaiptyAGW2WUK5iJV5FNHq 9KPKqg== -----END CERTIFICATE-----Generated at Mon Nov 3 05:36:35 2025 by rpki-client