$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer File: 2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer (raw, json) Hash identifier: 5ZDEKess9LZu3QLK6sT50xTz/7kxbvuD0RBttCX4Jjc= Subject key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 67F5DDE99E488852730009CF13FA9639162AD5EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft caRepository: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 18:08:55 +0000 Certificate not after: Thu 17 Sep 2026 18:13:55 +0000 Subordinate resources: AS: 264948 IP: 168.232.196.0/22 IP: 2804:3064::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 18:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f5:dd:e9:9e:48:88:52:73:00:09:cf:13:fa:96:39:16:2a:d5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 18 18:08:55 2025 GMT Not After : Sep 17 18:13:55 2026 GMT Subject: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:77:d0:1a:99:8d:48:81:8b:5b:82:01:23: 0f:2a:de:d8:25:80:18:d6:e3:a1:ce:50:c4:f5:9d: 43:21:0d:ed:4d:7c:42:30:2c:94:bd:1d:fc:4e:d4: 5c:87:93:92:67:92:05:cc:e9:79:72:dd:f0:2e:80: c5:86:54:23:f3:06:14:f7:2b:89:58:78:21:c3:1c: c5:41:e7:e0:54:57:4b:6f:a6:eb:23:51:3c:fd:6f: 89:01:74:37:82:24:ca:29:f1:cd:5f:93:49:93:7e: 96:3f:d5:49:ee:68:5c:34:9b:a0:72:d2:39:c7:a7: 03:ec:0b:ec:c6:61:bf:65:b7:5d:53:37:86:82:2e: c5:f6:71:20:69:b4:84:2f:3c:97:60:1a:40:90:d4: 35:ec:71:17:dd:bc:2f:ff:1e:26:09:ac:c8:35:23: e9:41:a6:40:73:8e:14:55:f6:1d:68:e5:c4:75:4a: 0f:2e:ae:3f:a1:c8:19:9f:f0:68:a2:dd:05:df:9f: 2a:d4:c3:1f:1f:05:26:0f:3f:21:eb:de:a8:d5:53: ec:6f:b2:dc:9f:75:72:e8:5c:ae:ef:06:79:62:c5: 1f:78:ce:01:ea:3c:68:ae:cc:cc:61:bd:59:cb:09: 1c:c2:a5:3a:eb:0f:43:09:c0:9e:05:df:c1:1b:15: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.196.0/22 IPv6: 2804:3064::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264948 Signature Algorithm: sha256WithRSAEncryption d6:d6:07:c0:ae:9a:6f:39:80:ff:e8:f8:78:56:7d:8a:c3:32: 99:31:0f:b6:e0:aa:8e:65:ca:0f:76:fb:4b:8f:2a:e7:74:c9: 96:91:8e:05:22:fa:27:1e:49:d5:3b:68:f2:51:c1:72:19:9b: 03:95:33:e7:b0:ed:e8:71:a6:88:17:c1:c7:a9:44:fe:e3:50: 15:aa:8b:7c:9a:72:72:28:b0:00:6c:0d:e7:41:15:4e:e7:37: 1e:f9:43:a6:83:fb:3d:07:be:53:ac:f6:82:df:7a:97:94:ca: b0:7e:56:17:ea:1b:0e:8d:e7:16:88:0e:69:78:27:87:6f:f3: dd:d8:ad:64:6a:00:60:24:27:b1:eb:3a:c5:51:b5:fb:85:a1: d6:de:75:67:fd:92:98:ba:5d:e0:2a:a3:be:d3:01:98:7c:20: b9:a5:8b:af:8e:29:53:06:c4:a5:29:3a:cd:2c:0b:ee:7b:20: ff:b5:3f:67:44:cb:30:10:56:a6:69:bf:af:bd:38:22:ad:42: 6b:5b:03:b2:f9:3a:34:56:17:8a:90:08:a6:b9:40:bd:84:12: c2:ff:ee:ad:ad:14:12:39:84:10:d4:c9:e8:a7:a8:eb:51:7f: c0:e0:9b:4e:31:3d:30:4e:37:bc:12:ef:bd:0f:4b:ce:32:9d: b2:9f:8a:cb -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZ/Xd6Z5IiFJzAAnPE/qWORYq1e4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MTgxODA4NTVaFw0yNjA5MTcxODEzNTVaMDMxMTAvBgNV BAMTKDJGOUY4NDI3QkIyMjEyQzI4RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdXfQGpmNSIGLW4IBIw8q3tgl gBjW46HOUMT1nUMhDe1NfEIwLJS9HfxO1FyHk5JnkgXM6Xly3fAugMWGVCPzBhT3 K4lYeCHDHMVB5+BUV0tvpusjUTz9b4kBdDeCJMop8c1fk0mTfpY/1UnuaFw0m6By 0jnHpwPsC+zGYb9lt11TN4aCLsX2cSBptIQvPJdgGkCQ1DXscRfdvC//HiYJrMg1 I+lBpkBzjhRV9h1o5cR1Sg8urj+hyBmf8Gii3QXfnyrUwx8fBSYPPyHr3qjVU+xv styfdXLoXK7vBnlixR94zgHqPGiuzMxhvVnLCRzCpTrrD0MJwJ4F38EbFQNvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvn4QnuyISwo4D f184aYo5Ett9IDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUJl bk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRqY1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FC ZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAvMkY5 Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkxMkRCN0QyMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqOjEMA0EAgACMAcDBQAoBDBkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQK9DANBgkqhkiG9w0BAQsFAAOCAQEA1tYHwK6abzmA/+j4 eFZ9isMymTEPtuCqjmXKD3b7S48q53TJlpGOBSL6Jx5J1Tto8lHBchmbA5Uz57Dt 6HGmiBfBx6lE/uNQFaqLfJpyciiwAGwN50EVTuc3HvlDpoP7PQe+U6z2gt96l5TK sH5WF+obDo3nFogOaXgnh2/z3ditZGoAYCQnses6xVG1+4Wh1t51Z/2SmLpd4Cqj vtMBmHwguaWLr44pUwbEpSk6zSwL7nsg/7U/Z0TLMBBWpmm/r704Iq1Ca1sDsvk6 NFYXipAIprlAvYQSwv/ura0UEjmEENTJ6Keo61F/wOCbTjE9ME43vBLvvQ9LzjKd sp+Kyw== -----END CERTIFICATE-----Generated at Fri Sep 19 16:31:15 2025 by rpki-client