$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer File: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer (raw, json) Hash identifier: GH9iSR2AyjnDGo2jddGo8G/H29jxAppvhKX5Fl9YvmQ= Subject key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DFEBC4440AC35F1B104E41808388E9230BD9CC3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft caRepository: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 19:08:46 +0000 Certificate not after: Thu 05 Mar 2026 19:13:46 +0000 Subordinate resources: AS: 28219 IP: 186.236.224.0/20 IP: 189.124.16.0/20 IP: 2804:29a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fe:bc:44:40:ac:35:f1:b1:04:e4:18:08:38:8e:92:30:bd:9c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 19:08:46 2025 GMT Not After : Mar 5 19:13:46 2026 GMT Subject: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:f0:1b:b2:98:1e:24:72:2e:94:69:b7:9d: cb:a2:da:d4:e1:44:1a:7c:f2:4b:e3:f0:09:4d:60: 08:5b:98:81:9d:ab:94:ea:8f:c2:35:71:4e:55:9e: b8:40:0d:48:55:a6:94:26:d7:9b:43:a5:0b:01:de: 8f:40:4c:30:85:f3:52:fe:ed:7a:8c:f8:fd:78:01: 96:ad:02:2f:f8:02:a8:1b:08:d6:62:03:42:f8:5b: 7e:90:7d:46:a8:18:ce:6f:f5:75:37:95:80:f3:2b: 19:d1:ab:9b:d5:34:71:1b:ae:a9:19:16:c9:ff:73: 86:7a:66:12:2e:ad:38:31:34:e1:7e:42:b2:20:aa: 07:ea:7d:d0:8f:9f:a0:e5:79:9b:2a:d4:c4:78:77: 01:5e:aa:c0:cd:1b:28:ec:9f:ad:02:63:e2:48:77: 85:ed:2e:c5:b8:cc:71:29:e5:6c:97:37:7b:f8:c5: f0:fe:32:ea:82:c2:89:0d:b7:34:62:d7:4e:f4:14: 44:1e:62:7d:28:36:6f:a0:7b:d4:f7:4e:1c:66:2d: 22:cd:dd:b6:aa:63:0a:c0:ab:ef:a7:20:17:62:45: bb:07:0d:5c:06:15:8d:b1:29:82:b9:02:f3:fc:3e: 77:89:27:3c:e0:34:74:64:a7:ac:56:ec:43:4c:09: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.236.224.0/20 189.124.16.0/20 IPv6: 2804:29a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28219 Signature Algorithm: sha256WithRSAEncryption 95:ac:c4:4e:30:ed:66:08:ae:ac:bb:e4:fb:fb:26:03:d2:88: 38:3c:c4:4f:14:03:e0:d8:a6:b8:9e:d2:9b:cc:c8:e1:65:3d: ca:0c:24:4a:2a:83:27:96:fd:c2:2e:07:b9:90:ac:e3:1b:54: a0:d9:b1:88:60:21:56:69:2b:47:50:f1:d2:91:16:70:43:7b: 84:23:62:fd:e7:ab:08:e0:ed:2b:0e:35:ba:ca:8d:21:40:9c: 30:2e:08:f6:51:29:51:b8:14:53:bd:3b:d1:74:a3:26:11:f9: c5:bf:69:67:05:ef:4b:40:13:43:4d:cc:0a:51:d6:4e:19:e6: 85:4a:e9:86:15:4f:2c:30:50:b7:d9:5e:68:93:5f:3f:d6:ec: da:df:b1:ca:b5:96:37:08:44:b1:0d:c1:b6:d6:74:16:e3:ff: 3c:2e:9c:fc:59:91:7e:0e:2f:3a:a5:0d:01:7f:c9:e9:1e:9e: da:ac:b3:13:a4:39:a2:b8:fb:ff:13:97:2b:79:12:15:45:3a: e7:6d:b4:13:1e:ff:28:eb:d5:f6:5f:63:7e:4f:00:f2:72:ca: 44:f6:00:68:1c:a8:70:8d:43:26:89:12:70:cf:95:2a:57:d0: 38:8d:c2:1a:06:18:ce:08:c8:cf:50:25:57:03:00:6f:8a:cc: 5c:22:29:73 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUHf68RECsNfGxBOQYCDiOkjC9nMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxOTA4NDZaFw0yNjAzMDUxOTEzNDZaMDMxMTAvBgNV BAMTKDgwOUQ5RkQyRjc0MUNEMkM2RUFDQTkxQkNBOEQyOTU4MjQ5NDg1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyvAbspgeJHIulGm3ncui2tTh RBp88kvj8AlNYAhbmIGdq5Tqj8I1cU5VnrhADUhVppQm15tDpQsB3o9ATDCF81L+ 7XqM+P14AZatAi/4AqgbCNZiA0L4W36QfUaoGM5v9XU3lYDzKxnRq5vVNHEbrqkZ Fsn/c4Z6ZhIurTgxNOF+QrIgqgfqfdCPn6DleZsq1MR4dwFeqsDNGyjsn60CY+JI d4XtLsW4zHEp5WyXN3v4xfD+MuqCwokNtzRi1070FEQeYn0oNm+ge9T3ThxmLSLN 3baqYwrAq++nIBdiRbsHDVwGFY2xKYK5AvP8PneJJzzgNHRkp6xW7ENMCaN9AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAnZ/S90HNLG6s qRvKjSlYJJSFbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Vm N3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1Vm N3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMS84MDlE OUZEMkY3NDFDRDJDNkVBQ0E5MUJDQThEMjk1ODI0OTQ4NTZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAS67OADBAS9fBAwDQQCAAIwBwMFACgEKaAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICbjswDQYJKoZIhvcNAQELBQADggEBAJWsxE4w7WYI rqy75Pv7JgPSiDg8xE8UA+DYprie0pvMyOFlPcoMJEoqgyeW/cIuB7mQrOMbVKDZ sYhgIVZpK0dQ8dKRFnBDe4QjYv3nqwjg7SsONbrKjSFAnDAuCPZRKVG4FFO9O9F0 oyYR+cW/aWcF70tAE0NNzApR1k4Z5oVK6YYVTywwULfZXmiTXz/W7Nrfscq1ljcI RLENwbbWdBbj/zwunPxZkX4OLzqlDQF/yekentqssxOkOaK4+/8Tlyt5EhVFOudt tBMe/yjr1fZfY35PAPJyykT2AGgcqHCNQyaJEnDPlSpX0DiNwhoGGM4IyM9QJVcD AG+KzFwiKXM= -----END CERTIFICATE-----Generated at Mon Nov 3 05:22:09 2025 by rpki-client